YOUR DATA

Small saves. Clear choices.

Last updated: 12 September 2026.

Who is responsible?

Puffer AB, Swedish company registration 556850-9144, is responsible for personal data processed for this Zubboo game site. Our address is Flaggan 1338, 116 74 Stockholm, Sweden. Contact privacy@zubboo.com.

Playing and saving

The game runs in your browser. Where storage is available, it keeps progress, scores, unlocked cosmetics, game preferences, your chosen character, saved outfits and recent-play details locally. These remain until you clear them or your browser removes them. This standalone site has no account-registration or cloud-save service.

Other Zubboo websites use separate browser storage. Following a link to Zubboo.com does not automatically transfer your saves or sign you into an account. That website explains its own account choices and data processing.

Normal connection information, including an IP address, browser details and requested page, reaches our hosting provider to deliver and protect this site. Guest play is not an anonymous network connection.

Optional play stats

With permission, we collect known page/game names, mode, a broad traffic-source category, country, device category and whether this browser returns after its first opted-in day. On a playable page, we count the first accepted activity and first result in each mode. Result time is capped at an hour and can include pauses. A site variant identifies which of our dedicated game sites was used.

Events contain no account ID, visitor ID, saved-game content, names, exact referrer address, free-text search, full browser details or IP address. Country and device categories are derived by the hosting service. There is no cross-domain visitor profile. Helper-page visits may be grouped together in reports.

Cloudflare Analytics Engine keeps events for three months. Reports are grouped observations from consenting browsers, not unique-player counts or verified competition results. Without a visitor identifier, we cannot retrieve an individual person's earlier events from the dataset.

Your choice and first opted-in date are stored locally for up to 180 days. When enabled, the first-party zubboo_stats cookie contains only a permission marker and lasts no longer than that choice. A coarse source category can remain in session storage for up to 30 minutes between pages. No stats are sent before permission. No thanks, Do Not Track and Global Privacy Control keep collection off.

Use the controls below to withdraw permission. This stops future collection and clears the permission cookie and source category. Earlier events expire according to retention. Playing, saving and customisation work with stats off.

Purpose and providers

We provide the game and local features you request. Optional measurement relies on your consent. Limited technical processing and short-lived request limits support our legitimate interests in keeping the service safe and diagnosing faults. When you email us, we use your address and message to handle that request and necessary follow-up or legal obligations.

Cloudflare provides hosting, delivery, security, optional analytics and inbound email routing. Its global network may process connection data outside your country. Support messages reach our business email service. Where international-transfer safeguards are required, applicable contractual safeguards, including standard contractual clauses, apply. Contact us for information relevant to your request.

Retention and your rights

Device saves last until cleared or removed by the browser. Hosting diagnostic logs may remain for up to seven days. Support messages remain as needed to handle the request, follow-up and applicable legal records. We do not sell personal data or use it for automated decisions with legal or similarly significant effects.

Depending on the processing and applicable law, you can request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. Write to privacy@zubboo.com. You can complain to your local data-protection authority; in Sweden this is IMY.

Families and changes

Guest play and local customisation are available without accounts. This site has no public chat, behavioural advertising or child-account service. If our features or data practices change, we will update this page and explain material new choices before a use that needs your permission.