Privacy Policy
Last updated: 20 October 2026
In short: you can play the free demo without an account. If you create one, we store your name, email and a scrambled (hashed) password to sign you in and to show your name in the Guestbook. We never ask for payment details. Your coins, progress and game settings stay in your own browser. We do not sell or share your personal information.
1. Data controller
TRYHARDGG SOLUTIONS LIMITED, 20 Dimotiki Agora, Larnaca 2060, Cyprus, company number . Email: [email protected].
2. Accounts (optional)
An account is optional: every game can be played as a free demo without one. When you sign up we process:
- Account data: your name (or nickname), email address, a salted hash of your password (we cannot see your password), the date you signed up and sign-in sessions (stored only as a hash of the session token).
- Game data: your free virtual coin balance, number of rounds played, biggest win, daily login streak, level, the time of your last free coin bonus, your bonus history, favorite and recently played games and your bet sizes. Coins have no monetary value.
- Guestbook posts: the name you enter, your message and the time of posting. Posts are public on the site. Guests can post with a name only; members' posts are linked to their account.
- Security data: to stop automated sign-ups and password guessing we briefly keep counters linked to an email address or IP address. They expire after one hour at most.
Purpose and legal basis: to provide the account and the game progress you asked for (performance of a contract, Art. 6(1)(b) GDPR) and to protect the Service against spam and abuse (legitimate interests, Art. 6(1)(f) GDPR).
Where it is stored: in our database on Cloudflare D1, run by Cloudflare, Inc. (USA) as our processor, and accessed only through our own server code on Cloudflare Workers. Cloudflare relies on the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework for transfers from the EU. Only we can access the database.
How long: account and game data until you delete your account; sign-in sessions for up to 30 days; Guestbook posts until you or we remove them. To delete your account and all its game data, write to [email protected] from your account email and we will delete it within 30 days.
We do not collect dates of birth, payment card data or identity documents, and we do not sell personal data.
3. Data stored on your device
The site uses your browser's local storage (not cookies) only for the items below. Your coins and game progress are not stored on your device: they are kept with your account in our database. Demo play without an account keeps its demo credits in memory only and stores nothing. The items below are strictly necessary to provide the Service you request; you can delete them at any time by clearing your browser's site data.
| Key (prefix fz_) | Purpose | Duration |
|---|---|---|
| token, user | Keeps you signed in (session token, and your name and email for display). Only set if you sign in. | Until you sign out, max. 30 days |
| age_ok / age_denied | Remembers your age confirmation | Until you clear site data |
| lock_until, reminder_min | Responsible play tools on this device | Until you clear site data |
| side_collapsed, slot_sound, slot_turbo | Display and sound settings on this device | Until you clear site data |
We do not set cookies ourselves (the Google Ads tag described in section 5 sets its own cookies). Fonts are hosted on our own server, so loading the site does not send your data to font providers.
4. Server logs
Like any website, our web hosting provider and Cloudflare, which delivers and protects the site, process technical data such as IP address, date and time, requested page and browser type to deliver the site and keep it secure. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Logs are kept only as long as needed for security and are then deleted.
5. Analytics and advertising
Cloudflare Web Analytics. Our site is delivered through Cloudflare (Cloudflare, Inc., USA), and we use Cloudflare Web Analytics to count visits and see which pages are used. It does not use cookies or local storage and does not follow you across other websites. It receives the page address, the referring page, browser and device type, page load timing and an approximate location (country) derived from your IP address; Cloudflare does not use this data to build profiles or for advertising. The legal basis is our legitimate interest in understanding and improving the Service (Art. 6(1)(f) GDPR).
Google Ads conversion measurement. We advertise Fortzona on Google Ads and use the Google Ads tag (Google LLC) only to measure whether an ad visit led to a free sign-up. The tag sets Google cookies on your device and sends Google the page address, the ad click identifier and, on sign-up, an anonymous conversion event. Ad personalization signals are turned off and we do not use the tag for remarketing. If your browser sends a Global Privacy Control signal, the tag is not loaded. You can also manage Google ad settings at adssettings.google.com.
We do not use any other analytics, advertising or tracking tools.
6. Your privacy rights
United States. Depending on your state of residence (for example California, Colorado, Connecticut, Virginia and other states with consumer privacy laws), you may have the right to know what personal information we hold about you, to get a copy of it, to correct it and to delete it. We do not sell personal information, do not share it for cross-context behavioral advertising, do not use it for profiling and do not process sensitive personal information, so there is nothing to opt out of; we also honor Global Privacy Control signals. We will not discriminate against you for using your rights.
To make a request, email [email protected] from the email address of your account. We may need to verify your identity and will answer within 45 days. You can use an authorized agent; we may ask for proof of the authorization. If we decline your request, you can appeal by replying to our answer.
Other laws. Because our company is established in the European Union, the GDPR also applies to our processing: you can access, correct, delete, restrict or object to the processing of your data, ask for data portability, and complain to a data protection supervisory authority.
7. Children
The Service is not intended for anyone under 21. It is not directed to children, and we do not knowingly collect personal information from children under 13 (COPPA) or from anyone under 21. If you believe a minor has given us personal information, contact us and we will delete it.
8. Changes
We will update this policy when our processing changes. The date at the top shows the current version.