Privacy Policy

1. Who we are

DleZone operates dlezone.com, an independent directory of daily games and a collection of open-answer trivia practice games. This policy explains how DleZone handles information on this site. It does not cover independently operated sites you choose to visit.

DleZone has optional accounts and game synchronization, with no checkout or advertising tags. We do not sell personal information or share it for targeted advertising.

2. Information we process

Guest play: a random identifier in an HttpOnly cookie connects your browser to saved games. The game database stores a hash of that identifier, game mode, prompts shown, submitted answer text, round timing, the time zone used for a Daily game, scores, results and request records used to recover interrupted actions. Do not enter sensitive personal information in an answer.

Daily records and answer reports: accounts keep minimal completion summaries with challenge dates, set identity, rules, scores and time zone, without full answer lists or raw submissions. If you report an answer issue after completing a set, we store the linked game and prompt, issue category, your note, processing status and our response. Do not include personal information in a report. Short-lived hashed network and player counters limit abuse; raw network addresses are not stored in these feedback counters.

Accounts: if you register, we process your email address, display name, verification status, account identifiers, password hash and authentication sessions. If Google sign-in is enabled and you choose it, we receive your verified email and profile information and may store a profile image, provider identifiers and authentication tokens needed for sign-in. We do not receive your Google password.

Security and communications: authentication records can include IP address and browser information. Hosting and security providers also process network requests and technical information needed to deliver and protect the site. We maintain verification, password-recovery and rate-limit records. If you email support, we receive your contact information, message and any information you choose to include.

3. How and why we use information

We use information to run games, judge answers on the server, save and recover progress, authenticate accounts, deliver verification and recovery email, respond to enquiries and protect the service from abuse. When you sign in, eligible guest games in that browser are linked to your account so they can resume on another signed-in device. Favorites and personal browser records do not automatically sync.

Where data protection law requires a legal basis, we process information as necessary to provide the service you request, for legitimate interests in security and reliable operation, or to meet legal obligations. Where consent is required for an optional activity, we will request it before that activity. Game scoring does not make decisions with legal or similarly significant effects about you.

4. Cookies and browser storage

The dz_guest cookie lasts up to 30 days and supports guest game recovery. Authentication cookies support sign-in; login sessions are configured to expire after seven days and may renew while in use. Google sign-in and security checks may also use cookies or similar storage when those features are enabled.

Browser storage keeps favorites, sound preferences, personal best records, game-session pointers and pending actions needed for safe recovery. These are stored on your device and remain until you or your browser clear them. A pending action may contain the answer you were submitting.

You can manage cookies and clear site data in your browser. Blocking storage can prevent sign-in, guest recovery or preferences from working. Clearing browser data does not delete account records or server-side games; signing out does not clear favorites or other local records. On shared devices, sign out and clear site data when finished. Share result uses the clipboard only when you request it.

5. Providers, disclosure and external games

Cloudflare provides hosting, account email delivery and Turnstile security checks. Cloudflare Web Analytics measures page views and site performance to help us monitor the service. Turso stores account and game records. Resend may be used as an alternative email delivery provider. Google processes sign-in if you choose that option. These providers receive information needed for their roles and process it under their applicable terms and privacy practices. We do not send game answers to an AI service.

We also load Google Tag Manager to manage measurement tags. Loading it sends a request to Google, including technical request information such as your IP address and browser information. Tags configured in the container may collect usage information or use cookies and similar storage. Their behavior depends on the published container configuration.

Microsoft Clarity helps us understand how visitors use the site through interaction measurements, heatmaps and session recordings. It may process browser and device information, page views and interactions, and use cookies or similar technologies. Do not enter sensitive personal information in game answers or feedback.

We may disclose information when required by law or when reasonably necessary to protect people, enforce these terms or investigate abuse. Access is limited to people and providers who need it for those purposes. Service providers may process information outside your country. Processing locations depend on the provider and the deployed service configuration. Contact support for information about the providers and any applicable transfer arrangements.

Opening a directory link sends a normal web request to that game’s operator. External sites control their own cookies, accounts, payments and data practices. DleZone does not automatically send your DleZone account or saved game history to them.

6. Retention and security

Game sessions expire 30 days after creation and cannot be resumed after expiry. Expired records are removed in batches during later game creation, so physical deletion may occur after the expiry date. This is not a guarantee that every copy is erased at exactly 30 days.

Account Daily completion summaries remain until account deletion. Earlier expired games without surviving evidence are not reconstructed. Answer reports become inaccessible after 90 days and are physically removed in bounded batches during later game creation or a support cleanup. Feedback rate-limit counters expire within two hours and are removed during cleanup. These expiry periods do not promise physical deletion at the exact expiry instant.

Account and provider-link records are kept while the account remains registered. Verification and recovery links expire after 45 minutes. Expiry prevents use of a link or session; it does not necessarily mean immediate deletion of its database record. Security, rate-limit and support records do not currently have a single automatic deletion schedule; retention depends on operational needs, issue resolution and applicable legal requirements. The game-session expiry does not apply to these records.

We use access controls, password hashing and protected authentication and game cookies to reduce unauthorized access. No internet service or storage system can guarantee absolute security. Do not send passwords, sign-in links or authentication tokens to support.

7. Your choices and privacy rights

You can browse and play as a guest, choose whether to register, sign out and clear browser storage. Self-service account deletion and early game deletion are not available. You can email support to request access, correction, deletion or help with your information; these requests require manual handling and are subject to identity verification and applicable law.

Depending on your location and the basis for processing, you may also have rights to portability, restriction, objection to processing and withdrawal of consent where processing relies on it. Withdrawal does not affect earlier lawful processing. You may complain to your local data protection authority. Mandatory rights are not limited by this policy or by the absence of a self-service tool.

8. Children

DleZone is not directed to children under 13. Do not create an account or submit personal information if you are under 13 or below a higher minimum age required in your region. Where parental or guardian permission is legally required, obtain it before use. We do not collect dates of birth to verify age. If you believe a child has provided personal information improperly, email support so the matter can be reviewed.

9. Updates and contact

We will update this page and its last-updated date when data practices change. Material changes will be highlighted on the site or communicated by email where appropriate or legally required. New optional processing requiring consent will not rely solely on an update to this page.

Contact

Operator: DleZone. Email: support@dlezone.com. For privacy requests, use the subject “Privacy request” and describe the request. We may verify account ownership before disclosing or changing private records.

Read the Terms of Service →