Política de privacidad

ZincWolf is run by Vivek Gowda S, an individual based in Bengaluru, India, who is the data controller for your personal data. In this policy, “we”, “us” and “our” mean Vivek Gowda S.

If you have any question about your data, email privacy@zincwolf.app. Our postal address is #18/7, Mahadi Road, Magadi Road Police Quarters, Bangalore North, Bengaluru, Karnataka 560023, India.

• Dodo Payments, our reseller and merchant of record, sells you the app on its own checkout. It takes your payment and billing details, handles tax, receipts, refunds and chargebacks, and emails you your receipt and license key. We never see your card details. Dodo’s privacy policy applies to what you give it.
• Our server gets a record of each order from Dodo, through secure notifications: what was bought, the payment and its status, and any refund or dispute. We keep it without your name, your email address or any card details.
• When you’ve paid, Dodo sends you back to zincwolf.app with your license key and email address in the page’s address, so the page can show you your key. The page takes them out of the address as it opens and keeps them only while it’s open. It runs no analytics or advertising code, and sends them nowhere.
• Buying ZincWolf Island works the same way: your license key comes from Dodo, by email and on screen, and nothing else is collected until you download and open the app.
• Buying ZincWolf Widgets works the same way: your license key comes from Dodo, by email and on screen, and nothing else is collected until you download and open the app.
• Buying ZincWolf Tiles works the same way: your license key comes from Dodo, by email and on screen, and nothing else is collected until you download and open the app.
• Buying ZincWolf Unlock works the same way: your license key comes from Dodo, by email and on screen, and nothing else is collected until you download and open the app.
• Buying ZincWolf Clipboard works the same way: your license key comes from Dodo, by email and on screen, and nothing else is collected until you download and open the app.
• Buying ZincWolf MenuBar works the same way: your license key comes from Dodo, by email and on screen, and nothing else is collected until you download and open the app.
• During ZincWolf Widgets’ launch offer, when you buy ZincWolf Dock, ZincWolf Island and ZincWolf Tiles together (or bought ZincWolf Dock and ZincWolf Island together before ZincWolf Tiles was out), the free ZincWolf Widgets license’s key is emailed to the address on that order. It’s used for that and nothing else.

A ZincWolf Dock, ZincWolf Island, ZincWolf Widgets, ZincWolf Tiles, ZincWolf Unlock, ZincWolf Clipboard or ZincWolf MenuBar license is for one Mac, and each app has its own. To activate one, the app sends our server (api.zincwolf.app):

• Your license key.
• An anonymous ID for your Mac: a one-way, salted code made from its hardware ID, never the hardware ID itself.
• Your Mac’s name, model and macOS version.
• The app’s version.

Our server activates the license with Dodo Payments, which issues the keys and receives your key and your Mac’s name, then sends the app a signed token that it checks on your Mac. The app checks the license with our server when it opens and once a day, sending your key, your Mac’s anonymous ID, the activation’s ID and the app’s version. It keeps working offline for up to 30 days at a time.

We keep a one-way code made from your license key (never the key itself), your Mac’s anonymous ID, the activation’s ID, your Mac’s name, when it was activated and last checked, and the license’s status. If a purchase is refunded or its payment is disputed, its license is revoked and stops working.

To offer updates, the app downloads the list of new versions from api.zincwolf.app. Like most update checks, the request says which version of the app and of macOS you have. The app sends no other details about your Mac with it. Our server logs these requests, like all others, with shortened IP addresses only.

What you do in ZincWolf apps stays on your Mac. They show what macOS already has, keep no history of what you do, and send nothing about how you use them to us or anyone else.

ZincWolf Dock’s widgets read what they show on your Mac. The developer widgets connect only to what you point them at: GitHub through your own gh, the addresses you add to Endpoints, and a repository’s own remote. AI Usage reads only token counts, usage limits and when they reset, from the files Claude Code, Codex, Gemini CLI, OpenCode, Copilot CLI and Droid keep on your Mac (for Claude Code, through the status line you connect in Settings). It never keeps or sends your prompts, code or replies, and never reads those tools’ sign-ins, your Keychain or your browser’s cookies.

