เว็บไซต์เป็นหน้าเว็บธรรมดา ไม่มีบัญชีผู้ใช้ ไม่มีฟอร์ม และไม่ตั้งคุกกี้ เราจำภาษาที่คุณเลือกไว้ในเบราว์เซอร์ (zilo-lang ใน localStorage) หน้าแรกโหลดฟอนต์จาก Google Fonts ซึ่งทำให้ Google ได้รับที่อยู่ IP และข้อมูลเบราว์เซอร์ของคุณตามนโยบายของ Google
In short: we collect as little as our games need. Most data (saves, settings) stays in your own browser. No ads, no selling data, no third-party analytics or tracking cookies. We never record or upload your voice. Everything that does reach a server (such as what you say to Last Stream's AI chat) is described below.
1. Data controller and scope
Zilo Game is an indie game studio in Thailand, operated by an individual developer, Thanakarn Lorlertsakul, who is the data controller under Thailand's Personal Data Protection Act B.E. 2562 (PDPA). Contact: contact@zilo-game.dev
This policy covers our services: the website zilo-game.dev (including www) and every game we publish, now or in the future. New games are covered automatically; if a game handles data differently from what is written here, we will add the details here or on a game-specific policy page before it starts. Our team's internal tools (such as admin pages behind sign-in) are not public services.
2. The website zilo-game.dev
The website is a plain web page: no accounts, no forms, no cookies. It remembers your language choice in your browser (zilo-lang in localStorage). The home page loads fonts from Google Fonts, so Google receives your IP address and browser details under Google's policy.
3. Arrow Tag
Arrow Tag has its own detailed game-specific Privacy Policy. In short: you can play as a Guest without sending identifying data. If you sign in with Google or Discord, our server keeps only the provider + user id, the display name you choose, and related timestamps — no email — and uses a 30-day at_session cookie. During online play, the server relays your name and in-game actions to players in the same room in real time. The game may run as a Discord Activity, where Discord's policy also applies.
4. Last Stream
Saves and settings
Last Stream has no accounts and no server-side saves. Saves, checkpoints, progress, settings and achievements are kept in your browser's localStorage (keys starting with last_stream.). We get no copy. Clearing site data deletes your saves.
Anonymous play statistics
To see how far players get and which choices and endings they reach, the game sends anonymous play statistics: a random install id created on your device (not linked to your name, account or IP address), a random id per visit, the game build, your progress (which nights you start and finish, minutes played per night, where you stop), the options you pick at story choice points, the ending you reach, achievements, and simple counts (for example how many times you used push-to-talk or replied in the in-game chat). It never includes what you type or say, your player name, or any audio. We do not store IP addresses. The raw events are deleted automatically after 30 days; only anonymous totals (counts per day and build) are kept. You can turn this off at any time in Settings › General › "Send anonymous play stats", and nothing is sent while your browser's Do Not Track (or Global Privacy Control) setting is on.
Microphone and speech-to-text
The microphone is optional (off by default). When you turn it on and allow it, the game uses the audio on your device to notice when you speak, and uses your browser's Web Speech API to turn speech into text. We never record, store or upload your audio. However, some browsers (such as Chrome, Edge and Safari) may send audio to their maker's online speech service (Google, Microsoft, Apple) under that company's policy. When your browser supports on-device recognition, the game uses it.
AI chat
During the in-game stream, when you speak into the mic (with "AI chat reacts to your voice" on, which is the default but only works with the mic on) or pick a reply from a card, the game sends text to our server on Cloudflare Workers: what you said or the reply you picked (about the last minute), recent in-game chat lines, game progress (which night, language), a random session id that is new every run, and the streamer/channel names you set in the game. The server uses this so the "viewers" can reply, and may pass text on to:
Anthropic (Claude models) — the main AI provider that writes chat lines. Your streamer and channel names are never sent to the model (the server fills them in afterwards).
Cloudflare Workers AI — compares sentence meaning to pick a pre-written reply; runs on Cloudflare's network.
Typesafe AI — classifies short things you say or pick in certain scenes.
