Zoaria · Legal texts
Last updated: 29 September 2026. Zoaria is an online game played in the browser at zoaria.io. This English version is provided for convenience; if the two differ, the Spanish version prevails.
1. Privacy notice
This notice explains what data Zoaria collects, what it is used for and what rights you have. It is written in accordance with the Mexican Federal Law on the Protection of Personal Data Held by Private Parties and, for players in the European Union, the General Data Protection Regulation (GDPR).
1.1 Data controller
The controller of your data is Luis Hernando Aguirre Espinosa, with address at Playa Larga 11, La Quebrada, Cuautitlán Izcalli, Estado de México, C.P. 54769, Mexico. You can write to privacy@zoaria.io about anything related to your data.
1.2 What data we collect
Zoaria is designed to ask for the minimum. To play we do not ask for your real name, email address, phone number or postal address. The email is optional, except to buy in the shop, where the payment details are also needed.
| Data | When | Details |
|---|---|---|
| Username | When you create an account | The name you choose (3 to 24 letters, digits, hyphens or underscores). Other players can see it next to your creature. |
| Password | When you create an account | It is never stored as such: only an irreversible derivative is kept (PBKDF2 with SHA-256 and 100,000 iterations, with its own salt per account). Nobody, not even us, can read or recover it. |
| Email address | If you add it to your account or buy in the shop | The one you type in “Your account” or when paying. It is linked to your account once you confirm it with the link we send you: with it you can log in and receive the link to recover your password, and it is used for the purchase receipt. We only write to you to confirm the email, recover the password, let you know that the account email has changed, and send receipts. It is not shown to other players. |
| Purchases | Only if you buy in the shop | Which items you bought, when, and their amount. Your card details do not pass through Zoaria and are not stored here: you type them in a Stripe form, and Stripe processes the payment. |
| Game data | While you play | Your account's internal identifier, the world (Pangea) you play in, your creature and what happens to it, the language you chose, and the dates the account was created and last connected. |
| Guest identifier | If you play without an account | A random code your browser stores to recognise you between visits. It is not linked to any person. |
| Technical connection data | On every visit | IP address, browser and system type, approximate country and pages loaded. Our infrastructure provider (Cloudflare) processes them to serve the site, protect it from attacks and give us aggregated visit statistics (Cloudflare Web Analytics, with no cookies or persistent identifiers). |
| Error reports | If the game fails in your browser | The error message, the file and line where it happened, the page, the browser type and the seconds since you opened the game. No username and no content of yours. |
1.3 What we use it for
- So that your account and your creature wait for you on any computer or phone.
- So that the game works: the world is shared and your creature is shown to other players with your username.
- To charge what you buy in the shop, deliver it to your account and handle refunds.
- To keep the site available and secure and to fix bugs.
- To know, in aggregate and anonymously, how many people play and from what kinds of devices.
We do not sell your data or use it to make automated decisions about you. We do not build advertising profiles with it.
1.4 Legal basis
We process your data because it is needed to provide the service you request when you create the account and play (performance of a contract), because of our legitimate interest in keeping the site secure and running, and, where applicable, with your consent (for example, for personalised ads, if there were any in the future; see section 3).
1.5 Who it is shared with
Only with the providers we need to run the game, who act as processors under their own data-protection guarantees:
- Cloudflare, Inc. (United States): hosts the game, the world server, the accounts database and the visit statistics. Cloudflare has standard contractual clauses and certifications for international data transfers.
- Stripe (Stripe Payments México and its affiliates, with processing in the United States): processes the shop's payments. It receives your email, your card details and your country, and calculates taxes. Zoaria never sees or stores your card number.
- Google LLC (ads, only when active): see section 3.
Beyond that, we will only share data if a competent authority requires it by law.
1.6 How long we keep it
- Purchases: while the account exists and, afterwards, for as long as tax obligations require.
- Account and game data: while the account exists. You can ask us to delete it at any time (see 1.7).
- Technical connection and error logs: up to 30 days.
- Visit statistics: aggregated and anonymous; they cannot identify you.
1.7 Your rights
You can access your data, rectify it, cancel it or object to its use (ARCO rights under Mexican law) and, if you are in the European Union, also request its portability or the restriction of processing. Just write to privacy@zoaria.io from the game with your username; to check that the account is yours we will ask you to log in with it or to prove control of it in another reasonable way. We will reply within 20 working days (Mexico) or one month (EU). If you are not satisfied, you can go to the Mexican National Institute for Transparency, Access to Information and Personal Data Protection (INAI) or to the data-protection authority of your country.