Where ZincWolf apps on the same Mac do the same thing, they keep it in one place, so it’s the same in each: what’s on the Shelf, clipboard pins, notes, to-dos, countdowns, timers, stopwatches, the Keep Awake session and recent colors. It’s a small file for each, in ~/Library/Application Support/ZincWolf/Shared, that only your user account on that Mac can open. With one ZincWolf app installed, it’s simply where that app keeps them.

• Nothing in it is sent anywhere, to us or anyone else. When one app changes it, it tells the others which file changed, never what’s in it.
• Your clipboard’s recent history isn’t shared: ZincWolf Dock and ZincWolf Island keep it in memory only, and ZincWolf Clipboard keeps its own history, encrypted, as ZincWolf Clipboard explains. Only the pins you choose are shared.
• It stays on your Mac until you delete it. We can’t see it, so we can’t delete it for you, and removing the apps doesn’t remove it.

ZincWolf Island works the same way: it shows what macOS already has, on your Mac, with no account, no tracking and no history of what you do. It shares data with other ZincWolf apps on your Mac as described above, and in particular:

• Apart from its license check and updates, as described above, Lyrics is the only part that goes online. To show a song’s words, it sends the song’s title, artist and length to LRCLIB (lrclib.net), a free, open lyrics library, only while the Lyrics tab is open or the line under the notch is shown, and keeps what it finds in memory until Island quits. LRCLIB sees your IP address, as any website does. We receive nothing.
• The camera is on only while Mirror is open, so you can see yourself. Nothing is recorded or saved.
• Up Next reads your calendar, Devices your Bluetooth devices and their batteries, and Downloads your Downloads folder, all on your Mac, once you allow it in the permissions macOS asks for.
• The Clipboard never keeps passwords, or anything an app marks as private. What you copy stays in memory only, and only the things you pin are saved, on your Mac.
• AI Usage reads only token counts and usage limits from the files your AI tools keep on your Mac, as ZincWolf Dock’s does, never your prompts, code or sign-ins.
• It never asks for your location.

ZincWolf Widgets works the same way: its widgets show what macOS already has, on your Mac, with no account, no tracking and no history of what you do. It runs in the background to keep them up to date, reads what a widget shows only while that widget is on your desktop or in Notification Center, and shares your notes, to-dos and timers with other ZincWolf apps on your Mac as described above. In particular:

• Apart from its license check and updates, as described above, only Lyrics, the GitHub widgets and Endpoints go online, and only as you set them up. Lyrics sends the title, artist and length of the song that’s playing to LRCLIB (lrclib.net), a free, open lyrics library, to show its words in time, while a Lyrics widget is on your desktop or in Notification Center. The GitHub widgets (GitHub, Reviews, GitHub Actions and GitHub Contributions) ask GitHub for your pull requests, workflow runs and contributions through the GitHub CLI (gh) you’ve signed in to yourself; the app never sees or keeps your sign-in. Endpoints checks the addresses you add, from your Mac. LRCLIB, GitHub and those addresses see your IP address, as any website does. We receive nothing.
• Once you allow it, in the permissions macOS asks for when you click: Up Next and the other calendar widgets read your calendars (and Weekend your Mac’s holiday calendar), Birthdays reads only the birthdays in Contacts, On This Day reads your Photos library for a photo from this day in earlier years, and Photo Frame shows the photos in a folder you choose. Nothing they read leaves your Mac, and nothing is kept but the few pictures the widgets show.
• The Screen Time widgets read macOS’s own Screen Time records for this Mac, read only, which macOS keeps behind Full Disk Access. ZincWolf counts nothing itself and keeps nothing it reads.
• Now Playing shows what’s playing on your Mac, and its buttons control Music and Spotify through macOS’s Automation permission, once you allow it.
• AI Usage reads only usage figures and when limits reset from the files Claude Code and Codex keep on your Mac, and asks the Codex app on your Mac for its limits, which Codex gets with your own sign-in. It never keeps or sends your prompts, code or replies.
• Git reads the folders you choose, on your Mac, and never fetches from or pushes to their remotes. Dev Servers and Containers look at what’s running on your Mac. Commands runs only the commands you set up yourself, as you; whether they go online is up to them.
• Your Mac’s battery, network speed, storage, temperatures, Wi-Fi signal (never the network’s name) and Time Machine backups are read on your Mac and stay there. The Sky Clock and Daylight work out the sun and the moon for a city you pick: ZincWolf Widgets never asks for your location.

