1. Scope and privacy contact
The service is operated under the name Zawa Games. In this policy, “we”, “us”, and “our” refer to the operator using that name. Zawa Games is the operating name, not a statement that a company with that name has been incorporated.
This policy concerns Zawa Games and the services offered through zawagames.com and zawa.games. It covers browsing the website, signing in, connecting or using a wallet, interacting with other users, participating in games, and contacting support.
For questions about this policy or requests concerning your personal information, email [email protected]. Do not send passwords, wallet recovery phrases, private keys, or authentication codes to this address.
2. Account information and Google sign-in
Zawa Games uses Privy to support sign-in with email, Google, Telegram, and wallets, and to associate linked sign-in methods with an application account. Privy processes authentication information and provides an account identifier and information about linked accounts to the application.
If you choose Google sign-in, Google and Privy process the basic identity information made available through the authorization flow, which can include your Google account identifier, email address, name, and profile image. The information shared depends on the permissions shown by Google and the information available on your account. It is used to authenticate you and link your sign-in to your Zawa Games account and wallet features.
The Google integration in Zawa Games is for sign-in. It does not request access to your Gmail messages, Google Drive files, Google Calendar, or Google Contacts. You enter your Google password with Google, not in a Zawa Games password form.
The application stores its own user identifier, username, display name, avatar, biography, and linked wallet information. Google identity information handled by Privy is distinct from the public profile you create in Zawa Games; signing in does not by itself mean that all Google profile fields are copied into our application database. If you use Telegram sign-in, available Telegram profile information may be used to initialize your application profile.
3. Information from using the service
The information processed depends on the features you use. It includes information you provide, records of your interactions, and technical information needed to deliver and protect the service.
- Profile edits, uploaded images, comments, follows, favorites, messages, and related delivery or read-status information.
- Game-room activity, wallet addresses, transaction identifiers, bets, outcomes, rewards, withdrawals, referral relationships, and payout records associated with your account.
- Support emails and any information you choose to include when reporting an issue or making a privacy request.
- Technical request and error information, such as IP addresses, browser or device information, requested URLs, timestamps, and diagnostic details processed by our application or infrastructure providers.
4. Wallets, public profiles, and blockchain records
Privy provides embedded wallet functionality, and users can also connect supported external wallets. Wallet identifiers and transaction information are processed to link accounts, check wallet ownership, display activity, and carry out the wallet operations requested through the product.
Wallet addresses and blockchain transactions are generally public. When you connect a wallet or submit a transaction, related information may be permanently visible on the relevant network and available from third-party block explorers.
Public application profiles, comments, and game activity can make information you publish visible to other users. Account-linked activity can allow others to associate a public profile with a wallet or transaction. Messages are provided to their intended recipients and processed by the services that deliver and store them; do not assume that they are end-to-end encrypted.
Zawa Games cannot delete or alter records already written to a public blockchain. Removing an application account or off-chain record cannot remove blockchain records or copies independently held by other people.
5. How information is used
Information is used to sign users in, maintain profiles and linked wallets, operate game and transaction features, display account and on-chain activity, deliver messages, calculate referrals and rewards, answer support requests, diagnose errors, and detect or prevent abuse.
Website interaction information, where analytics is enabled, is used to understand visits, navigation, and use of product links. Information may also be processed to respond to legal requests or protect users and the service. The Google sign-in integration does not grant access to unrelated Google products or their contents.
We do not sell personal information. We do not use or share Google sign-in data for targeted or personalized advertising, advertising profiles, or the training of general-purpose artificial intelligence or machine-learning models. Google user data is used to deliver or improve the features you use, not for unrelated purposes.
Our handling of information obtained through Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.
6. Cookies, browser storage, and analytics
The service uses cookies and browser storage for authentication, language preferences, and application state. Some application data is cached in local storage or session storage to make navigation and messaging work efficiently. Clearing browser storage can sign you out or reset preferences; it does not delete information already stored on our servers or on a blockchain.
