Privacy Policy
Last updated: July 8, 2026
This policy explains what information Zapanapa ("we", "us") collects at zapanapa.com, how we use it, and the choices you have. We keep it as plain as we can.
1. Information we collect
- Account information. If you create an account: your first name, email address, and a hashed version of your password. We never store your password in readable form.
- Advertising attribution. If you arrive from an ad, we may store campaign identifiers from the URL (such as gclid or UTM parameters), the landing page, and the referring site, and associate them with your account if you register.
- Technical information. Standard server logs: IP address, browser type, approximate country, and timestamps.
We do not collect payment information because nothing here can be purchased.
2. How we use it
- To run the Site and keep your session signed in.
- To send you the email you asked for: a confirmation link, and announcements when new games land.
- To measure which ads bring visitors who actually enjoy the Site, using the attribution data described above.
- To protect the Site from abuse.
3. Game providers
Games are loaded directly from the servers of the game studio that makes them. When you launch a game, your browser connects to that provider's servers, and the provider receives your IP address and standard technical data, the same as when any web page loads. We do not send the provider your name or email.
4. Sharing
We do not sell your personal information, and we do not share it with third parties for their own marketing. We share data only with service providers who host our infrastructure and process it on our instructions, or when the law requires it.
5. Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to:
- Know what personal information we have collected about you and receive a copy.
- Delete your personal information.
- Correct inaccurate personal information.
- Opt out of sale or sharing. We do not sell your personal information and we do not share it for cross-context behavioral advertising. There is nothing to opt out of, but if that ever changes we will provide a "Do Not Sell or Share My Personal Information" link first.
- Non-discrimination. We will never treat you differently for exercising these rights.
To exercise any of these rights, email privacy@zapanapa.com from the address on your account. We respond within 45 days.
6. Children (COPPA)
The Site is for adults 21 and older. We do not knowingly collect personal information from anyone under 21, let alone children under 13. If you believe a minor has provided us information, email privacy@zapanapa.com and we will delete it promptly.
7. Cookies and local storage
We use one session cookie to keep you signed in, and browser local storage to remember ad attribution between pages. We do not run third-party advertising or analytics cookies on the Site.
8. Data retention
We keep account data while your account exists. Ask us to delete your account and we remove it. Server logs rotate on a short schedule.
9. Security
Passwords are hashed with PBKDF2, sessions are signed, and the Site runs over HTTPS. No system is perfectly secure, but we keep the surface small: we simply do not hold data we do not need.
10. Changes
If we change this policy, we update the date at the top. Meaningful changes will be flagged on the Site.
11. Contact
Privacy questions and requests: privacy@zapanapa.com
Everything else: support@zapanapa.com