ZincWolf Tiles works the same way: it moves and sizes your windows on your Mac, only when you ask it to, with no account, no tracking and no history of what you do. In particular:

• It needs macOS’s Accessibility permission, which you allow in System Settings, to move and size other apps’ windows, and uses it for that alone. It reads the position and size of the windows it moves and which app is in front, to place them and to leave alone the apps you choose. It doesn’t read what’s in your windows.
• Move and resize from anywhere, when it’s on, watches your mouse clicks, drags and releases, and which modifier keys are held as you click, to tell when you hold the keys you chose and drag. It never sees what you type, and keeps nothing of it.
• To leave room for ZincWolf Dock, it reads where the Dock’s bar is on screen and three of its settings (which edge it’s on, its icon size and whether it hides itself), on your Mac.
• If you let it take macOS’s own edge tiling over, it saves your settings for it first, turns them off while its snap areas are on, and puts them back as they were when you quit it or turn snap areas off.
• Your settings and the layouts you save (each window’s app, title, place and display) stay in ZincWolf Tiles’ preferences on your Mac. Nothing it handles is sent to us or anyone else: apart from its license check and updates, as described above, it doesn’t go online.

ZincWolf Unlock unlocks your Mac with your face at the lock screen, by typing your Mac password for you. To do that it handles two sensitive things: what it learns from your face, and your password. Both stay on your Mac: we never receive them, and there are no analytics on them. In particular:

• Your agreement first. Before it learns your face, its welcome explains what it keeps and what it can and can’t do, and asks you to agree. The camera starts only when you start the face step yourself, and stops the moment it’s done.
• Your face data. It keeps numbers worked out from your face (a face template, for each look you add), never a picture or a video of it. They’re encrypted (AES-GCM) in its folder in your user account’s Library, which only your account can open, and never uploaded to us or anyone else.
• Your Mac password. You type it in once; it’s checked with macOS, then kept encrypted on your Mac the same way. The key that opens both is kept in your login keychain, and ZincWolf Unlock reads it only after Touch ID or your login password, once after each restart (and again after a time unused that you can choose). It reads the password only for the moment it types it into the lock screen, and checks the Mac is still locked before every few keys, so it never types it anywhere else.
• The camera. It’s on only while ZincWolf Unlock looks for you: a few seconds when you come back to your locked Mac (never right after you lock it), or when you ask it to look again, with the camera’s green light on. It goes off the moment it recognises you, when you unlock another way or when your Mac sleeps. What it sees stays in memory while it looks and is never saved or sent.
• It needs macOS’s Camera and Accessibility permissions, which you allow in System Settings: Accessibility lets it type into the lock screen. If you choose the Space key as a way to start it, it watches only whether Space is pressed, and only while your Mac is locked.
• Deleting it. Settings › Security › Delete all data removes your face data, your password and the keychain key at once, any time. We can’t see them, so we can’t delete them for you, and deleting the app alone doesn’t remove them.
• Apart from its license check and updates, as described above, it doesn’t go online. Nothing it learns or sees is sent to us or anyone else.