The website includes an optional Google Analytics integration. Where enabled, it sends page and interaction information to Google, including tracked button or link events, event labels, and destination URLs, together with technical and browser information processed by the Analytics service. This is separate from Google sign-in and is used to understand website usage. We do not describe this information as fully anonymous.
You can use browser controls to restrict cookies and site storage. Some essential functions may not work when they are blocked. Google also provides information about its processing and user controls in its privacy policy at https://policies.google.com/privacy.
7. Service providers and disclosures
The following providers support the service and process information relevant to their functions. Not every provider receives every category of information, and not every interaction sends Google sign-in data to each provider.
- Google and Privy: Google sign-in and authentication; Privy also provides linked-account and embedded wallet services.
- Railway and Supabase: application hosting and storage of application records. Application caches and infrastructure logs also support operation and security.
- Cloudflare: website delivery and protection, and storage and delivery of uploaded images through Cloudflare Images.
- Google Workspace: receipt and handling of support emails. Google Analytics: website measurement where the integration is enabled.
- Blockchain networks, RPC providers, external wallets, and recipients: processing of blockchain requests and transactions, and delivery of information you choose to share or publish.
- Authorities or advisers where disclosure is required by applicable law or necessary to address abuse, disputes, or security incidents.
8. Storage and security
Account and application records are processed by the application backend and its database and hosting providers. Privy separately processes authentication and linked-account information as part of its service. Uploaded images, support correspondence, and blockchain records are handled by the providers described above.
Our public websites use HTTPS. Authenticated application requests use access tokens, and backend checks restrict account-specific operations to authorized users. Browser caches and server infrastructure also hold information, so signing out is not equivalent to deleting all records. No online service, wallet, or blockchain interaction can be guaranteed to be completely secure.
Service providers operate infrastructure in different locations. Processing may take place outside your country of residence; the country selected for an email or cloud billing account does not establish where every category of application data is stored.
9. Retention and deletion requests
We retain account and profile records while they are needed to provide your account and the features you use. Other records are retained according to their purpose: message delivery and history, support follow-up, transaction reconciliation, security investigations, or the resolution of disputes and applicable legal obligations. We do not apply one fixed retention period to every category. When the relevant purpose and any required retention end, the affected off-chain personal information is deleted or de-identified.
To request deletion of your Zawa Games account or personal information, email [email protected] with your application username or user identifier and a description of the request. Do not include credentials or wallet secrets. Verification of your connection to the account may be needed before a request can be acted on.
Requests are reviewed and handled manually. We assess the off-chain account, profile, uploaded content, and associated records covered by the request, and coordinate with relevant service providers where needed. If particular records must be retained for legal obligations, unresolved transactions or disputes, or a security investigation, we explain the applicable limitation. We do not promise immediate deletion or a fixed completion time; applicable legal response requirements still apply. Data in backups or provider-managed systems may take additional time to be removed through their retention cycles.
Revoking Google access, unlinking a sign-in method, clearing browser storage, and deleting an application account are different actions. Revocation stops the relevant authorization but does not by itself erase existing application or provider records. Public blockchain records cannot be erased by Zawa Games, and copies shared with other users are not necessarily under our control.
10. Your choices and requests
You can edit profile information using the available account settings and manage third-party access in your Google Account at https://myaccount.google.com/connections. Revoking a sign-in authorization can affect access to Zawa Games; make sure you retain an appropriate way to access your account and wallet.
Depending on your location, you may have rights to request access, correction, deletion, restriction, or a copy of certain personal information. You may also be able to object to or withdraw consent for particular processing.
Send requests or concerns to [email protected]. Describe what you want us to review and provide only the information necessary to identify your account. Where applicable, you may also raise a concern with your local data protection authority.
11. Children and policy changes
Zawa Games is not intended for children who are below the minimum age required by applicable law. If you believe a child has provided personal information, contact [email protected]. This privacy policy does not establish eligibility to participate in any game or determine whether use is permitted in a particular jurisdiction.
We may update this policy when the service or its data handling changes. The date at the top identifies the latest revision. We will communicate material changes to the use of Google user data before putting them into effect and obtain any additional authorization required for new access.