Deleting the account deletes your username and your derived password; your creature becomes one more animal of the world, with no owner.
1.8 Security
The game is always served encrypted (HTTPS and secure WebSocket). Passwords are stored derived and irreversible. Access to the database is limited to the controller. No system is infallible: if we detected a breach affecting your data, we would let you know through the game itself and, where the law requires it, notify the competent authority.
1.9 Minors
Zoaria is intended for people aged 13 or over. We do not knowingly collect data from children under that age. If you are a parent or guardian and believe a child in your care has created an account, write to privacy@zoaria.io and we will delete it.
1.10 Changes to this notice
If we change this notice, we will publish the new version on this same page with its date. If the change affects how we use your data, we will also announce it inside the game.
2. Terms of use
By entering Zoaria, and especially by creating an account, you accept these terms. If you do not agree, do not use the game.
2.1 The service
Zoaria is a free online game, with an optional shop of paid accessories and skins, in which you watch and control a creature in a shared, simulated world that stays alive even when you are not connected. The game is under continuous development: its rules, creatures, worlds and looks may change at any time, and the world may be reset when an update requires it. It is offered by Luis Hernando Aguirre Espinosa.
2.2 Your account
- It is created with a username and a password, nothing else. You can add an email from “Your account” or when buying in the shop. An email does not count until you confirm it by opening the link we send you; once confirmed, you can log in with it and request a link to set a new password. Changing it requires your password and we notify the previous email. An account without an email has no password recovery: if you forget it, the account and its creature cannot be recovered. Keep it somewhere safe.
- The account is personal. You are responsible for what is done with it and for keeping the password secret.
- The username is visible to other players. It may not be offensive, misleading or impersonate another person or entity. We may change or remove names that break this rule.
- You can play without an account, as a guest; in that case your creature is only recognised from that same browser and may be lost.
2.3 Purchases and refunds
Playing is free. The shop is optional and sells accessories and skins for your creature, which only change its appearance: they give no advantage in the game.
- What you buy. A personal, non-transferable licence to use that item inside Zoaria with your account, for as long as the game exists. You do not buy a physical object or the ownership of the design. Items cannot be resold, gifted, exchanged for money or moved to another account.
- Price and taxes. The price of each item is shown before paying, in Mexican pesos and with taxes included. If you pay from another country, the total may be shown and charged in your currency; the exchange rate is set by the payment processor and includes its conversion fee. Your bank may apply its own charges.
- Payment. Payments are processed by Stripe. Zoaria does not see or store your card details. To buy you need an account and an email address, which is linked to the account.
- Delivery. The item is delivered to your account as soon as the payment is confirmed, normally within seconds. By paying you request that immediate delivery and accept that, once delivered, the purchase is final except in the refund cases below. If you live in the European Union, this means you waive the 14-day right of withdrawal for that digital content.
- Refunds. We refund the full amount, by the same payment method, if you ask us within 14 days of the purchase and one of these applies: we charged you and the item did not reach your account; we charged you twice for the same thing; you did not authorise the charge; the item has a defect that prevents using it and we do not fix it within a reasonable time; or the purchase was made by a minor without permission from a parent or guardian. Outside those cases, and because it is digital content already delivered, there is no refund for a change of mind.
- How to request it. Write to support@zoaria.io from your account's email, with your username, the date and what you bought. We reply within 10 working days at most. The refund may take 5 to 10 working days to show on your statement, depending on your bank.
- What happens to the item. When a purchase is refunded, or if the bank reverses the charge (chargeback), the item is removed from the account. Opening chargebacks without cause may lead to the account being closed.
- Changes and closure. We may change prices, add or remove items from the shop and adjust the look of an item. What you already bought remains yours. If Zoaria ever closes, we will give at least 30 days' notice inside the game; purchases made in the 30 days before the notice will be refunded.
- World resets and account closure. Your purchases go with your account, not with your creature: they are not lost if your creature dies or if the world is reset. If we close an account for breaking these terms, the items bought with it are not refunded.
- Donations. You can support the game with any amount you choose (minimum 30 MXN, charged in your currency), with or without an account. A donation gives nothing in return and is not refunded, except for duplicate or unauthorised charges.