ZincWolf Clipboard keeps a history of what you copy on your Mac, so you can find it and paste it again. What you copy can be private, so it all stays on your Mac: we never receive any of it, and there are no analytics on it. In particular:

• What it keeps. The text, rich text, links, images, colors and code you copy, and files by where they are, each with the app it came from and when; for as long as you choose (a month to start with) and up to a number of copies you choose.
• Encrypted, never uploaded. The history and its images are encrypted (AES-GCM) in its folder in your user account’s Library, which only your account can open, with the key in your login keychain. ZincWolf Clipboard has no network features: it fetches no link previews or site icons, and nothing you copy is sent to us or anyone else.
• What it doesn’t keep. Copies that apps mark as private, as password managers do, are never read, nor anything copied in the apps you exclude (the common password managers, Keychain Access and Passwords to start with), nor anything copied while it’s paused.
• Sensitive copies. What looks like a card number, a key or token, or a one-time code is blurred until you choose to show it, and forgotten after 10 minutes, or the time you choose.
• Its pins are the one thing kept outside the encrypted history: they’re the clipboard pins ZincWolf apps share, in the fileShared between ZincWolf apps describes, which only your user account can open.
• It needs macOS’s Accessibility permission to paste into the app you were in and to notice a double tap of the Command key: it looks only at when keys are pressed, never records what you type, and keeps none of it. On macOS 15.4 and later you also let it read what you copy in other apps, in System Settings › Privacy & Security › Paste from Other Apps.
• Unless you switch that off, it asks macOS to leave its windows out of screen sharing and recordings. Apps that capture the screen the older way respect that, but on macOS 15 and later most screen sharing, video calls and recordings show them anyway, so close ZincWolf Clipboard’s panel and window before you share your screen.
• Deleting it. Forget one copy, clear the last hour, today or everything, or use Settings › Privacy › Delete all data to remove the whole history, its images and its key at once, any time. We can’t see them, so we can’t delete them for you, and deleting the app alone doesn’t remove them.
• Apart from its license check and updates, as described above, it doesn’t go online. Nothing it keeps is sent to us or anyone else.

ZincWolf MenuBar shows small modules in your Mac’s menu bar: figures about your Mac (the processor, memory, disks, network, battery, graphics processor and temperatures), modules for developers and your network, your calendar, clocks, timers and what’s playing, and everyday tools such as notes and to-dos. Each module is off until you turn it on, except the first three it starts with. It reads what it shows on your Mac, as it’s shown, and we receive none of it. In particular:

• Read live, from macOS. Every figure is what macOS already reports, read on your Mac while its item is showing, and nothing at all while your Mac sleeps, its screen is off or locked, or another user is using it.
• Kept in memory only. Its menu bar graphs hold the last minute or so, in memory, and what each module reads is forgotten when you turn it off. It keeps no history, logs nothing and writes nothing about your Mac to disk: what it stores is your settings (which modules are on, their order, what each shows and their options, such as the repositories you pick for Git and the host you choose for Ping). Timers, the Keep Awake session, notes, to-dos, countdowns, the stopwatch, the files you keep on the Shelf and recent colors are the ones ZincWolf apps share, kept only while their modules are on and as Shared between ZincWolf apps describes.
• The developer modules read only this Mac. AI Usage reads usage limits, token counts and when they reset from the files Claude Code, Codex, Gemini CLI, OpenCode, Copilot CLI and Droid keep on your Mac: numbers only, never your prompts, code, replies or sign-ins. Git runs git status, read only, in the repositories you pick. Dev Servers reads which of your own programs are listening on a port, Docker asks your container engine’s local socket which containers are running, VPN looks at your Mac’s network interfaces, Wi-Fi reads the signal’s strength and Uptime the time your Mac started up. None of it leaves your Mac.
• Calendar and Reminders, only if you allow them. Its Calendar and Reminders modules read your events and reminders on your Mac, to show your next event and what’s due today, only once you turn that module on and allow it in the permission macOS asks for.
• Your location, only if you choose it. Sun and Moon works out the sunrise, sunset and the moon on your Mac for the city of your time zone or a city you pick. Only if you choose Current location in its settings does it ask macOS for your Mac’s rough location, which it uses on your Mac, rounded, and never keeps. It never reads your Wi-Fi network’s name.
• Ping is the only module that goes online, and only once you turn it on. While its item is in your menu bar, it sends one small echo request every 30 seconds to the host you choose (1.1.1.1, Cloudflare’s, unless you change it), looking the host’s name up first if it has one, to time the answer. That host sees your IP address, as any server you connect to does. The echo carries nothing about you or your Mac.
• Apart from Ping and its license check and updates, as described above, it doesn’t go online. Nothing it reads is logged, uploaded or sent to us or anyone else.

