Skip to content
This is the official website of the Kingdom of ZWÄANĀ.
How to recognise an official royal website

Official websites of the Kingdom carry the royal crest, the five bands of the national flag and a document reference on every page. They never ask for your TBT. If a website claims to be the Crown and asks for your bank details, it is not the Crown, and the Pug Intelligence Unit would like a word.

Ref. ZW/LG/privacy-policyOperator of this websiteLast amended 10.10.2026

Privacy policy

ZWÄANĀ is a work of fiction. Your personal data is not.

This policy explains, in plain terms, what the real company behind this website collects, why, on what legal basis, for how long, who receives it, and what you can do about it.

Last updated: 10 October 2026 · Version 3.

In short

  • We run our own audience measurement. It sets no cookie and stores no IP address.
  • We show no advertising, we use no advertising or tracking cookie, and we sell nothing about you.
  • Every form on the site leaves a security record (your IP address, your device, the exact time and what you sent). It is kept separately and cannot be edited, so that harassment and threats can be reported to the authorities. Section 2.5 tells you everything it contains.
  • Forms refuse connections that come through a VPN, an anonymous proxy, Tor or a hosting network (Apple iCloud Private Relay is accepted).
  • The citizenship of the Kingdom is fictional and ceremonial. It is not a nationality, and it is not an identity document.
  • Players from Twitch, YouTube and Vimeo are loaded only when you press play.

1. Who is responsible

The data controller is KREATIVE MONSTER GLOBAL, société par actions simplifiée (SAS) with a share capital of 50 euros, registered with the Nanterre Trade and Companies Register (RCS Nanterre) under number 109 679 761, whose registered office is at 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France, publisher of zwaana.com.

For any question about your data or to exercise your rights, write to global@kreativemonster.com.

2. What we collect, and why

2.1 When you visit the site

Like any web server, ours records technical connection data when it answers a request (your IP address, the time, the page requested, your browser's identification). The site is hosted in France by o2switch. These logs are used to run and secure the service, and are kept for no longer than one year. Legal basis: our legitimate interest in running and securing the site.

2.2 Audience measurement (no cookie)

We measure which parts of the site are read, with our own tool and no third-party script.

  • What is recorded: the type of event (a page view, a click on the entrance gate, including whether you chose sound, on the Kingdom Index, on a portal or a "next step" link, the use of the search feature but never the words you type, a basket or checkout step, a newsletter sign-up, a broadcast or film play, a share, a technical error), the page path without its query string, the host name of the site that sent you (on the landing page only), the country (only when our hosting supplies it), the type of device (mobile, tablet, desktop or other), a daily visitor key, and a few details of the event (the label of the link clicked, a product and quantity added to the basket, the basket total and delivery country when you start a payment, or the short text of a technical error).
  • The visitor key is a one-way fingerprint computed from your IP address and browser identification together with a secret that changes every day. It cannot be reversed, and it does not let us recognise you from one day to the next. Your IP address itself is not stored in the audience data.
  • Your choice: if your browser sends Global Privacy Control or Do Not Track, nothing is recorded. Bots and automated tools are ignored. You can also write to us to object.
  • Legal basis: our legitimate interest in understanding how the site is used. No cookie is set and nothing is written to your device for this measurement.
  • Kept for: 13 months.

2.3 The Royal Dispatch (newsletter)

  • What we keep: your email address, the letters you chose, the page where you subscribed, and the proof of your consent: the exact wording you accepted and its version, the date and time you asked, the date and time you confirmed, and the date and time you unsubscribed if you do. A confirmation code is kept only in an unreadable form.
  • Double confirmation: you receive a letter with a link, and you are on the list only once you use it (the link is valid for 7 days). Your sign-up, the confirmation and an unsubscription each leave a security record (section 2.5), because the IP address and the time are the proof that the owner of the address agreed.
  • No third-party mailing platform: the letters are sent by us, through the mail server of our host. Every letter carries an unsubscribe link.
  • After you unsubscribe, we keep your address marked "unsubscribed", so that we do not write to you again, together with the proof of your consent.
  • Legal basis: your consent, which you can withdraw at any time. Proof of consent: our legitimate interest in being able to demonstrate it.
  • Kept for: until you unsubscribe. An address never confirmed: 30 days. After unsubscription, the address and the proof of consent: 3 years.

2.4 Letters to the Office of External Relations

The Kingdom of ZWÄANĀ is a fictional realm. Its Office answers every letter in writing; this correspondence establishes no diplomatic relation and creates no obligation under international law.

  • What we keep: the name of the State, mission or institution, your name, your title or office if you give one, your email address, the subject you chose, the text of your letter, the reference number we give it, the date, and the reference of its security record.
  • What we send: an acknowledgement under its reference number, to the address you gave. Your letter is also forwarded to our team's mailbox, together with the technical trace of its sending.
  • A copy in the security journal: your name, address and the full text of your letter are also copied into the security journal (section 2.5), as for every form.
  • Not published: a letter is never shown on the website.
  • Legal basis: our legitimate interest in receiving, answering and filing correspondence, and in protecting it from abuse.
  • Kept for: 3 years after the last exchange.

