Privacy Policy

Version 1.1, last updated 2026-10-23.

Who is responsible

Zone Intel is run by Adão Raul, a private individual, who is the data controller. Contact for anything about your data (questions, access, correction, deletion): adao.raul@gmail.com. You can also delete your account yourself in Settings.

What this is

Zone Intel is a free map and progress tracker for the game Gray Zone Warfare, a mature-rated game. You can use the map and tools as a guest. An account is only needed to keep your progress on the server and sync it between devices.

What we collect, and why

Only when you create an account:

• From Steam or Discord (the sign-in provider you choose): the provider's account id, your display name and your avatar URL. From Steam OpenID we receive only your SteamID; from Discord we ask for the identify scope only. We receive no email address, friends list, game library or messages.
• What you enter: your profiles (up to three, one per faction), the tasks, objectives, keys and hideout levels you mark, and a few display settings.
• Technical data to keep you signed in and the service safe: a session record (a hash of your session token, a hash of your browser's user-agent and a short label such as "Firefox on Windows", times of use) and security events (sign-in, link, unlink, delete, with your account id and no IP address or token).

We use this to run your account and the tool (contract) and to keep the service secure and working (legitimate interest). If you stay a guest, your progress stays in your browser and is not sent to us.

Cookies and tracking

We use no analytics, no error-reporting service, no advertising, no third-party scripts and no tracking cookies. The only cookies are strictly necessary: the session cookie (HttpOnly), a CSRF token that protects your requests, and a short-lived cookie during sign-in. Guests get none of them.

Your avatar

If your sign-in provider has a profile picture, the site shows it next to your name. Your browser loads it directly from the Steam or Discord image servers, which can therefore see that request and your IP address. We send no referrer with it. If you prefer not to make that request, do not sign in; guests see no pictures and make no such request. When the provider has no picture, or it fails to load, you see your initials instead.

Who else handles data

Cloudflare (hosting and content delivery; it keeps standard request logs such as IP addresses), Supabase (our database, in the EU, Frankfurt region) and GitHub (where the code is kept; no user data). Steam and Discord are the sign-in providers and have their own privacy policies. We do not sell data, do not share it for advertising and make no automated decisions about you. We do not transfer your data anywhere beyond these providers.

How long we keep it

Delete your account in Settings and all profiles and progress are removed immediately. Accounts with no sign-in for 24 months are deleted automatically; we hold no email address, so we cannot warn you: you would simply lose the account, so export your progress whenever you like (Settings, Export). Session records expire on their own. Security events are kept 90 days, then deleted.

Your rights

Under the EU/UK GDPR you have the right to access your data, have it corrected, erased or restricted, to receive it in a portable form (the JSON export in Settings), to object to processing and to complain to your data protection supervisory authority. Write to adao.raul@gmail.com and we will answer within one month.

Age

Account features are for people aged 16 or older.

Changes

If this policy changes we will post the new version here with a new date and a line in the changelog below.

Changelog: 1.1 (2026-10-23): profile pictures from Steam and Discord are shown (Privacy, "Your avatar"); 1.0 (2026-10-23): first version.

See also Terms of Service and About the data.