Pre-registration is closed: it closed when ZincWolf Dock went on sale, and we aren’t taking new sign-ups. If you pre-registered before then, we still hold:

• Your email address.
• Which app you pre-registered for.
• Whether and when you confirmed your email address, and whether you got one of the 500 places for the launch offer.
• When you agreed to this policy, and which version you agreed to.
• Which website or ad campaign sent you, if the link you followed said so (for example, “reddit” or “google-launch”). We used it only to learn which campaigns work.
• Technical data that helped us stop abuse: a one-way, keyed hash of your IP address, not the address itself, used only to limit how many sign-ups could come from one network. We used your full IP address only while handling your request, and never stored it.
• The result of the bot check from Cloudflare Turnstile, which told us whether a sign-up looked like it came from a person.

If you’re looking at zincwolf.app on a phone or a computer that isn’t a Mac, you can send yourself the link to a ZincWolf app, to open on your Mac. We use the email address you enter only to send that one email, and we don’t store it. To stop the form being used to flood someone’s inbox, we keep, for 8 days:

• A one-way, keyed hash of the address, not the address itself, so one address can get at most one email a day and three a week.
• Which app you asked about, and when.
• A one-way, keyed hash of your IP address, not the address itself, to limit how many requests can come from one network.

Cloudflare Turnstile checks that the request comes from a person. The email says why you got it, and has a link that blocks emails to that address for good, for anyone whose address someone else entered.

Our server’s access logs never include your email address, and they shorten every IP address to its first half (for example, 203.0.0.0), so a log entry can’t be traced back to you. Vercel, which hosts the website, and Cloudflare keep their own short-lived logs for security.

If you email us, we keep your message and our reply for as long as we need to deal with it.

You can see and change what the site may use at any time in Your Privacy Choices, which is also linked at the bottom of every page.

Always, because the site needs them. Your browser’s storage keeps your privacy choices and a random consent ID (“gw-consent”, for 12 months after you say yes or 6 months after you say no), and, until you close the tab, the privacy rules that apply where you are (“gw-region”). If you pre-registered while it was open, it may also still remember that you did, and whether you confirmed and got a place (“gw-preregistration”, no email address). If you choose a language at the bottom of a page, a cookie named “lang” remembers that choice for 12 months.

Anonymous statistics, unless you switch them off. Our own server counts page views (the page, the site or campaign that linked to it, your country and type of device) and how fast pages load. It sets no cookies, stores nothing on your device and keeps no IP address: it tells one visit from another with a code made from that day’s random key, your IP address and your browser, and deletes the day’s key the next day, after which nobody can tell whose visit it was. We only look at totals. You can switch this off in Your Privacy Choices.

Analytics, only if you allow it. Google Analytics help us understand how people use the site, with cookies:

• Google Analytics (Google): Counts visits and sign-ups, where visitors came from and how they move through the site, so we can tell what works. Cookies: _ga and _ga_<ID>: up to 14 months. Privacy policy · its own opt-out

Advertising, only if you allow it. When we advertise ZincWolf, these services tell us which ads led to a visit, and let us show our ads to people who visited, with cookies and similar technology:

• Google Ads (Google): Tells us which Google, YouTube and Search ads led to a visit, and lets us show our ads to people who visited. Cookies: _gcl_au and _gcl_aw: 90 days. Privacy policy · its own opt-out

While pre-registration was open, signing up with advertising allowed also sent your email address to Google, in a hashed (scrambled) form, so they could match the sign-up to an ad you saw. Nothing on the site sends it now.

Where you need to say yes first. In the European Union and European Economic Area, the United Kingdom, Switzerland, Brazil, Quebec, India (from 13 May 2027) and anywhere we can’t tell, nothing in “Analytics” or “Advertising” loads until you accept it in the banner.

