Privacy Policy
Effective October 8, 2026
In short: we collect only what the game needs: your display name, your games and rating, and, if you sign in, basic details from Google, Facebook or Discord. We don't show ads, we don't use analytics or tracking, we don't use cookies, and we never sell your information. You can delete your data from inside the game at any time.
Who we are
Lion & Goat (the "game") is made by Zemora, operated by Muhammad Saqib ("we", "us"). This policy covers the game at liongoat.zemora.app, its mobile apps when released, and this website. Questions: privacy@zemora.app.
What we collect
When you play against the computer or a friend on the same device
Nothing leaves your device. Your settings (game mode, side, difficulty, sound and board look) are saved in your browser's local storage.
When you play online as a guest
- Display name you type, or a generated one such as "Guest 1234".
- A random player ID and a session token, so the game recognises you when you come back. The token is kept in your browser's local storage; our server stores only a one-way hash of it.
- Your games: opponent, sides, every move, result, how the game ended, and when it was played.
- Your rating and its changes after each game.
When you sign in with Google, Facebook or Discord
Everything above, plus what the provider shares with us after you agree on its sign-in page:
- The provider's ID for your account (so we recognise you next time).
- Your name and profile picture.
- Your email address, if the provider shares a verified one. We use it only to contact you about your account or a privacy request; we don't send marketing.
We never see or store your password for these services.
Technical information
Our web server records standard request logs (IP address, time, page requested, browser type) to keep the service secure and working. They are kept for a short period, normally up to two weeks. The game server uses IP addresses only briefly in memory to limit abuse, such as too many sign-in attempts.
How we use it
- To run online games: matching players, enforcing the move timer, and reconnecting you after a dropped connection.
- To calculate ratings and show your history and statistics.
- To keep the game fair and secure, and to fix problems.
- To answer you when you contact us.
What other players can see
- Your opponents see your display name and rating during a game.
- Leaderboard: signed-in players with at least 5 online games appear on the public leaderboard with their display name, profile picture, rating and number of games.
- Your opponents' game histories show your display name for games you played together (or "Deleted player" after you delete your data).
Sharing
We don't sell or rent your information, and we don't share it for advertising. We share it only:
- With our hosting provider, which runs our servers in the United States on our behalf.
- With the sign-in provider you choose, which learns that you signed in to our game, under its own privacy policy.
- When required by law, or to protect the rights and safety of our players or ourselves.
How long we keep it
| Information | Kept |
|---|---|
| Account or guest profile, rating, games | Until you delete it |
| Session tokens | Until you sign out, or 90 days after you last played |
| Web server logs | Normally up to two weeks |
| Database backups | 14 days |
Deleting your data
In the game, open Online → Profile → Delete account (guests: Delete my data). This immediately removes your name, picture, email, sign-in links and sessions. Your past games stay in your opponents' histories, shown as "Deleted player", so their ratings stay correct. Copies in backups disappear within 14 days. You can also ask us by email; see how to delete your account.
Your rights
Wherever you live, you can ask us to access, correct, export or delete your information, or object to how we use it. You can see most of it yourself in the game's profile card, change your display name in the lobby, and delete everything from the profile card. For anything else, write to privacy@zemora.app; we answer within 30 days. If you are in the European Economic Area or the United Kingdom, you may also complain to your data protection authority. If you are a California resident: we do not sell or share personal information as those terms are defined in the CCPA, and we will not treat you differently for using your rights.
Our legal basis for using your information (where the GDPR applies) is to provide the game you asked to play, and our legitimate interest in keeping it fair and secure.
Children
The game is suitable for all ages, but online sign-in is not directed at children under 13, and we do not knowingly collect personal information from them. Children under 13 can play against the computer or with a friend on the same device, which sends nothing to us. If you believe a child under 13 has given us personal information, contact us and we will delete it.
Security
All connections use HTTPS. Session tokens are random and stored only as hashes, they never appear in web addresses, and access to our servers is limited. No method of storage or transmission is completely secure, but we work to protect your information.
Changes to this policy
If we change this policy, we will update the date at the top. For important changes we will also tell you in the game before they take effect.
Contact
Zemora, operated by Muhammad Saqib · privacy@zemora.app