2.5 The security record of forms

What it is. Every time a form or an action of the site that sends data is used, a record is written in a security journal. The journal is append-only: a record cannot be deleted from the website and its technical content cannot be edited (an administrator can only add a review tag, such as "to watch", and a private note), and each record is sealed with a SHA-256 fingerprint chained to the previous one, so any alteration can be detected. It is kept separately from the rest of the data and survives even if your message, your subscription or your account is deleted elsewhere on the site.

Where it applies: the Royal Dispatch, letters to the Office of External Relations, the Royal Civic Hall and the Royal Emporium checkout. Refused attempts are recorded too, with the reason.

What is recorded, for each use:

  • your IP address, and the other address headers received with the request;
  • the exact date and time;
  • your browser identification (user agent), and what we read from it: type of device, operating system, browser, and the make and model of the device when it announces them;
  • a device fingerprint: a one-way hash of your browser identification, screen size, platform and time zone, which lets us tell whether the same device is behind several connections;
  • an approximate location derived from the IP address (country, region, city), and the network operator and its network number;
  • the result of the IP reputation check (section 2.6);
  • technical details your browser sends with the form: screen size, pixel ratio, time zone, number of touch points, processor cores, device memory, type of network connection, platform, languages, the page you were on and the page that sent you;
  • the Referer, Origin and Accept-Language headers, and the request identifier given by the hosting infrastructure;
  • what you submitted: the name, the email address and the message, or a short summary of the action;
  • the outcome (accepted or refused, and why), a reference number of the record, and the fingerprints that seal it.

Why: to protect the site and the people who run it against abuse, harassment and threats, to prove that the owner of an email address agreed to a subscription, and to be able to establish the facts before a court if necessary.

Legal basis: our legitimate interest in security, in preventing harassment and in defending our legal rights.

What it can and cannot prove. The IP address and the exact time are the useful evidence: on a judicial requisition, an internet access provider (or a VPN provider) can identify the subscriber behind an address at a given time. The journal cannot reveal a name or a postal address on its own. The location of an IP address is approximate, and when a VPN is used it points to the provider's server, not to you.

Who can read it: only the administrators we designate, and the authorities when the law requires it or when a complaint is filed.

Kept for: 6 years, the limitation period for offences under French law, and longer where a dispute, a complaint or an investigation is under way.

2.6 IP reputation check (VPN, proxy, Tor, hosting networks)

Before a form is accepted, the IP address of the visitor is sent from our server to proxycheck.io, a service that tells us whether the address belongs to a VPN, an anonymous proxy, the Tor network or a hosting range, and gives the network operator and an approximate location. Only the IP address and our access key are sent, never your name, email or message.

  • Refusal: a form is refused when the check says VPN, proxy, Tor or hosting. Apple iCloud Private Relay is accepted. At the Emporium checkout, the use of a VPN is recorded but does not stop a payment.
  • No perfect detection: a legitimate connection may sometimes be taken for a VPN, and some VPNs go undetected. If a form refuses you wrongly, switch off your VPN or write to us.
  • If the service is unavailable, the form goes through: nobody is locked out by an outage.
  • Cache: the verdict is kept in our server's memory for 24 hours and the location for up to 30 days, and is also copied into the security record of section 2.5.
  • Legal basis: our legitimate interest in security.

2.7 The Royal Civic Hall and Zwaanan citizenship

This section applies once the Royal Civic Hall is open. Until then, nothing in it is collected.

What it is. Zwaanan citizenship is a fictional and ceremonial digital citizenship and membership experience. It confers no nationality, no right of residence, no right of immigration, no travel document and no status recognised by any State. Its documents are collectible and carry the line "Ceremonial document of the Kingdom of ZWÄANĀ. No administrative value." We never ask for a real identity document.

  • Application: your email address, a public name of your choice, optionally a territory of affiliation, an invitation code if you have one, and the declaration you tick. A registration link, valid for 20 minutes and usable once, is emailed to you.
  • Payment of the citizenship fee: handled by Stripe. We keep the amount, the currency, the payment reference, the sentence you accepted at payment and the reference of its security record. We never see your card number.
  • Citizenship: your sign-in account, your citizen record (Citizen ID, public name, membership date, standing, territory, how you were admitted), your documents, the royal stamps awarded to you, and your wallet of internal points (they are not money and have no cash value).
  • Portrait: a photograph you lodge, re-encoded by our server (metadata such as location is removed), stored privately outside the website, visible only to you and to the Registry staff, and never used on a public page. We run no facial recognition on it.
  • Sign-in sessions: an opaque token, the IP address, a summary of your device and the time of the last visit. A session lasts 30 days and is extended while you use it.
  • Your control: you can download your data and close your citizenship at any time from the Civic Hall. Closing anonymises your account and record, erases your portrait, revokes your documents and ends every session. The payment and accounting records, the application record and the security journal remain, as the law and section 2.5 require.
  • Legal basis: performance of the service you ask for; your choice for the public profile; legal obligations for payment and accounting records; our legitimate interest for the security record.
  • Kept for: as long as your citizenship exists, then as described above. Past sessions and their IP address: 1 year.

