โ† Back to the Bamboo Wars

๐Ÿ”’ Privacy Policy

Effective Date: March 25, 2026 ยท Zen Holiday, LLC ยท Last Updated: March 25, 2026

๐Ÿผ Short version: We don't collect your personal information. Ever. Your panda army lives in your own browser. No accounts, no tracking, no funny business โ€” just bamboo.

1. Who We Are

PANDA.ARMY ("the Game," "we," "us," "our") is operated by Zen Holiday, LLC, a limited liability company. Contact us at bamboozel@panda.army.

2. What Data We Collect

Personal data: None. We do not require you to create an account, provide an email address, or give us any personally identifiable information (PII) to play the game.

The only data we store is non-personal game state data, described below.

3. Local Storage (Your Browser)

Your game progress โ€” including your panda army size, bamboo count, upgrades, achievements, login streak, and randomly generated General name โ€” is saved in your browser's localStorage. This data:

  • Never leaves your device unless you explicitly share it (e.g., sharing your referral link)
  • Is not accessible to us or any third party
  • Can be deleted at any time by clearing your browser's site data for panda.army
  • Is not a "cookie" under most regulatory definitions, but we disclose it anyway because we're nice like that

A small localStorage flag (pandaArmy_consent) is set when you dismiss our info banner. That's it.

4. Server-Side Data (Cloudflare KV)

To support the global faction war and leaderboard features, the following non-personal data may be stored on our servers (Cloudflare Workers KV):

  • A randomly generated, anonymous Player ID (8-character hex string, e.g., "a3f92b1c") โ€” generated in your browser, not linked to any real identity
  • Your chosen General name (randomly generated or user-chosen, e.g., "General Bamboosworth") โ€” not your real name
  • Your faction choice (Giant Panda or Red Panda)
  • Your total bamboo harvested score (for the leaderboard)
  • Your war medal count
  • Referral count (how many people used your referral code)

None of this data is linked to your real identity. We cannot identify you from it. We do not store IP addresses, device fingerprints, or browser identifiers.

5. Cookies

We do not set cookies. Cloudflare, as our infrastructure provider, may set technical cookies for DDoS protection and network performance (specifically, the __cf_bm cookie). These are strictly necessary for the service to function and do not track you for advertising purposes. See Cloudflare's Privacy Policy.

6. Analytics

We currently use no third-party analytics. If we add analytics in the future, we will update this policy and add a consent mechanism before doing so.

7. Advertising

The Game does not currently display advertisements. If we add advertising in the future (e.g., Google AdSense), we will update this policy, add appropriate consent mechanisms, and comply with applicable advertising regulations including GDPR and CCPA requirements for ad targeting.

8. Third-Party Services

We use the following third-party services to operate the game:

  • Cloudflare Pages & Workers โ€” hosting and edge computing. Cloudflare may process your IP address to route traffic. See Cloudflare's Privacy Policy.
  • Google Fonts โ€” to load our game fonts. Google may collect minimal data per their standard font API. See Google Fonts Privacy FAQ.

9. Your Rights (GDPR / CCPA / Global)

Because we don't collect personal data, most data subject rights (access, rectification, erasure, portability) are trivially satisfied โ€” there is nothing to access or erase on our end.

For data stored in your browser's localStorage, you can delete it at any time by:

  • Going to your browser settings โ†’ Privacy โ†’ Clear Site Data for panda.army, or
  • Opening browser developer tools โ†’ Application โ†’ Local Storage โ†’ Delete all entries under panda.army

If you believe we hold any personal data about you and wish to exercise your rights, contact us at bamboozel@panda.army and we will respond within 30 days.

For users in the European Economic Area (EEA) or United Kingdom: our legal basis for processing the minimal non-personal server data described in Section 4 is Legitimate Interest (operating the leaderboard and faction war features). This data is not personal data as defined by GDPR.

10. Children's Privacy

PANDA.ARMY is intended for users aged 13 and older. We do not knowingly collect any information from children under 13. If you are under 13, please do not play. (We mean it. Please go eat a snack and come back in a few years.)

We do not subject children's data to behavioral advertising and do not share data with third parties for such purposes.

11. Data Security

Server-side data is stored on Cloudflare's infrastructure with industry-standard security. Because we collect no sensitive personal data, the risk profile is minimal. If you have a security concern, email bamboozel@panda.army.

12. Data Retention

Server-side leaderboard and referral data is retained indefinitely to support ongoing gameplay. Player ID records with no associated score may be purged after extended inactivity. LocalStorage data persists in your browser until you clear it.

13. Changes to This Policy

If we make material changes to this policy (such as adding advertising or analytics), we will update the effective date and notify users via a banner on the game. We will not add data collection without updating this policy and, where required by law, obtaining consent.

14. Contact

Questions, concerns, or complaints about this policy:

Zen Holiday, LLC
bamboozel@panda.army

๐ŸŽ‹ Thank you for trusting us with your panda army. We take that responsibility very seriously. (The bamboo, slightly less so.)