Safe by design

Safety and trust

Zodita runs outside Google Play. That is a design choice, not a shortcut: here is what we do so you can trust what you install.

Why Android warns

Google Play does not allow a store that installs games, so Zodita comes from zodita.com. The first time, Android asks you to allow installs from Zodita, with the same words it uses for every app outside Play. Say yes once; the question does not come back.

What Zodita checks

Every game file is signed by its studio and downloaded over HTTPS. The app computes the SHA-256 hash of the whole file on your phone and installs only when it matches what our server published. A changed or damaged file never installs.

What never happens

Zodita asks for no permission it does not need: no contacts, no location, no SMS, no accessibility access. It installs games only when you tap Install, and it can be removed like any app.

Verify the app yourself

  1. Install Zodita only from zodita.com. Delete any copy that came from somewhere else.
  2. Open the app, go to Account › Safety: it checks its own signature on your phone and shows "Genuine Zodita app".
  3. On a computer: run apksigner verify --print-certs zodita.apk and compare the SHA-256 digest with the fingerprint below; sha256sum zodita.apk must match the file hash.
Signing certificate (SHA-256)
98a7769562ded034b27f5ab5e552ead9f60549ef80f9d6ec0a95fac0dcd80cc9
Current file (version 1.13.7, SHA-256)
c2082fad84a6e758ab9a6d200eb73520e67023d8b7a7eb5d40137df8c241bd90
Package name
com.zodita.app

Only zodita.com publishes Zodita. We never send APK files by email or chat.