Privacy Policy

Last updated 19 October 2026

The short version: ZugDB keeps your account, the analyses you save and a record of how you use the app, and uses them for one thing: running and improving ZugDB. Nobody reads your analyses, nothing is sold, and nothing is used to train AI. The only thing that ever goes to an advertiser: if you arrived from one of our Google ads, Google learns whether that click became an account.

Who runs ZugDB

ZugDB (zugdb.com) is run by a small independent team. For anything about your data, contact us directly from the Feedback panel in ZugDB. Your data is stored in the United States.

What we collect

• Email — to sign you in and to recover your account.
• Google profile — if you sign in with Google: the name and picture Google shares, shown in your account.
• Your analyses — the games, notes and folders you save or import, and who you share them with. A share link also records who opened it, so you can see it.
• Usage — which pages you open, how long you stay, the days you use the app, and the players you look up in Prepare against. It tells us what is worth building next.
• Feedback — what you send us, any images you attach, and your email so we can answer.
• Ad clicks — if you came from a Google ad: the ad's click ID, linked to your account when you sign up.
• Server logs — our hosting providers record IP address and browser for each request, for security.

We rely on providing the service you signed up for, and on our legitimate interest in keeping ZugDB secure and making it better.

What we don't do

• No selling or renting of your data, to anyone.
• No advertising cookies, no ads inside ZugDB, and no following you around other sites. Visitors are counted by Cloudflare Web Analytics, which uses no cookies.
• Nothing sent to Google Ads about you beyond "this ad click became an account" and "that account was used on three days in its first week" — never your email, name or anything you save.
• No training of AI models on your data.
• No reading your analyses. They are handled only by the software that runs the features you use, such as search and the Library.
• No marketing email.

Third parties

• Supabase — database and sign-in. Holds your account and what you save.
• Railway — runs ZugDB's servers.
• Cloudflare — network, security and visitor counts. Every request passes through it.
• Google — Google sign-in, if you use it, and measuring our ads as described above.

Each works for us under its own data protection terms and sees only what it needs for its job.

Cookies and browser storage

ZugDB sets no cookies of its own. Cloudflare may set one security cookie to tell people from bots. Your browser's local storage keeps your sign-in, settings, open tabs, a cache of game data and, for 90 days, an ad click ID if you came from an ad. Clearing this site's data removes all of it.

Your rights

You can export your whole Library from the app at any time. To get a copy of your data, correct it, or delete your account, ask us from the Feedback panel while signed in — we remove a deleted account within 30 days. Depending on where you live (for example the UK or California) you may have further rights, including complaining to your data protection authority.

Retention

Account data and saved analyses: while your account exists. Items in the Trash: 7 days. A deleted account: removed within 30 days.

Changes

Significant changes are announced in the app. The date at the top shows the latest version.