Privacy Policy

This policy explains how zCommand handles information when you visit the site, create an account, play the game, or use its social features. zCommand is a free-to-play community game project operated from Queensland, Australia. Privacy enquiries may be sent to privacy@zcmd.net.

Australian privacy requirements may apply differently depending on the project’s circumstances. This policy describes zCommand’s information-handling practices and does not claim a legal exemption or guarantee.

Information we handle

• Account details: email address, display name, password hash, account status and security settings. We do not store your password in readable form.
• Game activity: province names, resources, progress, research, battles, rankings, allegiances, friendships and other commands.
• User content: private messages, member-only allegiance chat, reports, profile text and allegiance content you submit. Messages are not public, but authorised moderators may access reported evidence when needed to investigate abuse or a safety or security issue.
• Technical and security information: session identifiers, IP address, browser or device information, request times, security events and diagnostic logs.
• Registration check: information needed to validate the Cloudflare Turnstile anti-bot challenge.

Why we use it

We use information to create and secure accounts, operate game rules, save progress, display public commander information, deliver messages and notifications, prevent cheating and abuse, investigate reports, moderate content, diagnose faults, and meet legal obligations. We do not currently sell personal information or use it for third-party advertising.

We also send optional weekly and monthly summary emails covering your province's growth, battles and ranking movement, and an instant email when another commander attacks your province. The monthly summary and attack alert are sent by default; the weekly summary is opt-in. The summaries can be turned off at any time from Account settings or the one-click unsubscribe link included in every such email; the attack alert can be turned off from Account settings. None of these affect security or account-related emails, which always send.

Your display name, province name, rankings, allegiance membership and selected game statistics may be visible publicly. Your email address, password hash, private messages and exact hidden forces are not intended to be public.

Cookies and local storage

zCommand uses essential session and security cookies to keep you signed in and protect commands. It may use local storage or a preference cookie to remember light or dark mode. Blocking essential cookies may prevent login or gameplay. There are currently no advertising cookies.

Cloudflare Turnstile

Registration uses Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Your browser communicates with Cloudflare, which may receive network, device and challenge information and may process it outside Australia. Cloudflare handles that information under its own privacy policy. zCommand receives the challenge result and related validation data needed to accept or reject registration.

Storage, disclosure and retention

Information is stored with service providers used to host and protect the game. It may be disclosed to those providers, professional advisers, or authorities where reasonably necessary to operate the service, protect users, investigate misuse, or comply with law. Providers may operate outside Australia.

Account and gameplay records are retained while an account is active and afterwards for as long as reasonably needed for security, moderation, dispute handling, backups and legal obligations. Some battle, ledger and moderation records may need to remain after an account closes to protect game integrity and other players. Data no longer reasonably required will be deleted or de-identified where practicable.

Security and data incidents

Reasonable technical and organisational safeguards are used, but no internet service can promise complete security or uninterrupted storage. If a data incident occurs, the operator will assess it and take any notification steps required by applicable law.

Your choices and requests

You can change your email, password and display name, download a JSON copy of account data, or close your account from Account settings. Closure removes sign-in details, anonymises the current public identity and removes messages you authored. Financial ledgers, battles, moderation/security evidence and backups may remain where reasonably needed to protect other players, game integrity or legal interests. Immutable history may retain a prior in-game display or province name.

You can opt out of optional weekly and monthly summary emails at any time from Account settings, or via the one-click unsubscribe link included in every such email.

For correction, access or deletion requests not covered by those controls, contact privacy@zcmd.net. Identity verification may be required. You can also block players and report profiles, messages or allegiance content in the game. Avoid placing sensitive personal information in public names, profiles or messages.

Children and guardians

zCommand is intended for people aged 16 or older. A player under 18 should have permission from a parent or guardian who has reviewed these terms and privacy practices. Do not submit information about a child without appropriate authority. The operator may suspend an account where age or safety concerns cannot be resolved.

Changes and complaints

This policy may be updated as the game or legal requirements change. Material changes will be identified on this page or through an in-game notice where practicable. Privacy concerns should first be sent to privacy@zcmd.net. Depending on the circumstances, you may also have a right to contact the Office of the Australian Information Commissioner.