Privacy

In short

No cookies, no analytics, no advertising and nothing loaded from other companies' servers. The site remembers a few things in your own browser only when you use the feature that needs them, and our server keeps salted hashes — never your IP address or an identifier in the clear.

Who runs the site

mzpico.com is a private, non-commercial project run by Martin Matyáš, who is responsible for the data described here. Contact: privacy@mzpico.com.

Stored in your browser

  • Touch layout (mz-touch-swap) — only if you swap the on-screen controls on a phone.
  • Rating id (mz-voter) — a random number created the first time you rate a title, so you can change your rating later and so one person counts once. It says nothing about you.
  • Saved positions (IndexedDB mzpico) — only when you press Save, turn on automatic saving or open a .mzs file: a snapshot of the emulated machine with a picture of its screen. Delete them on the game's page. The automatic-saving choice itself is kept as mz-autosave.
This data stays on your device; clearing the site data in your browser removes it.

Stored on our server

  • Ratings: the title, your 1–5 stars, the time, a salted hash of your rating id together with your network address, and a salted hash of the address alone (so one network cannot cast more than a few votes). Kept while the rating is shown.
  • Play counts: a salted hash of your network address with the title and the day, so one network adds one play a day. Deleted after that day; only the total per title remains.
  • Abuse limit: a counter of writes per hashed address and hour. Deleted after the hour.
The salt is secret, so the hashes cannot be turned back into an address or an id. The legal basis is our legitimate interest in showing honest community ratings and protecting the site from abuse (GDPR art. 6(1)(f)).

Hosting

The site runs on Cloudflare, which processes your IP address and request details to deliver the pages and protect them from attacks, as a processor under its data processing terms. Cloudflare may process data outside the EU on the basis of the EU–US Data Privacy Framework and standard contractual clauses. We do not use Cloudflare's analytics or logs to follow visitors.

Your rights

You can ask for access to, correction or deletion of your data, and object to its processing. Because we only hold hashes, we can find your ratings only with the rating id from your browser — include it in your request (it is under mz-voter in the site's local storage). You can also complain to a data protection authority — in the Czech Republic the ÚOOÚ, or the one where you live.

Last updated: