Privacy disclosure

Operator: Zomola · United States · Updated October 5, 2026

1. Who is responsible

Zomola operates Ayo Online from the United States. For privacy questions, access or deletion requests, contact hepzy1984@gmail.com.

2. Information used by the game

• Account information: Clerk handles account registration and sign-in. Depending on your chosen sign-in method, it processes your email address, account identifiers, profile details and authentication/session information.
• Multiplayer games: our game database stores account identifiers, chosen player names and avatars, room ownership and membership, game boards, turns, scores and scenery. Room codes and short-lived recovery information are used to join or reconnect to a game.
• Leaderboard information: account identifiers, chosen display names, captured-seed totals, wins and finished-round totals are stored separately from rooms. Display names and scores may appear on the public leaderboard. Avoid using a name that reveals information you do not want other players to see.
• On-device information: browser storage remembers practice games, difficulty/guidance, avatar/scenery preferences, sound settings and privacy choices. Practice results stay on that device and do not contribute to the ranked leaderboard.
• Technical information: hosting, authentication and network services process information needed to deliver and protect the service, such as network addresses, browser/device information and request/error logs. Game-server logs record request details, connection events and errors; authentication headers and cookies are redacted from the application logger.

We use this information to authenticate players, run approved multiplayer games, restore progress, show results and leaderboards, remember requested settings, prevent abuse and investigate service problems.

3. What other people can see

Your approved opponent can see your chosen player name/avatar and shared game state. Leaderboard visitors can see displayed names and statistics. A room code lets another player request entry; the host must approve the request. Treat your invite code as something to share intentionally, not as a password. Account emails are not displayed by the game's leaderboard.

4. Service providers

Clerk provides authentication. Replit provides hosting and database infrastructure. These services process data to operate the application under their own terms and privacy policies.

The current design also requests typography from Google Fonts. Font requests may disclose technical information such as your network address and browser information to Google. Fonts are distinct from advertising; rejecting optional advertising does not disable the game's existing sign-in, hosting or typography services.

Providers may process information outside your country. Contact Zomola for questions about applicable safeguards or provider arrangements. We do not promise a particular storage region or provider deletion period in this draft.

5. Browser storage and consent

Sign-in uses authentication/session technology. Storage used for requested saved games, reconnecting and settings supports the game features you use. Privacy-choice storage remembers your decision for up to 180 days; after that, or after an incompatible notice update, you may be asked again.

Optional advertising is off until you explicitly choose to allow it. You can reject optional advertising and still play, or change your choice at any time using Privacy choices. Choices are browser/device-specific and do not change your opponent's choices.

Deleting browser storage removes local practice/settings and may sign you out. It does not automatically delete server-saved rooms, leaderboard records or provider-held account information.

6. Advertising: not active yet

No live advertising network, advertising cookies or dedicated third-party advertising analytics are active. Sign-in, waiting rooms, round results, account controls and other utility screens are ad-free. Allowing optional advertising saves a preference only: it does not load an ad network, generate ad revenue or enroll you in personalized advertising. The AdSense ownership-verification tag does not itself serve ads.

Before enabling an advertising provider, Zomola must disclose that provider and its data uses, obtain any additional required permissions, and implement the provider's required consent system. These controls are not a Google-certified consent management platform. Google advertising in applicable regions requires additional consent-platform setup. Advertising must not interrupt moves or cover the board.

7. Retention and deletion

Multiplayer rooms remain saved until the host ends them. Lifetime leaderboard records are separate and are not automatically erased when a room ends. Local practice and settings remain until replaced or cleared from the browser. Account/session information and technical logs are subject to the relevant provider's retention practices and the service's operational needs.

You can delete your account, associated multiplayer games and leaderboard entry from the account deletion page. Shared games are removed for both players; other players' lifetime totals are preserved. Pending requests keep only an account identifier, status and request/attempt times until authentication-provider deletion succeeds. They retry on service startup and about once a minute while the service runs; idle periods can delay retries. A minimal security marker is eligible for removal 24 hours after completion and is removed on the next maintenance pass to block stale sessions and in-flight writes.

Hosting backups and provider/security logs may retain earlier records for recovery, abuse prevention or legal obligations under the providers' retention policies. We do not promise instant backup erasure or an unverified fixed provider retention period. Contact Zomola for provider-specific details. We attempt to clear this account's local practice and preferences on the device used for deletion and report if the browser blocks this. Other devices must clear their own site data. Manual email requests require ownership verification; opening an email draft is not submission.

8. Your rights and choices

Depending on your location and applicable United States federal/state or other privacy laws, you may have rights to access, correct, delete or obtain a copy of your information, withdraw consent, or object to certain processing. Send requests to hepzy1984@gmail.com. The availability of particular statutory rights depends on the law and its applicability; this draft does not claim that every law applies to Zomola.

9. Ages 13 and older

Ayo Online is intended for teens and adults aged 13 or older, not children under 13. If you are under 13, do not create an account or use the game. If you believe a child under 13 has provided information, contact Zomola so it can investigate and arrange appropriate removal. This audience statement is not a claim that the current sign-in system verifies age.

No personalized-advertising functionality is enabled. Any future advertising must account for additional protections that may apply to teenagers as well as children.

10. Security and updates

The application uses authenticated accounts and room-approval/access controls. No online service can guarantee absolute security. Report suspected privacy or security issues to the contact above.

Zomola will update this page when practices change and identify the update date. Material changes to optional data uses should be explained before those uses begin, with fresh consent where required. Applicable privacy laws, rather than this disclosure alone, determine your legal rights.