We keep no chat logs: what you say or type is sent only to create a reply, and is held temporarily in the session's memory (under the random session id) for at most 10 minutes, then deleted. There is no permanent record, and our team cannot read it back. The server only remembers the lines the in-game "viewers" already sent, for up to 3 hours, to avoid repeats (these are generated lines, not your words). The model providers (Anthropic, Typesafe AI and Cloudflare Workers AI) process the text under their own policies. This text is not used to identify you, we never ask for contact details, and you can turn AI chat off in Settings.
Achievements
When you unlock an achievement, the game sends the achievement id with a random install id (created in your browser, not linked to you) so we can show what percentage of players unlocked it. We store only counters and the list of achievement ids per install id.
Testing period
Before public launch, the game page asks for a tester code. When the code is right we set an ls_door cookie (HttpOnly, Secure, 30 days) holding only a code check value, nothing about you. When the game is published on itch.io, itch.io's pages follow itch.io's policy, and the game still talks to our server as described above.
4A. Buying the Keepsake Collection (1 in a Meowlion)
The optional Keepsake Collection (permanent unlock) of 1 in a Meowlion is paid through Stripe. We never see or store card data. Stripe keeps your e-mail and sends your receipt under Stripe's own privacy policy (stripe.com/privacy). We keep only the order id and a hash of your e-mail, to restore the unlock and to process refunds (we do not keep the e-mail itself). See the refund policy (7 days).
5. Cookies and browser storage
We use no advertising or tracking cookies. Our only cookies are necessary ones: Arrow Tag's at_oauth (10 minutes) and at_session (30 days) when you sign in, and Last Stream's ls_door (30 days) during testing. Cloudflare may set its own network-security cookies. Everything else lives in your browser's localStorage/sessionStorage, which we never receive.
6. Hosting, server logs and processors
All our services are hosted on Cloudflare (Workers, Durable Objects, KV), which runs on a global network. Cloudflare may automatically log request data such as IP address, time, URL and browser details for operation, security and debugging, and keeps it for the periods Cloudflare sets. We use it only to run the services and prevent abuse. Our other processors are the AI providers in section 4, Google/Discord when you choose to sign in to Arrow Tag, and Google Fonts on the home page. Trailer videos are embedded from YouTube in no-cookie mode (youtube-nocookie.com) and load only when you press play. We do not use Google Analytics or any third-party analytics or tracking tools, and we show no ads.
7. Purposes and legal basis
Providing the games you ask for, such as online rooms and AI chat (contract).
Microphone and sign-in, when you choose them (consent — withdraw any time in Settings).
Security, preventing cheating and abuse, and anonymous achievement statistics (legitimate interests).
We do not sell personal data and do not use it for advertising.
8. Sharing and international transfers
We do not share your data with anyone except the processors in sections 4 and 6, other players in the same room (names and in-game actions), or when the law requires it. Most of these processors are in the United States or run on global networks, so data may be processed outside Thailand; they protect it under their own standards and contracts.
9. Retention
Data in your browser: until you delete it.
What you say or type to the AI chat: at most 10 minutes in the session's memory, then deleted (no chat logs) · lines the chat already sent: up to 3 hours.
Arrow Tag accounts: until you ask for deletion · room state: temporary, per Arrow Tag's policy.
Achievement counters: for the life of the game (anonymous).
Cloudflare request logs: as Cloudflare sets · emails you send us: as long as needed to reply.
10. Children
Our services are for people aged 13 and over. We do not knowingly collect personal data from anyone under 13. Children should play under a parent's supervision, should not sign in, and should not use their real name in games. If a parent believes we have received a child's data, please contact us and we will delete it.
11. Your rights and how to delete data
Under the PDPA and similar laws (such as the GDPR) you may ask to access, correct, delete, object to or restrict processing of your data, get a copy of it, withdraw consent, and complain to a supervisory authority (in Thailand, the Office of the Personal Data Protection Committee). Because most data lives in your browser, the most effective steps are:
clear the site data for the game's domain in your browser;
turn off the mic or AI chat in Last Stream's Settings;
sign out or delete your Arrow Tag account as described in its policy;
email contact@zilo-game.dev for anything else — we reply within 30 days. (We keep no chat logs, so what you said or typed is already deleted within 10 minutes.)
12. Changes to this policy
If we change how we collect data (for example, adding accounts, analytics, or a new game that uses data differently), we will update this policy and its "Last updated" date before the change takes effect.