Where they’re on until you switch them off. In the United States, Canada outside Quebec, Australia, New Zealand, Singapore, Japan, Hong Kong and, until 13 May 2027, India, the law lets you decide after you arrive: they’re on unless you switch them off in Your Privacy Choices. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of advertising, everywhere, and switch advertising off for you.

Each choice you make leaves an anonymous receipt on our server: your random consent ID, what you chose, the rules that applied and when. It contains nothing that identifies you, and we delete it after two years. It’s our record that we asked, as the law requires.

Apart from answering when you write to us, and the one email you can send yourself with Email me the link, we email only people who pre-registered, about their pre-registration (receipts and license keys come from Dodo Payments, which sells the apps). Sign-ups are closed, so we no longer send confirmation emails. If you pre-registered, you may still get:

• The personal discount code your place for the launch offer earned, if you got one and we haven’t sent it yet.
• An email if this policy changes in a significant way.

Our emails have no tracking pixels and no tracked links, so we don’t know whether you opened them or what you clicked. Every email says who sent it, with our postal address, and has an unsubscribe link, as well as the one-click unsubscribe button many mail apps show. When you unsubscribe, we stop straight away and delete your pre-registration.

• There’s no account to create.
• We never see your card details, and we keep no names or email addresses from your orders.
• We don’t use analytics or advertising cookies unless you allow them or, where the law works that way, until you switch them off.
• We never sell or rent your email address or our list of pre-registrations.
• The pages our emails link to never run analytics or advertising code, so the one-time links in them stay private.

We use your data only for these purposes:

• If you pre-registered: to send you the launch discount your place earned, and to tell you about significant changes to this policy. The legal basis is the consent you gave when you signed up, under Article 6(1)(a) of the GDPR and India’s Digital Personal Data Protection Act, 2023, which you can withdraw at any time by unsubscribing.
• While pre-registration was open, to prevent spam and fake sign-ups, so the launch offer stayed fair. In the EU and UK, the legal basis was our legitimate interest, under Article 6(1)(f) of the GDPR. In India, it was part of what you consented to when you pre-registered.
• If you use Email me the link: to send you the email you asked for, at your request, and to stop the form being misused. In the EU and UK, the legal basis is taking the step you asked for, under Article 6(1)(b) of the GDPR, and our legitimate interest in preventing abuse, under Article 6(1)(f); in India, it’s a legitimate use of data you gave us for that purpose, under section 7(a) of the DPDP Act.
• To make sure we never email you again after you unsubscribe, we keep a one-way, keyed code made from your address on a do-not-email list. It stops every email except ones about something you buy, such as a license key, which are part of the purchase. The legal basis is our duty to honour your choice under anti-spam laws, and our legitimate interest in doing so.
• To sell you an app and keep its license working (activating it, checking it, and revoking it after a refund or dispute), and to offer updates. The legal basis is our contract with you, under Article 6(1)(b) of the GDPR; in India, it’s a legitimate use of data you gave us for that purpose, under section 7(a) of the DPDP Act. We keep order records because tax and accounting laws require it, under Article 6(1)(c) of the GDPR.
• To count visits and page speed with our own anonymous statistics: our legitimate interest in knowing whether the site and our marketing work, with no cookies and nothing shared with anyone. You can object at any time, in Your Privacy Choices or by email.
• For analytics and advertising: your consent, under Article 6(1)(a) of the GDPR and the cookie laws of the EU and UK, which you can withdraw at any time in Your Privacy Choices. Where the law lets you decide after you arrive, your right to opt out, which we honour straight away.

A few providers help us run the website, licenses and our emails:

• OVHcloud hosts our database and our anonymous statistics, on a server in Canada.
• Vercel hosts the website.
• Cloudflare runs the Turnstile bot check on the Email me the link form (and ran it on the pre-registration form while it was open), which processes your IP address and signals from your browser to tell people from bots. You can read how Cloudflare handles this data in its privacy policy.
• Resend, Inc., in the United States, sends our emails and receives the emails you send to our zincwolf.app addresses. You can read its privacy policy.