2.8 The Royal Emporium (shop)

  • Basket: the contents of your basket are stored on our server, and your browser keeps its identifier and a private key so that the basket is found again.
  • Order: your email address, your delivery and billing details, the items, the amounts, a private link to follow your order and the payment reference. The checkout also leaves a security record.
  • Delivery and fulfilment: the destination country, region and postcode are sent to Printful to obtain the delivery price; Printful makes and ships the products and receives the items, your name and your delivery address.
  • Payment: handled by Stripe. We never see your card number.
  • Legal basis: performance of the contract; legal obligations (accounting, tax); our legitimate interest for the security record.
  • Kept for: 10 years for accounting records (French Commercial Code); the rest of an order, 3 years after delivery. An abandoned basket: 6 months.

2.9 Emails we send

Service emails are sent from an address of the zwaana.com domain through the mail server of our host, o2switch, and replies land in a mailbox of that domain at the same host.

2.10 Players from Twitch, YouTube and Vimeo

Broadcasts and films are shown by the players of Twitch, YouTube (privacy-enhanced domain) and Vimeo (with its Do Not Track option). None is loaded until you press the play button. From then on, the provider receives your IP address and browser details and may set its own cookies, under its own policy.

2.11 The people who run the site

The team's accounts and a journal of what each person changed, with the date and the IP address of the request, are kept to secure the administration of the site, for 3 years. Legal basis: our legitimate interest in security and accountability.

3. Cookies and browser storage

The site uses no advertising cookie and no third-party tracking cookie. The storage it uses is described in the Cookie policy.

4. Who receives your data

We do not sell your data and we do not share it for advertising. It is processed by:

  • o2switch (France): hosts the website, its database, its backups and the mail server;
  • proxycheck.io: receives the IP address of a form submission to check its reputation;
  • Stripe: payments of the Emporium and of the citizenship fee, which Stripe processes for us and, for fraud prevention and its own legal obligations, under its own responsibility;
  • Printful: delivery quotes, and the making and shipping of Emporium orders;
  • Twitch, YouTube and Vimeo: only if you press play on one of their players;
  • our backups: a copy is also kept off the server, on the company's own equipment in France;
  • the authorities, when the law requires it or on a judicial requisition.

Transfers outside the European Union. Some providers may process data outside the European Union. Where they do, the transfer relies on the safeguards provided by the GDPR: an adequacy decision or the European Commission's standard contractual clauses.

5. How long we keep your data

  • Server connection logs: up to 1 year.
  • Audience events: 13 months.
  • Royal Dispatch subscription: until you unsubscribe. An address never confirmed: 30 days. After unsubscription: 3 years.
  • Letters to the Office of External Relations: 3 years after the last exchange.
  • Security journal: 6 years, longer if a dispute, complaint or investigation is under way.
  • Sign-in and registration links: valid 20 minutes, single use.
  • Citizen account, record and wallet: until you close your citizenship, then anonymised. Portrait: deleted when you close it.
  • Past citizen sessions: 1 year.
  • Application and payment records, orders: 10 years for accounting records; the rest of an order, 3 years after delivery.
  • Abandoned basket: 6 months.
  • Team audit journal: 3 years.
  • Backups: data erased from the live site can remain in a backup until it rotates out, up to 12 months.

6. Your rights

You can, at any time: access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw your consent (every Royal Dispatch letter carries an unsubscribe link). You can also give instructions about what happens to your data after your death.

  • Objecting to the security journal: you may object to processing based on our legitimate interest. We may keep a security record where we have compelling legitimate grounds, or where it is needed to establish, exercise or defend legal claims, which is also an exception to the right to erasure.
  • Automatic refusal: a form can be refused automatically when your connection looks like a VPN or an anonymous proxy. This concerns your connection, not you, and has no legal effect on you.

Write to global@kreativemonster.com. We answer within one month. We may ask you to prove your identity before releasing data.

If you believe your rights are not respected, you may lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.

7. Minimum age

Anyone may visit and read this website. The Royal Dispatch, the Civic Hall and the Emporium are reserved for people aged 21 or over. We may ask you to confirm your age before admitting you; if a method of verification is introduced, this policy will describe it, and what it collects, before it is used. We do not knowingly collect data from younger people. If you think someone under 21 has given us data, write to us and we will erase it.

8. Security

Data is transmitted encrypted (HTTPS, HSTS). The database sits on our host's server, in a folder that cannot be reached from the web. Access to personal data in the administration is limited by role. Sign-in, session and confirmation tokens are stored only as fingerprints. Portraits are kept privately, outside the website folder. The security journal is append-only and sealed. No system is perfectly secure; if a breach affects your data in a way that puts your rights at risk, we will tell you and the CNIL as the law requires.

9. Changes and contact

If this policy changes in a way that matters, the date at the top changes, and subscribers and citizens are told.

KREATIVE MONSTER GLOBAL · 99 avenue Achille Peretti, 92200 Neuilly-sur-Seine, France · global@kreativemonster.com