1. Who we are
WebTailor, doing business as Zerkzee ("we") operates Zerkzee Pixel Arcade at pixelgames.app and in the installable app. Zerkzee is the brand; the arcade is the product. Our business address is 205 Hilda Avenue, North York, Ontario M2M 4B1, Canada.
Our Privacy Officer is responsible for how we handle personal information and can be reached at [email protected]. Players in Quebec: this is the person in charge of the protection of personal information under the Act respecting the protection of personal information in the private sector.
2. Children and age
Our games are made to be safe for everyone, including children, and we assume children will play. Here is how age works:
- Guests: anyone can play as a guest. Guests have no account and tell us nothing about themselves. We keep only the technical data in section 4 and your saves on your own device.
- Accounts: you must be at least 13, or the age of digital consent where you live if that is higher (14 in Quebec; 13 to 16 in the European Union depending on the country; 13 in the United Kingdom), to create an account. If you are younger, keep playing as a guest.
- Under 16: accounts get kid-safe defaults you cannot switch off: a player name chosen from our generated list, no gem (paid currency) purchases, no personalised ads, and privacy settings at their highest level.
- Age band only: at sign-up we ask which age band you are in. We store the band, never your birthdate.
If we learn that an account was created by a child below the account age without the consent the law requires, we delete the account and the personal information in it. Parents and guardians can ask us to do this at any time at [email protected]. See the Parents page for the full picture.
3. What we collect when you have an account
| Information | Why we need it | Where it comes from |
|---|---|---|
| Email address | Sign-in codes, account recovery, legally required notices. Never marketing unless you opt in later. | You |
| Player name | Shown on leaderboards and the emote wall. Under 13 bands pick from generated names; older players type a name that passes our safety filter. | You, filtered by us |
| Age band | Turns kid-safe defaults on. Stored as a band (for example "13 to 15"), never a birthdate. | You |
| Avatar, coins, gems, inventory, titles, badges, XP, streaks | Your progress across every game. Cosmetics only: nothing here changes a score. | Your play |
| Runs: seed, input log, score, ticks, game version | Every ranked score is replayed on our server to check it is real. The input log is the list of button presses in a run, not a recording of you. | Your play |
| Emotes you send | One fixed emote per run, shown next to your name. There is no free text. | You |
| Purchases: what you bought, when, the Stripe payment reference | Delivering cosmetics, refunds, accounting. We never see or store card numbers; Stripe does. | You, via Stripe |
| Linked partner site (if you came from one) | Shows your score on that site's own board as well as ours. | The site you played on |
We do not collect precise location, contacts, photos, microphone or camera data, biometric data, or anything typed freely. The arcade has no chat.
4. Technical data (guests and accounts)
To run the arcade, keep scores honest and fix crashes we also process:
- A random device identifier stored in your browser. It lets guests save progress on one device, counts how many different players tried a Beta game, and stops one device claiming the guest bonus twice. It is not linked to your name, is never used for advertising or profiling, and is not shared with anyone. Under US COPPA this is "support for internal operations" and we use it only for that.
- Crash and error reports from any game: the game and version, where in the run it happened, the error message, the browser and screen size, and the last few actions in the game. We do not include your name or email.
- Bug reports you choose to send: a category you pick, an optional short note (280 characters, seen only by the studio, never shown to other players), a picture of the game screen, and the run's input log. Please do not put personal details in the note.
- Server logs: IP address, time, and the request made, kept briefly for security and to stop abuse.
5. Why we are allowed to use it
Where the law asks for a legal basis (for example in the EU, UK, Quebec or California) we rely on:
- Performing our agreement with you: running the arcade, saving progress, delivering what you bought.
- Our legitimate interest in keeping leaderboards honest, fixing bugs, and keeping the service secure, balanced against your rights. For children we hold ourselves to a higher bar and collect less.
- Your consent, where we ask for it (optional emails, future features). You can withdraw it any time.
- Legal obligations: tax and accounting records for purchases, responding to lawful requests.
7. How long we keep it
| Data | Kept for | Then |
|---|---|---|
| Account (email, name, avatar, inventory, scores) | While the account is active, plus 24 months of inactivity | Deleted. Scores on public boards are replaced by "Retired player". |
| Run input logs | 90 days after the run is verified | Deleted. The verified score stays. |
| Guest device identifier | 30 days after the last visit | Deleted from our servers (your browser keeps its own copy until you clear it). |
| Crash, error and bug reports | 12 months | Deleted, or kept only as anonymous counts. |
| Purchase records | 7 years | Deleted. Canadian tax law requires us to keep accounting records for at least 6 years. |
| Server logs | 30 days | Deleted. |
You can delete your account sooner at any time (section 8). We never keep children's information for longer than we need it for the purpose we collected it.
8. Your rights and choices
Wherever you live you can ask us to:
- Show you the personal information we hold about you and give you a copy you can take elsewhere.
- Correct it, delete it, or delete your whole account.
- Stop using it for a purpose you agreed to (withdraw consent).
- Explain any automated decision. The only automated decision we make is whether a score passes the replay check; a failed check hides that score and, after repeated failures, the account from boards. You can ask a person to review it.
Write to [email protected]. We answer within 30 days (sooner for children's requests) and we may ask you to prove you own the account. Parents and guardians can act for their child. If you are unhappy with our answer you can complain to your privacy regulator: the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, your EU data protection authority, the UK ICO, or the US FTC.
California players: we do not sell or share personal information as the CCPA defines those terms, and we do not knowingly sell or share information about anyone under 16.
9. How we protect it
Everything travels over HTTPS. Player data sits behind row-level security so each player can read only their own rows. Run tokens are signed and short-lived and are never stored, only their hash. Access to the database is limited to the people who run the arcade, using separate accounts with two-factor authentication. We keep a written security programme for children's data, review it at least once a year, and will tell you and the regulator if a breach puts you at risk.
11. Changes to this policy
When we change this policy we update the date at the top and, for changes that matter, show a notice in the arcade before they take effect. If a change would use children's information in a new way we ask again first.
12. Contact
Privacy Officer, WebTailor, 205 Hilda Avenue, North York, Ontario M2M 4B1, Canada. Privacy contact: [email protected]. General help: [email protected].