Privacy Policy

Last updated: November 5, 2025

Zoomst is operated by Zoomst LLC, a Delaware (USA) limited liability company.

1. What We Collect

Accounts

To play Zoomst, you are automatically signed in with an anonymous account. Anonymous accounts receive a user ID (UID) but no email address or display name. You can optionally sign in with Google to sync your gameplay across devices, in which case we receive your UID, display name, and email address.

Gameplay

All users are authenticated (either anonymously or with Google). Your gameplay data (e.g., play history, guesses, streaks) is synced to your account in Firebase Firestore and associated with your UID.

Analytics (Optional, Off by Default)

If you enable analytics, we use Google Analytics to understand basic usage (page views, feature usage). Analytics is off unless you turn it on in your Privacy Settings.

reCAPTCHA and App Check

We may use Google reCAPTCHA to protect forms and Firebase App Check to prevent abuse of our APIs. These services may collect limited technical information per Google's policies for security purposes.

Notifications

If you opt in to push notifications, we use Firebase Cloud Messaging (FCM) to deliver them. Notification tokens are used with the messaging provider and not stored on our servers beyond the delivery request.

Cookies & Local Storage

We use a secure, HTTP-only cookie to keep you signed in and local storage/IndexedDB to store your preferences. You can clear these in your browser settings.

2. What We Don't Do

  • We don't sell your data.
  • We don't track you across other sites for ads.

3. Your Choices

Game Data: Your gameplay is synced to your account. You can also clear your browser site data to remove locally stored preferences.

Analytics: Use Privacy Settings to turn analytics on or off.

Notifications: You can enable/disable push notifications in your browser or device settings and inside the app.

4. Third-Party Services

We rely on these providers:

  • Google: Account sign-in.
  • Firebase Firestore: Stores signed-in gameplay.
  • Firebase Cloud Messaging: Delivers optional push notifications.
  • Google Analytics (optional): Usage stats if enabled.
  • Google reCAPTCHA & Firebase App Check: Abuse prevention and security.

These services have their own privacy policies and process data to provide services to Zoomst LLC.

5. Data Retention

Your gameplay data in Firestore is retained until your account is deleted. Session cookies expire automatically.

6. Security

We use HTTPS and Firebase security features to protect data. Keeping your device and account secure also helps protect your information.

7. Children

Zoomst is intended for users 13 and older. If you are a parent or guardian and believe a child under 13 has used the game, you can clear browser storage on their device and contact us.

8. Changes

If we make significant changes to this policy, we will update the date above and provide a notice in the app.

9. Contact & Data Requests

Questions or requests (including account or gameplay deletion)? Email support@zoomst.xyz.