Zone 37 — Privacy Policy

Effective Date: July 8, 2026

1. Introduction

Zone 37 Inc. ("Zone 37," "we," "our," or "us") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website located at zone37airsoft.com (the "Website"), when you download, install, or use the Zoner PDA mobile application (the "App"), and when you purchase tickets, register for, or participate in our events (the Website, the App, and such event-related activities are referred to collectively as the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. If you do not agree, please do not use the Services.

2. Information We Collect

We collect the following categories of information:

• Account and Authentication Information (shared by the Website and the App). When you create an account, we collect your email address and password (stored in hashed form), your State ID, and, at your option, your first and last name, an avatar image, and emergency contact information. A single account is used across both the Website and the App.
• Transaction Information. When you purchase tickets or merchandise, payments are processed by our third-party payment processor, Stripe, Inc. Your full payment card number is transmitted directly to Stripe and does not reach our servers. We retain only the transaction reference, amount, and currency, and, for physical merchandise orders, the shipping address you provide.
• Location Information (App only). With your permission, the App collects precise geolocation data from your device solely to enable live gameplay features, as further described in Section 4.
• Push Notification Token (App only). If you enable notifications, we collect a push notification token issued by Google Firebase Cloud Messaging in order to deliver event-related alerts to your device.
• Technical and Security Information. When you sign in or make changes to your account, we record the date and time, IP address, and browser or device type for security and fraud-prevention purposes. These security logs are deleted after three (3) months. When you use the Website, we may also collect your IP address, browser type, operating system, device information, and usage data such as pages visited and time spent on the site.

For clarity, the App contains no advertising, analytics, or tracking software development kits (SDKs), and does not access your contacts or photo library.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your access to the Services;
• Process and manage event registrations, ticket sales, and merchandise orders;
• Provide and operate the App's live gameplay features, including the interactive event map;
• Send you event-related notifications and communicate updates or changes to our events;
• Maintain the security of your account, prevent fraud, and protect our Services;
• Analyze and improve Website functionality and user experience; and
• Comply with applicable legal obligations.

We do not sell, rent, or trade your personal information to third parties.

4. The Mobile Application (Zoner PDA)

This Section describes practices specific to the App. It supplements, and should be read together with, the remainder of this Policy.

a. Location Services. The App uses your device's location services to display your position on the live event map and to enable location-dependent gameplay. Location data is processed subject to the following limitations, which are enforced locally on your device; filtered readings are never transmitted to us:

• Your location is transmitted only while you have joined an active event;
• Your location is never transmitted when your device is more than five (5) miles from the designated event area; and
• Background location collection operates only during an active event session and ceases automatically when that session ends.

During an event, your position is visible only to authorized event staff. Other players cannot see your location.

b. Permissions and Your Control. The App will request your permission before accessing location services and before sending push notifications. You may grant or deny these permissions at any time through your device's operating system settings. If you deny or later revoke location permission, location-dependent gameplay features may not function; if you disable notifications, you will not receive event alerts. Disabling these permissions does not otherwise affect your ability to use the App.

c. Push Notifications. We use Google Firebase Cloud Messaging to deliver push notifications. This requires the push notification token described in Section 2. You may disable push notifications at any time through your device settings.

d. No Advertising or Tracking. The App does not display advertising and does not contain analytics or tracking SDKs. We do not use information collected through the App for advertising or for cross-context behavioral tracking.

e. App Stores. Your download and use of the App is also subject to the terms and privacy practices of the applicable app store or distribution platform (such as the Apple App Store or Google Play). We are not responsible for the practices of those platforms.

5. Data Protection and Security

Your information is protected through SSL/TLS encryption in transit, industry-standard encryption methods, and multi-layer authentication systems. We maintain administrative, technical, and physical safeguards designed to protect your information from unauthorized access, loss, misuse, or alteration. Despite these measures, no method of transmission or storage can be guaranteed to be completely secure, and we continuously update our systems to maintain strong protection standards.

6. Cookies and Tracking (Website)

On the Website, we use cookies and similar technologies to keep you signed in, remember essential preferences, analyze site usage, and assist with marketing efforts. You may disable cookies through your browser settings, although some Website features may not function properly as a result. The App does not use cookies.

7. Analytics (Website only)

The Website uses the following third-party analytics tools; neither is present in the App:

• Google Analytics, which provides usage statistics such as pages visited, general region, and device type; and
• Meta (Facebook) Pixel, through which Meta may associate your visit with your Facebook account in accordance with Meta's Privacy Policy.

8. Sharing of Information

We share information only with trusted third parties that help us operate the Services, and only to the extent necessary, including:

• Stripe, Inc. — payment processing;
• Google Firebase — delivery of push notifications;
• our hosting and infrastructure providers; and
• (Website only) Google Analytics and Meta, as described in Section 7.

These providers are bound by confidentiality and data-protection obligations. We may also disclose information when required by law, to enforce our agreements, or to protect the rights, property, or safety of Zone 37, our users, or others.

9. Data Retention and Account Deletion

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy or as required by law, after which it is securely deleted or anonymized.

You may delete your account at any time, either in the App (Settings → Account → Delete Account) or from your web profile. We will send a confirmation link to your email address; after you confirm, your account will be deleted within thirty (30) days. You may cancel the deletion during that period by signing in to your profile.

Deletion removes your account record, including your email address, name, State ID, password hash, profile, and push registration. We retain payment records as required for accounting, tax, and fraud-prevention purposes, and we may retain gameplay statistics in a form that is no longer linked to an identifiable individual.

10. Your Rights

Depending on your jurisdiction, and subject to applicable law, you may have the right to:

• Access, correct, update, or delete your personal information;
• Request a copy of, or port, the personal information we hold about you;
• Withdraw consent where our processing is based on consent; and
• Opt out of the sale or sharing of personal information (note that we do not sell or share your personal information).

For California residents: the precise geolocation collected by the App constitutes "sensitive personal information" under the California Consumer Privacy Act, as amended. We use such information solely for the gameplay purposes described in Section 4 and do not use it to infer characteristics about you.

To exercise any of these rights, please contact us at info@zone37airsoft.com. We will not discriminate against you for exercising your rights.

11. Age Requirement

Our Services are not intended for, and we do not knowingly collect personal information from, anyone under the age of eighteen (18). If we learn that we have collected personal information from a person under 18, we will delete it.

12. Third-Party Links

Our Services may contain links to third-party websites or services. Zone 37 is not responsible for the content or privacy practices of those third parties, and we encourage you to review the privacy policies of any external sites or services you access.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Effective Date." If a change materially affects how we handle your personal information, we will provide additional notice as appropriate. Your continued use of the Services after such changes constitutes your acceptance of the revised Policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Zone 37 Inc. California, United States Email: info@zone37airsoft.com