This player’s privacy policy (the “Policy”) applies to personal data that we, TheLastOfZone, Inc., hold about our users. In this Policy, “we,” “us,” and “our” means TheLastOfZone, Inc., a company registered in Switzerland whose registered office is at Bahnhofstrasse 2, 6300 Zug, Switzerland.
This Policy deals with where we are acting as a ‘data controller’ under the data protection legislation: which essentially means where we are responsible for deciding what personal data we collect and how we use it. We may also operate as a ‘data processor’, meaning that we are processing personal data on behalf of another entity (for example, a publisher of one of our games).
When we refer to “Personal Data”, we mean data relating to you personally or from which you can be identified. Some of the information mentioned in this Policy is not “Personal Data” as is meant under data protection legislation, but we may refer to it to help you understand what we do.
We are committed to protecting and respecting the personal data of everyone we deal with – that is important to us and we know it is important to you.
1. Scope and Applicability
In this Policy, “you” or “your” means the individual User with a licence to access or use the digital goods, games, virtual items, virtual currency, websites, stores, and other related services made available from time to time (“Digital Goods & Services”).
If the user is younger than 18 years of age (or the minimum legal age of adults in your territory), then “you” or “your” shall mean the user’s parent or legal guardian entering into a legally binding contract with us on behalf of your minor child.
If you are younger than 18 years of age (or the minimum legal age of adults in your territory), you must review this Policy with your parent(s) or legal guardian(s), and they must agree to these terms on your behalf and take full responsibility for your compliance with them.
A summary of this Policy, specifically written for young people, is available here.
If you accept this Policy on behalf of your minor child, you are responsible for supervising and monitoring your minor child in using the licence for any Digital Goods & Services made available from time to time by us. You are also legally and financially responsible for all of your minor child’s actions while using the licence to and accessing our Digital Goods & Services.
2. Overview
In this Policy, you will also find information about:
- what types of personal data we hold about you,
- how and why we collect it,
- how we use it, and
- how we keep it secure.
You will also find information about your rights and how you may exercise them.
This Policy is drafted in the English language and may be translated into other languages. The English version of this Policy shall prevail if there is any conflict or inconsistency that requires clarification.
Please read this Policy carefully. If you need to contact us about anything contained here, or for anything else related to your personal data, you can reach us by email at privacyoffice@thelastofzone.com or by post at the address below.
3. What Information Do We Collect About You?
We will collect some information about you. The type of personal data that we collect depends on how you access and use our Digital Goods & Services. In general, we collect the following information:
A. Personal data you provide directly to us:
- Your contact information such as name, email address, and (if you choose to provide) your phone number and date of birth;
- If you are a parent or legal guardian of a minor child, we will collect your email address;
- Your in-game User ID;
- Your username and password for your TheLastOfZone ID;
- Data you provide to verify your account;
- Other data you choose to provide us, such as data to identify a lost or lapsed account or recovery question answers;
- Information about your purchases and payments (payment details are collected by our payment service providers, not by us directly);
- Personal data you provide in connection with surveys, promotions, sweepstakes, competitions, campaigns, and other events;
- Personal data collected to verify your legal relationship with your parent(s) or legal guardian(s);
- Other personal data collected based on your explicit consent or our legitimate business interest for a specific purpose.
B. Personal data we collect automatically when you access and use our services:
- Your game profile, including your profile picture and game-related information (inventory, progress, etc.);
- Your game user account or role ID(s) – TheLastOfZone-specific ID(s) generated by our servers;
- Analytics ID – a randomly generated anonymous identifier used to distinguish activity;
- Your internet protocol (IP) address and mobile device identifiers (device ID, advertising ID, MAC address, IMEI, etc.);
- Data to fight fraud (e.g., refund abuse, advertising click fraud);
- Usage data including information about how you use our website, products, and services;
- Device data such as device name, operating system, browser type, and language;
- Marketing and communications preferences, including how you want to receive marketing and notifications.
C. Personal data we collect from third parties:
- Third-party account ID (e.g., Facebook, Xbox, Game Center, VK, WeChat, Google, Steam, PSN) used for login, social features, or integration;
- Payment confirmation details, including your purchase history and amounts spent;
- Discord account data (if linked).
4. How We Collect Information About You
We may collect this information in different ways depending on how we interact with you:
Direct interactions:
You may provide us with identity, contact, or other data by filling out forms, or by corresponding with us via post, phone, in-game, email, or otherwise. This includes when you:
- Use our products or services;
- Create a game account;
- Interact with our Support Team or Privacy Office;
- Subscribe to mailing lists;
- Enter competitions, promotions, or surveys;
- Provide feedback;
- Provide services to us.
