Privacy notice

Last updated: 4 October 2026

This website

• It sets one cookie, and only when you sign in or play: it keeps you signed in, here and in the game, for up to six months unless you sign out. Your browser's scripts cannot read it, and it is never sent to anyone else. There is no advertising.
• Visits are counted with Cloudflare Web Analytics, which uses no cookies or local storage and does not fingerprint visitors. We see only totals: how many visits, to which pages, from which countries and browsers, and how fast the pages load. It counts visits to the game's page the same way.
• Its fonts and pictures are served from this site itself, so your browser does not contact any other company for them.
• The ladder is read live from the game's server (play.zenith-online.online): your browser asks it for the list, and nothing about you is sent with that request.

The game

The game's code, pictures, sounds and fonts all come from the game's own server: your browser contacts no other company to play it, apart from Cloudflare (see below).

What is kept on our server

• Your username, once you sign the register. It is private: only you use it, to sign in, and it is never shown.
• Your hero's name, which you choose after signing. It is public: it appears in the game, on the ladder and on this site.
• Your password, hashed with scrypt and a random salt. We never store or see the password itself.
• Your recovery key, hashed the same way. Only you ever see the key itself, once, when it is given to you.
• Your hero's progress: level, items, coin, quests, deeds and the like, and the game clock.
• When your hero last played and how long, and its ranked rating and record.

What is kept in your browser

• The game's saves, in your browser's local storage, and the sign-in cookie above, so the game knows who you are. Signing out ends the sign-in on the server, and a sign-in not used for six months is forgotten.
• Your settings (sound levels, look speed) stay only in your browser.

Addresses and logs

• Your IP address is used, only in the server's memory, to slow down anyone sending too many requests or guessing passwords. It is not written to our database.
• The game and this site are delivered through Cloudflare, which carries the traffic and protects it, under its own privacy policy.

How long

• A guest who never signs the register is deleted after seven days without play.
• A signed hero is kept for as long as you want to keep playing, or until you ask us to delete it.
• Backups of the game's data are kept for seven days, then overwritten.

Your rights

You can ask us what we keep about your hero, ask for it to be corrected, or ask for your hero and everything about it to be deleted. Write to mabtht1@gmail.com or berat@admintuncallm.com with your hero's name; we answer within 30 days. We do not sell or share your data with anyone.

Children

Zenith Online is not meant for children under 13, and we do not knowingly keep data about them. If you think a child has signed up, write to us and we will delete the account.

Changes

If this notice changes, the new version appears here with its date.