Privacy

In your browser

Settings you choose are kept in your browser's local storage, on your device only. They never reach our servers. Clear your site data to remove them.

• Map settings: the last World you opened, hover details, loot shading, building colours and dimming, 3D loot dots, your filter Presets, the Snipe settings and the spot you set for Near.
• Group sessions: for each Group you joined, its id, your name and colour, and a session token. Also the name you used last and your drawing colour.
• A cookie only if the site is behind its temporary launch password: zatlas_unlock, which remembers the password. It goes away when the lock does.

Groups

A Group is a link and a password; there are no accounts. To make it work, the Groups server keeps this:

• The Group's name, its World and a hash of its password (never the password).
• Each member's name and colour, and a hash of their key. Your name is whatever you type or pick; we don't ask for an email.
• Markers, Drawings and notes the members make, with the name of who made them, and invite links.
• Each member's last position while they share it. Danger contacts are removed 2 hours after they were last seen.
• Your IP address is not stored. The server uses it in memory to slow down abuse and forgets it.

A Group that nobody has used for a year is deleted, with everything in it. Using it (joining, being online, adding or moving something) starts the year again. A member who has not been seen for 180 days is removed; their Markers stay with the Group. Session tokens last an hour and renew while you are connected.

Delete your data

Open the Group panel. If you made the Group, Delete group removes it for everyone, at once. Otherwise Leave and delete my data removes you and everything you added. Leave only removes you and keeps your Markers. Forget it clears the Group from this browser.

Visitor counts

We count visits with Umami, which we run ourselves on our own server. It sets no cookies. It records the page, the referrer, your browser, system and screen size, and your country. It does not store your IP address; it uses it for the country and for an anonymous visitor id that changes every month. Nothing goes to an ad network.

Server logs

The servers log starts, errors and events like "a Group was created", with no names, positions or passwords. When a web request fails, the web server's error log records it with your IP address and browser. Logs are deleted after 14 days.

Other companies

• Cloudflare delivers the site and sees every request, including your IP address, as any host does. See Cloudflare's privacy policy.
• Nothing else: no ad, social or analytics scripts.

Questions

To ask about your data or have it removed, send feedback and say so.

Contact us