Cookie Policy
Last updated 2026-08-01
This page lists everything Zip Lands stores in your browser, what each item is for, and how long it stays. Cookies are small files a site saves in your browser and reads back later. Local storage works the same way for our purposes, so we treat it the same here and this policy covers both. The short version is that we set two kinds of storage. The first kind is what makes signing in and playing possible, and it has to be there. The second kind is analytics, it is entirely optional, and it does not exist until you say yes.
1.Nothing analytical happens before you choose
On your first visit you get a consent banner from Cloudflare Zaraz, which is both our tag manager and our consent manager. Until you make a choice, the only things stored are the strictly necessary items in the table below, plus the record of the choice itself once you make one.
If you decline analytics, or simply close the banner without accepting, no Google Analytics tag is loaded, no analytics identifier is created, and no analytics request leaves your browser. There is nothing to opt out of afterwards because nothing was ever set. The game plays identically either way and we do not put features behind accepting.
Strictly necessary storage does not need your consent under Article 11.7a of the Dutch Telecommunications Act, because without it you cannot sign in or stay signed in. Everything else does need it, and we ask.
2.What we store, item by item
| Name | Set by | Category | Purpose | Storage period |
|---|---|---|---|---|
| zip_lands.session_token | Zip Lands (first party) | Strictly necessary | Your sign-in session. It tells our servers that this browser is signed in as you. It is set only after you sign in, and it is an HttpOnly, Secure, SameSite cookie so scripts cannot read it. | Until the session expires or you sign out. Sessions currently last 60 days, and playing refreshes them so an active player is not signed out mid world. |
| zip_lands.session_data, and related zip_lands entries | Zip Lands (first party) | Strictly necessary | Supporting values for the sign-in flow, such as cached session data and the state of a two-factor or password reset step in progress. | Session, or up to the life of the sign-in session. |
| cf_clearance and cookies beginning cf_chl_ | Cloudflare Turnstile | Strictly necessary | Records that this browser passed the Turnstile check on the sign-up, sign-in or password reset form, so you are not challenged repeatedly. Turnstile tells people apart from scripts and does not profile you or track you across sites. | Up to 30 minutes for challenge cookies, up to 30 days for a clearance cookie. |
| __cf_bm | Cloudflare | Strictly necessary | Bot management. It distinguishes real browsers from automated traffic and protects the game from attacks and scraping. | 30 minutes. |
| cf_consent | Cloudflare Zaraz | Strictly necessary | The record of what you chose in the cookie banner. Without it we would have to ask you on every page. It stores your choice, not who you are. | 12 months, or until you clear it. |
| zip-lands local storage keys | Zip Lands (first party) | Strictly necessary | Interface preferences kept on your device, such as theme, dismissed tips and the last world you were in. They stay in your browser and are not sent to our servers. | Until you clear your browser storage. |
| _ga | Google Analytics, loaded through Cloudflare Zaraz | Analytics, consent required | A randomly generated identifier for your browser so repeat visits are counted as one visitor rather than several. Set only after you accept analytics. | 2 years from the last visit. |
| _ga_ followed by our measurement id | Google Analytics, loaded through Cloudflare Zaraz | Analytics, consent required | Keeps the state of your current analytics session. Set only after you accept analytics. | 2 years from the last visit. |
Providers rename and change their own cookies from time to time. We keep this table current, and if you find something in your browser from zip-lands that is not listed here, tell us at info@ziplands.com and we will either explain it or remove it.
3.The two categories, explained
Strictly necessary. These make the site work at all. They keep you signed in, keep the sign-in forms safe from bots, remember your cookie choice, and hold small interface preferences on your device. There is no way to turn them off and still have a working account, so we do not ask for consent for them and we do not use them for anything else.
Analytics. These tell us how the site and game are actually used: which pages people reach, where they stop, whether a change helped. They are optional, they are off until you accept, and turning them off costs you nothing in the game.
There is no third category. Zip Lands carries no advertising, we load no advertising or social media tags, and we do not sell or share what we learn from analytics with anyone for their own purposes.
4.What Google Analytics gets, if you accept
- A randomly generated identifier for your browser, which is not your name and not your account.
- The pages and screens you view and the order you view them in.
- Approximate location worked out from your IP address, at roughly city level.
- Basic device and browser information, such as screen size, browser version and language.
- Referral information, meaning which site or link you arrived from.
Google Analytics 4 anonymises IP addresses as part of how it works, and we do not enable Google Signals or any advertising features, so this data is never used for advertising profiles. Analytics data may be processed in the United States by Google LLC, which is certified under the EU to US Data Privacy Framework and covered by standard contractual clauses. Google Analytics retains the data for 14 months. Our Privacy Policy explains the transfer safeguards in more detail.
We do not send your email address, your display name or anything else that identifies your account to Google Analytics.
5.Changing or withdrawing your choice
You can change your mind whenever you like, and it takes effect immediately. Withdrawing consent is as easy as giving it, which is what the law requires and also just how it should work.
- Use the Cookie settings link in the site footer. It reopens the same panel you saw on your first visit, with your current choice shown.
- Switch analytics off and save. The analytics tag stops loading straight away, and the identifiers already set are no longer read by us.
- Clear the Google Analytics cookies in your browser afterwards if you want them gone from your device as well. The next section explains how.
Your choice is stored in the cf_consent cookie on this device and this browser. If you clear your cookies, use a private window, or move to another device, you will be asked again, because the record of your answer went with the cookies.
6.Doing it in your browser instead
Every major browser lets you view, block and delete cookies and local storage for a specific site, usually under the padlock icon in the address bar or under Privacy settings. Browsers also offer a do not track or Global Privacy Control signal. Where your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics cookies and do not ask you again.
Blocking everything is your right, and we would rather you knew the consequence up front: if you block the strictly necessary cookies, you will not be able to sign in or stay signed in, and the game will not work. Blocking only the analytics cookies has no effect on the game at all.
7.Changes and contact
If we add or remove something that stores data in your browser, we update this table first. If a new item needs your consent, we will ask you again rather than assume the old answer covers it. Every version carries the date it took effect.
Questions about anything on this page go to info@ziplands.com. This policy sits alongside our Privacy Policy, which explains what we do with personal data once we have it, and our Terms of Service.