Privacy Notice
GAZA has no sign-in and no advertising. The optional market keeps an anonymous account, described below. Usage analytics are off unless you opt in. This notice explains what data is involved. The developer does not publish a name, an email address, or a postal address.
Stored on your device
- Your acceptance of the Terms (the version number and date) and your analytics choice, so you are not asked every time.
- Game preferences, if any.
Your date of birth is used only in your browser to check that you are 18 or older. It is not stored or sent anywhere. You can clear stored data at any time through your browser's site settings.
Analytics (optional)
The Google Analytics script is not loaded, and nothing is sent to Google Analytics, unless you opt in. The page only sets Google's Consent Mode defaults to denied. It does not include the Google tag. If you tick allow anonymous usage analytics, the game then loads the Google Analytics tag (Google LLC), grants analytics storage, and Google Analytics collects usage data such as pages viewed, session length, device and browser type and approximate location, and sets cookies or similar identifiers. Advertising signals are never granted. Google processes this data under its own privacy policy. You can change your choice at any time with Privacy settings on the game's start screen. Turning analytics off stops further collection by this game. It does not delete data Google already holds.
Video clips in the main menu (YouTube)
If the main menu is left open without input for about four minutes, the game plays short excerpts of public statements by politicians about the war in Gaza, embedded from YouTube (Google LLC) with its privacy-enhanced mode (youtube-nocookie.com). Only then, and only while clips play, does your browser connect to YouTube and Google: they receive your IP address, browser details and that the videos were played, under Google's privacy policy. Where the browser supports it (Chrome, Edge), the player runs in a credentialless frame: it gets no YouTube or Google cookies you already have, and anything it stores is discarded when you close the page. We receive nothing from this. The clips are on by default and can be turned off at any time: Settings → Play politicians' video clips in the menu (loads YouTube). They are also not loaded on the lowest graphics quality.
Multiplayer
When you choose Enter the strip, your browser connects directly to other players' browsers (WebRTC) and to a signalling server (PeerJS) that introduces players. For this to work:
- Private relay (default). With Hide my IP from other players on (Settings → Online, on by default), every connection goes through a TURN relay (Cloudflare Realtime TURN): other players see only the relay's address, not your IP address. Your IP address is visible to the signalling server and the relay service. If the relay is unavailable, the game asks you before connecting directly and never does so silently;
- with the private relay off, or if you choose Connect anyway, your IP address and connection details are visible to other players in your session (and in your party, and to friends whose presence you check) as well as to the signalling server;
- Squads and friends. Your callsign (a name you choose; no real name is needed), a random key and the friend code derived from it, and your friends list (their callsigns, friend codes and when you last saw them online) are stored only in your browser (localStorage). While the main menu is open after you open the Squad screen, friends who know your friend code can see that you are online, your callsign and your party code. Party chat goes only to the members of your party and is not stored;
- a random session identifier is created for your browser each time you play;
- game data you generate (your characters' positions and actions) is sent to the other players in the session;
- Voice chat (optional, off until you turn it on). The microphone is used only after you agree to the explanation the game shows and your browser asks you. While you talk (hold the talk key, or with open mic when you speak), your voice is sent as audio to the players who can hear you: players near you in the game, and your party or squad over the radio. Players outside your party are not connected unless you turn on Hear players outside my party (off by default). With Hide my IP on, voice goes through the same private relay as everything else. Voice is streamed live between browsers only: the game does not record or store it, and we have no server that receives it. Other players hear what you say, and anything they do on their own device is outside our control. You can mute or block anyone (Pause menu, Squad screen); blocks are kept in your browser (localStorage) with a voice identifier derived from your random key, never your friend code. Your voice settings (microphone choice, volumes) are stored only in your browser.
Signalling and relay services may log connection metadata (including how much data a connection used, but not its content, which is encrypted end to end by WebRTC) under their own policies. We do not operate a game server for play sessions, and we do not keep records of those sessions. The market, below, is the one database this game operates. Play alone (offline) makes no peer-to-peer connections.
The market and coin purchases
If you open the market, the server keeps an anonymous market account: a random code (its secret half only as a one-way hash), your coin balance, what you listed, bought and sold, and when. It holds no name, email or device identifier. Your IP address is used for a few minutes to limit how often requests can be made and is not stored with the account. Coin purchases are made on PayPal's site under PayPal's privacy notice; the game only receives the order number, the amount, whether it was paid, and the terms version and immediate-delivery confirmation stored with that order. It never receives your card or PayPal account details.
How long it is kept
The acceptance of the Terms and the choices stored in your browser stay until you clear the site's data or use Privacy settings. A market account, its balance, inventory, listings, ledger, and the record of a coin purchase (including the terms version and the immediate-delivery confirmation) are kept for as long as the market runs, because they are the account. There is no delete button in the game. PayPal keeps its own record of a payment under PayPal's notice. Deleting a market account, once a request can be received, does not delete PayPal's record. Play sessions are not stored by us.
Access, correction, and deletion
You can clear everything this game stored in your browser through your browser's site settings. For the market account, a request for a copy, a correction, or deletion has to name the account code, because that is the only way to find the record. No contact is published, so that request cannot be sent from this page. Where the law gives you other rights (including to object, or to complain to a supervisory authority), those rights are not waived here.
Who else processes data
- Cloudflare serves the website (Cloudflare Pages), holds the market database (D1), and provides the private relay (Realtime TURN). It processes standard request data, such as IP address and user agent, to deliver and protect the site, and it sees your IP address when a relayed connection uses the TURN service.
- Google receives analytics data only after you opt in, and receives your IP address and browser details from YouTube only while a menu clip is playing, as described above.
- PayPal processes a coin purchase on PayPal's own site, and only if you choose to buy coins.
- A PeerJS signalling host introduces players: a server run for this game, and the public PeerJS service if that server is unavailable. It sees connection setup. It does not receive the contents of play, which WebRTC encrypts between browsers.
Transfers to the United States
The developer is in the United States. Cloudflare, Google, and PayPal may process personal data in the United States, including data of players in the United Kingdom and the European Economic Area. This notice does not add a transfer mechanism of its own beyond what those companies publish for their services.
Children
The Game is for adults (18+) and is not directed to children.
Contact
No name, email address, or postal address is published.