Privacy Policy

1. Controller

Zonakeys. Privacy contact: support@zonakeys.com.

2. What data we process

Email address (for your sign-in and to notify you about your orders).

Order data: products, amounts, status, payment currency and network, payment address and blockchain transaction reference. We do not receive or store bank card data.

Approximate country, derived from your IP address, to apply regional restrictions and prevent fraud.

Technical security and performance data (for example error logs and rate limits) and the terms you search for in the store, for statistics and improvement.

Support: the messages you send to our email.

3. Why we use it

To process and deliver your orders; send transactional notices (payment received, order ready); provide support; prevent fraud and abuse; meet legal and accounting obligations; and improve the store. We do not send marketing without your consent and we do not sell your personal data.

4. Who we share it with

Only with service providers: hosting and network (Cloudflare), database and storage (Supabase), cryptocurrency payment processor (Plisio), email delivery (Resend), support mailbox (Zoho Mail), internal operational notices to our team about orders (Telegram) and anti-bot verification (Cloudflare Turnstile). Also with authorities when required by law.

5. Cookies and local storage

We use a strictly necessary session cookie to keep you signed in. Your browser also stores, on your own device, your cart, wishlist, recently viewed products and preferences (language, currency, visual effects). We do not use advertising cookies. Cloudflare Turnstile may use its own technologies to tell people from bots.

6. Retention

We keep order data for as long as needed to meet legal, tax and claim-defense obligations (normally up to 7 years). Technical logs are deleted much sooner.

7. International transfers

Our providers may process data in the United States and other countries. We apply the reasonable contractual safeguards available.

8. Your rights

You can request access, correction, deletion or portability of your data, and object to or restrict its processing, by writing to support@zonakeys.com. If you live in the EEA/UK (GDPR) or California (CCPA/CPRA) you also have the rights those laws grant, including the right to complain to your data protection authority. We do not sell or share personal data for targeted advertising. Some order data cannot be deleted while a legal obligation to keep it exists.

9. Children

The store is not directed to people under 18 and we do not knowingly collect data from minors.

10. Security

Encryption in transit, product keys encrypted at rest, minimal access and audit logs. No system is infallible: if a breach affecting you occurs, we will notify you as the law requires.

11. Changes

We will publish any change here, with its date.