Third parties:
We may receive personal data from third parties if you link your account or make it available via your privacy settings. This includes:
- Account IDs and game profiles from Facebook, Google, Xbox, Steam, PSN, etc.;
- Technical data from advertising networks and search providers.
Automated technologies:
As you interact with our website or games, we may automatically collect technical data about your device, browsing, and gameplay. We do this via cookies, server logs, pixels, and similar technologies. You can reject cookies in your browser settings (see Section 6 for more).
5. How We Use Your Information
We use your information for various purposes, such as:
- To send you communications related to our services, answer enquiries, or resolve complaints;
- To obtain parental consent where required;
- Providing, managing, and customising our services and games;
- Enabling purchases of virtual items and processing related payments (with third-party providers);
- Verifying and confirming account details and payments;
- Administering and securing accounts, websites, and systems;
- Direct marketing (with consent) and informing you of new products and services;
- Running surveys, polls, competitions, and promotions;
- Providing on-site and in-app advertising and promotions;
- Developing and improving games, detecting cheating, fraud, or unlawful activity;
- Providing social features within services;
- Sending updates, security alerts, and support messages;
- Moderating user-generated content (UGC);
- Complying with legal or regulatory obligations;
- Engaging with you via third-party social features (e.g., social media).
6. Cookies
Like most online services, we and our partners may use cookies and similar technologies to provide and personalise our services, analyse gameplay, target advertisements, and prevent fraud.
Cookies are small text files stored by your browser on your computer or mobile device. A cookie does not give us access to your device or any information other than what you choose to share with us. You can modify your browser settings to decline cookies if you wish; however, some parts of our services may not function properly without them.
We and our partners may also use tracking technologies such as beacons, tags, and scripts to analyse trends, administer websites, track movements, and gather demographic information. Reports may be generated on both an individual and aggregated basis.
Users can control cookies at the individual browser level. If you reject cookies, you may still use our services, but your access to certain features may be limited.
For more details about how we use these technologies and your opt-out options, please see our Cookies Policy.
7. Legal Basis for Processing
There are several legal grounds for processing personal data. Which one applies depends on the context in which we collect and use your data. Most often, processing will be based on:
- Consent – you have given us permission (e.g., to send marketing communications);
- Legitimate interest – we use your data in a way that is necessary for our business and proportionate, while respecting your privacy rights;
- Contractual necessity – processing is required to perform a contract with you or to take steps at your request before entering into a contract (e.g., to manage your account);
- Legal obligation – processing is required to comply with applicable laws or regulations.
We generally do not process “special categories” of personal data (e.g., health, religion, political opinions, ethnicity, sexuality). If ever required, we will seek specific consent or rely on legal grounds where appropriate.
8. Children
Protecting children’s privacy is of high importance to us.
- Our websites and games are not intended for children younger than 18 years of age (or the minimum legal age in your territory).
- We do not knowingly collect data from children under 13 years old in the U.S. or under 16 years old in some EU jurisdictions.
- For games that may appeal to minors, we take extra steps to limit access and collect only the minimum required data.
When you access our Digital Goods & Services, we may restrict the collection of data for minors. We require parental permission before collecting a child’s personal data. If we become aware that data has been provided by a minor without consent, we will delete it or suspend the account until consent is verified.
We also encourage parents to read our Parental Guidelines, available on our website.
9. Sharing Your Information
9.1 Data Storage
We store your Personal Data on secure servers, primarily located in the United States.
9.2 Sharing within our Group
We may share your Personal Data with TheLastOfZone group affiliates outside your country of residence. Access is limited to authorised staff on a need-to-know basis and governed by strict security and authorisation protocols.
9.3 Sharing with Third Parties
We may share your data with trusted third parties where necessary to provide services, respond to enquiries, or for purposes outlined in this Policy. These may include:
- Business partners and suppliers;
- Payment service providers (your payment data is processed by them under their own privacy policies);
- Sub-processors for analytics and data storage (information is anonymised where possible);
- Auditors, insurers, lawyers, and professional advisers;
- Law enforcement or government agencies where required by law;
- Other business entities in the event of a merger, acquisition, or reorganisation.
9.4 Public Sharing
When you post or share User-Generated Content (UGC) such as images, videos, or nicknames in public platforms or forums, this information can be viewed, collected, and used by others.
Other users may see your game profile, including nickname and profile picture. If you use your real name, it may become publicly visible. We strongly recommend not using your real name in nicknames or posting sensitive data in public forums.
You are solely responsible for the information you disclose publicly while using our services.
10. Social Features
Social interaction is a core component of our Digital Goods & Services. Other users may see your profile data, in-game activity, and messages you post.
Our services may also include features from partners, such as social media tools. With your consent, these partners may access your data and process it under their own privacy policies. We encourage you to review the policies of any social networks you connect with and adjust your preferences if you wish to opt out.
