Privacy policy.

Zombies Records is operated by CZR — independent community project. For privacy questions or requests, contact privacy@czr.prism.am.

The service infrastructure is hosted by OVHcloud.

• Account data: display name, email address, password hash, roles and account dates.
• Session security data: session token, IP address, browser user agent and expiry date.
• Public profile data: avatar, background, profile colours, records, rankings, achievements, clan membership and selected public activity.
• Competitive data: submissions, scores, durations, proof links, participants, comments, votes, follows, personal runs and moderation decisions.
• Technical data required for abuse prevention, health monitoring and security logs, including request identifiers and short-lived rate-limit counters.

We do not currently use advertising cookies or third-party behavioural analytics.

We process this information to:

• create and secure accounts, sessions and password resets;
• publish and maintain competitive leaderboards and player profiles;
• review records, detect duplicate or abusive activity and enforce community rules;
• provide clans, follows, comments, votes, achievements and performance statistics;
• keep the service reliable, prevent spam and investigate security incidents.

The main legal bases are performance of the service requested by the user, the operator’s legitimate interest in running a secure community platform, and legal obligations where applicable.

Display names, profile media, verified records, rankings, achievements, comments and clan information are intended to be public. Do not publish personal information in a profile, comment or proof that you do not want others to see.

Proofs hosted by third parties remain subject to their own privacy policies. YouTube videos are embedded using YouTube’s privacy-enhanced domain when possible.

Data is stored in the platform database and file storage. Access is limited to the operator and authorised moderators where needed. Hosting and email delivery providers process only the information required to provide their services.

We do not sell personal information. Data may be disclosed when legally required or when necessary to protect users, the platform or third parties from fraud, abuse or security threats.

Account information is retained while the account is active. Sessions and password-reset tokens expire automatically. Short-lived security counters expire automatically, while operational logs are retained only as long as reasonably needed for reliability and incident investigation.

Deleting an account removes authentication data and anonymises information that must remain to preserve the integrity of historical leaderboards.

You can update profile information or delete your account from profile settings. Depending on your location, you may also request access, correction, deletion, restriction, portability or object to certain processing.

Send requests to privacy@czr.prism.am. We may need to verify your identity before acting on a request.

The site uses one essential, HTTP-only session cookie to keep signed-in users authenticated. It is not used for advertising. Blocking it prevents account features from working.

Reasonable technical safeguards are used, including hashed passwords, access controls, request limits, restricted upload sizes and encrypted HTTPS transport. No online service can guarantee absolute security.

This policy may change when the service or its providers change. Material updates will be announced on the site and the date at the top of this page will be updated.