Cookie Notice: Browser Storage and Tracking Technologies

1. What this notice covers

This Cookie Notice explains the use of cookies and similar tracking technologies on zombival.com (the "Service"). It is part of and should be read alongside our Privacy Policy and our Do Not Sell or Share notice.

"Cookies" are small text files placed on your device by a website. They typically contain a unique identifier, the name of the website that set them, an expiration date, and sometimes additional values. "Similar technologies" used by the Service include browser-managed localStorage and sessionStorage, HTTP request and response metadata, web beacons, pixels, and tags that send information to analytics and advertising providers.

2. Categories of cookies and storage we use

The Service uses three broad categories of tracking technologies. None of these are required to identify you by legal name; all of them can be controlled through your browser settings and the additional tools described below.

• Strictly necessary / functional. Required for the Service to operate as you have requested. This includes localStorage entries that remember your current survivor name and active campaign state, sessionStorage entries that hold transient run information, and the cookies set by our hosting provider for session affinity or security.
• Analytics. Used by Google Analytics to measure how many people visit the Service, which pages and stages are most popular, how long sessions last, and how often errors occur. Analytics data helps us improve the game.
• Advertising. Used by Google AdSense and Google's advertising partners to serve and measure advertising, including capping how often you see the same ad, attributing conversions, preventing fraud and, where personalized advertising is enabled, choosing ads that may be more relevant to you.

3. Browser storage used by the game (strictly necessary)

The game relies on the following browser storage to function. These entries are written and read by JavaScript that we control directly, and they stay on your device until you clear them through your browser.

• localStorage
  • zombival_current_player — the survivor nickname you entered for your current play session.
  • zombival_registered_users — locally cached information about previously registered survivor names on this browser.
  • zombival_local_scores — high scores stored on this device when server-side scoring is not available.
  • zombival_gallery_unlocks — record of which stage screens you have unlocked on this device.
  • zombival_claim_confirmed_v1 — flag indicating that the server has confirmed your survivor name claim on this device.
  • zombival_pending_run — last-known active run information, used to resume a session.
• sessionStorage
  • zombival_pending_run — a session-scoped mirror of the active run, cleared when the browser tab is closed.
  • Other short-lived UI state used by the navigation modal and the campaign countdown.
• Browser cache. Images, scripts, stylesheets, fonts and audio files may be cached by the browser to make the game load faster. The browser, not the Service, decides when to expire those entries.

4. Analytics cookies (Google Analytics)

The Service uses Google Analytics 4 with the measurement identifier G-S1JG2CL1XT. Google Analytics may write the following cookies on this domain or on Google's domains, depending on configuration and your browser:

• _ga — assigns a Google Analytics client identifier to your browser. Typical duration: up to two (2) years.
• _ga_<CONTAINER-ID> (for this property, _ga_S1JG2CL1XT) — used by Google Analytics to persist session state. Typical duration: up to two (2) years.
• _gid — used to distinguish users (legacy configurations). Typical duration: 24 hours.
• _gat or _gat_gtag_<PROPERTY> — used to throttle the request rate. Typical duration: 1 minute.

You can install the official Google Analytics Opt-Out Browser Add-on at tools.google.com/dlpage/gaoptout to prevent your visits from being included in Google Analytics across any site, or block analytics cookies through your browser settings.

5. Advertising cookies (Google AdSense)

The Service is configured for Google AdSense using publisher account ca-pub-5070076210009776. AdSense and Google's advertising partners may use cookies and similar identifiers including, depending on configuration and region, the following:

• __gads and __gpi — used by Google publisher tags for ad delivery, measurement and personalization. Typical duration: up to 13 months.
• IDE, id (on Google domains) — used by Google's advertising services to measure and personalize ads. Typical duration varies up to 13 months.
• NID — used by Google to remember preferences and other information. Typical duration: up to 6 months.
• ANID — used for advertising delivered across non-Google sites. Typical duration: up to 13 months.
• Additional partner cookies from companies participating in the Google ad ecosystem; these vary by ad and are governed by their own policies.

For more information about how Google uses cookies in advertising, see policies.google.com/technologies/ads. To control personalized advertising, use Google Ads Settings.

6. Managing cookies and storage

You can control cookies and browser storage through several layers:

• Browser settings. All major browsers let you view, block, allow per-site, or delete cookies and site data. Look for the "Privacy," "Security," "Site settings" or equivalent menu in your browser's preferences.
  • Google Chrome cookie settings
  • Mozilla Firefox cookie settings
  • Apple Safari cookie settings (macOS / iOS)
  • Microsoft Edge cookie settings
• In-game reset. The leaderboard panel includes a Reset local score control that clears Zombival's localStorage entries on this device. This affects only the local copy.
• Google Ads Settings. Visit adssettings.google.com to turn off ad personalization on Google services.
• Industry opt-out programs. Visit aboutads.info/choices (Digital Advertising Alliance) and optout.networkadvertising.org (Network Advertising Initiative) to manage interest-based advertising across participating companies.
• Mobile device controls. On iOS and Android you can reset your advertising identifier and request that apps and the operating system limit ad tracking through the device's privacy settings.

7. Global Privacy Control and Do Not Track

Global Privacy Control (GPC). GPC is a browser-level signal that tells websites you do not want your personal information sold or shared for cross-context behavioral advertising. We honor GPC signals as an opt-out of sale and sharing for the browser and device sending the signal, to the extent required by applicable U.S. state law. You can enable GPC through compatible browsers or extensions; visit globalprivacycontrol.org for setup instructions.

Do Not Track (DNT). DNT is an older browser preference that asks websites not to track. Because there is no consistent industry standard for how websites should respond to DNT, the Service does not currently take action based on DNT signals. Use the controls in Section 6 or enable GPC instead.

8. Consent and regional requirements

Some regions, including U.S. states with comprehensive privacy laws and jurisdictions outside the United States (such as the European Economic Area and the United Kingdom), require that specific types of cookies or processing be subject to consent or opt-out before they activate. If Zombival serves visitors in those regions, the Service should be configured with a consent banner or Consent Management Platform that satisfies the relevant rules, including Google's EU User Consent Policy and Consent Mode where applicable.

If you believe you should have been presented with a consent prompt and were not, please contact us at hello@zombival.com with the subject "Consent Inquiry."

10. Changes to this notice

We may update this Cookie Notice when we add new features such as a consent banner, additional analytics providers, or new advertising slots. The "Effective and last updated" date at the top reflects the most recent revision.

11. Contact

For questions about this Cookie Notice, contact hello@zombival.com.