11. International Data Transfers
TheLastOfZone operates globally and may transfer your Personal Data to countries outside Switzerland and the European Economic Area (EEA). Different countries may have different data protection standards. To safeguard your data, we rely on:
- Adequacy Decisions (Art. 45 GDPR): Transfers to countries officially recognised as having adequate data protection.
- Standard Contractual Clauses (Art. 46 GDPR): Approved contractual safeguards to protect cross-border data transfers.
- Article 49 GDPR Derogations: For specific cases where adequacy or contractual safeguards do not apply.
For more information about our international data transfer practices, please contact us at privacyoffice@thelastofzone.com.
12. Your Rights
Under data protection laws, you have certain rights regarding your personal data. Depending on your location, you may have the right to:
- Request access to or a copy of personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of your data where we have no lawful reason to retain it;
- Withdraw consent where processing is based on your prior consent;
- Request that we stop or adjust marketing communications;
- Restrict our processing of your personal data in certain circumstances;
- Request data portability (to move your data elsewhere);
- Object to processing in specific situations;
- Not be subject to decisions based solely on automated processing, including profiling.
Please note: some rights are not absolute and may not apply in all circumstances (e.g., where we must retain data for legal obligations).
You can exercise your rights by:
- Visiting our Data Protection Request page;
- Emailing our Privacy Office at privacyoffice@thelastofzone.com;
- Deleting your account directly within the game;
- Contacting our Support Team in-app to request deletion of your account and data.
We may ask for proof of identity before processing your request. We aim to respond within one month, in line with data protection law.
13. EU & UK Representatives
If you are located in the European Union (EU), TheLastOfZone has appointed:
TheLastOfZone Games Spain SL
Carrer Casp 21, Pl. 5ª, 08010, Barcelona, Spain
Email: EUrepresentative@thelastofzone.com
If you are located in the United Kingdom (UK), TheLastOfZone has appointed:
GRCI Law Limited
Email: ukrep@grcilaw.com
(Please include “TheLastOfZone, Inc.” when contacting our UK representative.)
You may also contact your local Data Protection Authority if you have concerns not resolved by us.
14. Marketing
If you consent to receive notifications for a particular game, we may use your data to send tailored offers, promotions, or updates.
You can:
- Opt out of personalised in-game offers through the game’s settings;
- Disable notifications on your device or within app settings;
- Adjust privacy settings on your Android or iOS device to opt out of interest-based ads (e.g., “limit ad tracking” on iOS or “opt out of interest-based ads” on Android).
We will respect your preferences at all times.
15. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by law. This means:
- While you are actively using our games and services, we retain data to provide access and manage your account.
- By law, we must keep basic customer data (contact, identity, and transaction data) for up to six tax years plus the current year.
- If your account has been inactive for 365 consecutive days, we may delete, anonymise, or de-identify your account. Some limited data may still be retained to resolve disputes, enforce our Terms, or meet legal/security requirements.
- We may anonymise your data for research or statistical purposes, in which case it may be used indefinitely without further notice.
- If you opt out of marketing, we will keep the necessary details to ensure we respect your choice.
16. Data Security
We use appropriate technical and organisational measures (TOMs) to protect your personal data against:
- unauthorised access or disclosure,
- accidental loss or alteration,
- unlawful processing.
Our security practices follow international standards such as ISO 27001 and ISO 27701.
While we strive to protect your data, no system is 100% secure. If you are given a password, you are responsible for keeping it confidential and not sharing it with others.
We will continue to do our best to safeguard your data in compliance with applicable data protection laws.
17. Links to Other Sites
Our websites and services may contain links to other sites (including via social media buttons). While we aim to link only to sites that respect privacy, we are not responsible for their content or privacy practices.
Once you leave our site, your use is subject to the terms and policies of the third-party site. We strongly encourage you to review their privacy policies before providing any data.
18. Additional Information for California Residents
California users have specific rights under the California Consumer Privacy Act (CCPA) and related laws.
For details, please see our CCPA Notice at:
https://thelastofzone.com/players-ccpa-notice/19. Contact
Questions, comments, and requests regarding this Policy are welcome. Please contact us at:
TheLastOfZone, Inc.
Bahnhofstrasse 2, 6300 Zug, Switzerland
Email: privacyoffice@thelastofzone.com
20. Changes to This Policy
We may update this Policy from time to time. Updates will be posted on this page and, where appropriate, notified to you via in-game messages.
By continuing to use our Digital Goods & Services after an update becomes effective, you agree to be bound by the revised Policy. If you do not agree, you must discontinue using our services.
© 2025 TheLastOfZone, Inc. All Rights Reserved.