Privacy Policy
Last updated: March 10, 2026
Zabloo ("we", "us", or "our") operates the website zabloo.com and the platform at app.zabloo.com. This Privacy Policy explains what information we collect, how we use it, and what rights you have over it.
1. Information We Collect
Account Information
When you create a Zabloo account, we collect:
- Email Address: used to create and secure your account, and to send you important service communications.
- Username / Display Name: the name you choose to appear on the platform.
Usage and analytics data
If you accept cookies, we collect anonymous usage data through Google Tag Manager (GTM) and Google Analytics 4 (GA4). This includes pages visited, session duration, device type, and general location (country/region). This data is aggregated and never linked to your identity without your consent.
User-generated content
Anything you build or publish on Zabloo (worlds, scripts, assets, and associated metadata) is stored on our servers so it can be shared and played by others.
2. How We Use Your Information
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Contract |
| Sending transactional emails (password reset, notifications) | Contract |
| Improving the platform via analytics | Legitimate interest (with cookie consent) |
| Hosting and displaying your published worlds | Contract |
| Responding to support or legal requests | Legal obligation / Legitimate interest |
We do not sell your personal data to anyone, ever.
3. Cookies
We use a cookie consent banner on first visit. Analytics cookies (GTM/GA4) are only loaded after you click Accept. If you click Decline, no tracking scripts run and your choice is stored locally.
You can change your preference at any time by clearing your browser's localStorage for zabloo.com.
4. Third-Party Services
We share data with the following third parties only as necessary to operate the platform:
- Google Analytics / Tag Manager: usage analytics (only if you consent). Governed by Google's Privacy Policy.
- Ghost: our newsletter and blog platform. If you subscribe, your email is stored and managed via Ghost. Ghost's privacy policy applies to newsletter data.
We do not use your data for advertising or share it with data brokers.
5. Data Retention
- Account data is kept for as long as your account exists.
- If you delete your account, your personal data is removed within 30 days. Anonymised usage data may be retained for analytics purposes.
- User-generated content is deleted along with your account unless you have explicitly shared it and other users have saved copies.
6. Your Rights
Depending on where you live, you may have rights including:
- Access: request a copy of the data we hold about you.
- Correction: ask us to fix inaccurate data.
- Deletion: ask us to delete your account and associated data.
- Portability: receive your data in a machine-readable format.
- Objection: object to certain types of processing.
EU/EEA residents have these rights under the GDPR. California residents have similar rights under the CCPA.
To exercise any of these rights, email us at **zamo@zabloo.com**.
7. Children
Zabloo is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at zamo@zabloo.com and we will delete it promptly.
8. Security
We take reasonable technical and organisational measures to protect your data — including encrypted connections (HTTPS), hashed passwords, and access controls. No system is 100% secure, and we cannot guarantee absolute security.
9. Changes to This Policy
We may update this policy as the platform evolves. When we do, we'll update the "Last updated" date at the top. For significant changes, we'll notify you by email or via an in-app notice.
10. Contact
Questions? Reach us at zamo@zabloo.com.