Draft — pending legal review. Last updated 2026-09-25.
ARG Zombie is a location-based game made by Tando Productions (“we”). This policy explains what we collect when you play, why, how long we keep it, and how to delete it. Questions: support@argzombie.com.
What we collect
- Account. Your email address, or the account identifier (and email, if you share it) that Sign in with Apple or Google gives us, and the display name you choose.
- Location. While the game is open, your phone sends its GPS position, its accuracy, and whether the system reports it as a mock location. We also store the home location you set, and which real buildings you raid and when. We don’t track you when the game is closed.
- Game data. Your survivor, inventory, base, recruits, raids, and run history.
- Technical data. Your IP address and app version reach our servers with every request, and appear in short-lived server logs. Crash and error reports (through Sentry) contain technical details only: no email address and no IP address.
The phone’s camera is used only on your device to scan QR codes. We don’t receive camera images, contacts, or anything else from your phone.
Why we use it
- To run the game: put you on the map, show the buildings near you, and check that a raid starts where you actually are.
- To keep it fair: we check location reports for impossible speeds, jumps, and spoofing, and a movement lockout stops play while you’re driving.
- To sign you in, including on the web with a QR code from your phone.
- To fix bugs and keep the service secure.
We don’t sell your data, show ads, or share your location with advertisers.
Who else handles it
Service providers that run parts of ARG Zombie for us, under contract: Amazon Web Services (hosting and database, and Amazon SES for sign-in emails), Sentry (crash reports), and Apple or Google if you sign in with them. Map tiles come from OpenStreetMap-based services, which see the map area your device requests. We disclose data if the law requires it.
How long we keep it
- Raw location reports: 30 days, then they’re deleted automatically.
- Server logs: up to 30 days.
- Account and game data: until you delete your account.
- Database backups: deleted data can remain in encrypted backups for up to 30 days before they expire.
Deleting your account
You can delete your account and its data at any time, in the app under Settings → Delete account or on the web. See how to delete your account. We keep only a record that an account was deleted, without your email.
Your rights
Depending on where you live, you can ask to see, correct, export, or delete your data, and object to how we use it. Email support@argzombie.com and we’ll answer within 30 days.
Children
ARG Zombie is not meant for children under 13 (or the minimum age in your country). If you believe a child has given us data, contact us and we’ll delete it.
Changes
If we change this policy we’ll update the date above, and tell you in the app for significant changes.