Dodo Payments sells ZincWolf apps as our reseller and merchant of record. For your purchase it’s a controller in its own right, and its privacy policy applies. To activate a license, our server sends it your license key and your Mac’s name.

The analytics and advertising companies above (Google) receive data about your visit only as this policy describes. Some of them, Meta in particular, also use it for their own purposes, such as improving their ads; for that, they are controllers in their own right (in the EU, Meta Platforms Ireland is a joint controller with us for collecting it), and their own privacy policies, linked above, apply.

These providers may process your data outside the country you live in, including in Canada and the United States. Where the law requires it, these transfers are protected by appropriate safeguards, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Sign-ups are closed, so this is how long we keep the pre-registrations made before then. We keep yours until you unsubscribe or ask us to delete it, and then delete it straight away. Otherwise, we keep it no longer than 12 months after the app you pre-registered for launches. If we decide not to release an app, we tell you and delete pre-registrations for it within 30 days.

If you didn’t confirm your email address within 30 days of our confirmation email, we deleted your sign-up.

We keep a license’s records for as long as the license exists, and order records for as long as tax and accounting laws require. If you ask us to delete a license’s records, the license stops working.

Email me the link keeps no email address. The hashes it keeps, with the app and the time of each request, are deleted after 8 days.

Our anonymous statistics (page views and page speed) are deleted after 13 months.

The do-not-email code made from your address is kept for as long as we send email, so we can keep honouring your choice.

Deleted data can stay in our server’s nightly backups for up to 14 days, until those backups are overwritten. We only use backups to recover from a failure.

Our server’s logs, with shortened IP addresses only, are overwritten as they fill up. Vercel and Cloudflare keep their logs for a short time, as their own policies describe.

Cookies last as long as listed above. Google Analytics keeps data about visits for 14 months. Consent receipts are deleted after two years. Advertising companies keep what they receive as their own policies describe.

You can:

• Ask for a copy of the data we hold about you.
• Correct it if it’s wrong.
• Ask us to delete it.
• Withdraw your consent at any time, as easily as you gave it, for example by unsubscribing or in Your Privacy Choices.
• Object to how we use your data.
• If you’re in India, nominate someone to exercise these rights for you if you die or become unable to.

To do any of these, email privacy@zincwolf.app. We reply within 30 days. We may ask you to confirm the request comes from you, for example by writing from the email address you signed up or bought with. Every email we send also includes an unsubscribe link.

If you have a complaint, write to us first at privacy@zincwolf.app: we’re the contact for grievances about your data. If you’re still unhappy, you can complain to a regulator: in India, the Data Protection Board of India; in the EU or UK, your local data protection authority.

Some US state laws, such as California’s, call letting advertising companies collect data about your visit for ads on other sites “selling” or “sharing” personal information, or “targeted advertising”. Where Advertising is on, we share identifiers (such as cookie IDs) and your activity on zincwolf.app (pages visited, the ad that brought you) with Google, for advertising; while pre-registration was open, that included a hashed email address if you signed up. That’s the only selling or sharing we do: we never sell personal data for money, and we don’t knowingly sell or share the data of anyone under 16.

To opt out, switch off Advertising in Your Privacy Choices, or turn on Global Privacy Control in your browser: we honour it automatically, and Your Privacy Choices then shows that your opt-out request was honored. You can also ask us to tell you what we hold, correct it or delete it, by email to privacy@zincwolf.app, or through someone you authorise. We won’t treat you differently for using these rights. If we refuse a request, you can appeal by replying to our answer; we’ll respond within 45 days, and if you’re still unhappy you can contact your state’s attorney general.

Pre-registration was for people aged 18 or over. If we learn that someone under 18 signed up, we delete their sign-up.

Your data travels over encrypted connections (HTTPS). It’s stored in a database that isn’t reachable from the internet, and access to it is limited to us.

When we change this policy, we update the date at the top of this page. If a change is significant, we’ll also email the people who pre-registered about it. This is version 2026-11-03.