- Your consumer rights. Nothing above limits the rights the law grants you. In Mexico you can go to the Federal Consumer Protection Agency (PROFECO).
2.4 Rules of conduct
It is not allowed to:
- Use programs, scripts or modifications to automate the game, gain an advantage or overload the server.
- Exploit bugs in the game to the detriment of other players instead of reporting them.
- Create accounts in bulk or in order to harass, impersonate or bother other people.
- Try to access other people's accounts, the server or data that is not yours.
If you break these rules we may suspend or delete your account without prior notice.
2.5 Intellectual property
The game, its code, its world and its design belong to Luis Hernando Aguirre Espinosa or are used under licences that allow it; the three-dimensional models of creatures and people come from works published under the CC0 licence (public domain). We grant you a personal, free, non-exclusive and revocable licence to play from your browser. You may not copy, sell or redistribute the game or its parts beyond what that licence allows.
Zoaria is an independent name and work; it is not affiliated with any film, television or video-game franchise.
2.6 Availability and warranties
The game is offered “as is” and “as available”, with no guarantee that it will work without interruptions or errors. We may suspend, change or close it, in whole or in part and at any time, and we will give reasonable notice when possible. Progress in the game (creatures, lineage, worlds) has no economic value and may be lost through world resets, failures or closure of the service.
2.7 Limitation of liability
To the extent permitted by law, Luis Hernando Aguirre Espinosa is not liable for indirect damages, loss of game data, loss of profit or harm arising from the use of, or inability to use, the game. Nothing in these terms limits the rights granted to you by the consumer-protection laws that apply to you.
2.8 Ads
Zoaria is free and may show third-party ads to sustain itself. Ads are identified as such and are not part of the game. See section 3 about the cookies they may use.
2.9 Changes to the terms
We may update these terms. The version in force is always the one published on this page with its date. If you keep playing after a change, we understand that you accept it; if a change is important, we will announce it inside the game.
2.10 Governing law
These terms are governed by the laws of the United Mexican States. For any dispute, the parties submit to the courts of Mexico City, without prejudice to the rights you may have as a consumer in your place of residence.
3. Cookies and storage in your browser
Zoaria uses no tracking cookies of its own. It uses your browser's local storage (“localStorage”) only so that the game works:
| Key | What for | How long |
|---|---|---|
| isla:ficha | Your logged-in session (a credential signed by the server, with an expiry). | 30 days or until you log out. |
| isla:usuario · isla:pangea | Your username and the world you play in, to show them without asking the server again. | Until you log out. |
| isla:idioma | The language you chose for the game. | Until you clear the site's data. |
| isla:jugador | Your guest identifier, if you play without an account. | Until you clear the site's data. |
| isla:pwa-instalada | Remembering that you already installed the game as an app, so we do not offer it again. | Until you clear the site's data. |
| isla.volumen.ambiente · isla.volumen.criaturas · isla.volumen.interfaz | The three volumes you left in the sound panel. | Until you clear the site's data. |
| Turnstile (Cloudflare) | The captcha shown when creating an account, to stop automated sign-ups. It is served by Cloudflare and may set a technical cookie of its own while it is being solved. | Session. |
This data is necessary for the service you request and does not require consent. You can delete it at any time from your browser's settings (site data for zoaria.io); doing so will log you out.
3.1 Statistics
We use Cloudflare Web Analytics, which measures visits in aggregate without cookies, without device fingerprinting and without persistent identifiers. You can read its policy at cloudflare.com/privacypolicy.
3.2 Advertising cookies (only when there are ads)
If Zoaria shows ads, they are served by Google (Google AdSense). Google and its partners may use cookies to show ads and measure their performance. In the countries where the law requires it (European Union, United Kingdom, Switzerland and others), before loading those cookies we will ask for your consent through a consent-management notice, and you will be able to choose non-personalised ads or refuse the use of advertising cookies. You can change your choice at any time from the “Privacy and ads” link in the game. More about how Google uses data: policies.google.com/technologies/partner-sites.
Current status: yes, Zoaria shows ads.
4. Contact
Luis Hernando Aguirre Espinosa · Playa Larga 11, La Quebrada, Cuautitlán Izcalli, Estado de México, C.P. 54769, Mexico · privacy@zoaria.io
← Back to the game