Last updated: May 7, 2026

This Privacy Policy describes how Zarox (“Zarox,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards information when you access or use zarox.to and related digital services, community features, and online offerings (collectively, the “Services”). This Policy should be read together with our Terms and Conditions.

1. Who We Are

Zarox operates the Services. The operator responsible for processing personal data obtained through the Services is Zarox, acting as described herein and in our Terms. For privacy requests, use the contact methods listed in Section 12.

2. Scope and Eligibility

The Services are intended for users who are at least eighteen (18) years of age. We do not knowingly collect personal information from anyone under eighteen. If you believe we have received such information, contact us promptly using Section 12 and we will take reasonable steps to delete it, subject to applicable law.

3. Information We Collect

Depending on how you use the Services, we may collect:

• Account and profile data: such as username, email address, and credentials (passwords are stored using appropriate protective measures).
• Transaction-related data: where you make a purchase or contribution, payment metadata may be processed by us and by payment processors (for example, PayPal or Stripe). We generally do not receive full payment card numbers; processors collect card data under their own policies.
• Technical and usage data: such as IP address, device and browser type, general location derived from IP, timestamps, and activity logs reasonably necessary to operate, secure, and improve the Services.
• Communications: information you send when you contact support or interact with community channels we operate.

We do not use the Services to collect sensitive categories of data (such as health data) as a routine matter.

4. How We Use Information

We use information to:

• provide, operate, maintain, and secure the Services;
• create and manage accounts and authenticate users;
• process transactions and deliver digital access or entitlements;
• detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms;
• communicate with you about the Services, including notices and support responses;
• comply with legal obligations and enforce our agreements;
• improve functionality and reliability of the Services where consistent with applicable law.

We do not sell your personal information for monetary consideration.

5. Legal Bases (Where Applicable)

If laws such as the GDPR apply to our processing, we rely on one or more of the following bases: performance of a contract (providing the Services you request); legitimate interests (security, service improvement, fraud prevention) balanced against your rights; consent where required (for example, certain cookies or marketing, if offered); and compliance with legal obligations.

6. How We Share Information

We may share information with:

• Payment processors: such as PayPal or Stripe, who process payments under their terms and privacy policies.
• Service providers: vendors that assist hosting, infrastructure, email delivery, analytics, or security, subject to confidentiality and processing terms.
• Legal and safety: where required by law, legal process, or governmental request, or where we reasonably believe disclosure is necessary to protect rights, safety, or integrity of users, the public, or the Services.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We require processors to use information only as instructed and not for their own unrelated marketing.

7. Cookies and Similar Technologies

We may use cookies, local storage, and similar technologies for session management, preferences, security, and limited analytics. You can control cookies through browser settings; disabling certain cookies may impair parts of the Services.

8. Retention

We retain personal information only as long as necessary for the purposes described in this Policy, including maintaining your account, meeting legal, tax, or accounting requirements, resolving disputes, and enforcing agreements. Retention periods vary depending on data type and context.

9. Security

We implement reasonable technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

10. International Transfers

We may process and store information in the United States and other locations where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers consistent with applicable law.

11. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing, to object to processing based on legitimate interests, to withdraw consent where processing is consent-based, and to lodge a complaint with a supervisory authority. You may also have rights under U.S. state privacy laws (such as rights to know, delete, or opt out of certain sharing, where applicable).

To exercise rights, contact us using Section 12. We may need to verify your request and may decline requests where permitted by law.

12. Contact Us

For privacy inquiries or requests, contact us through the official channels published on zarox.to (including support email or community channels indicated on the site). Include sufficient detail for us to respond.

13. Changes to This Policy

We may update this Policy from time to time. We will post the revised Policy on zarox.to and update the “Last updated” date. Where appropriate, we will provide additional notice. Continued use after the effective date constitutes acceptance of the updated Policy unless applicable law requires otherwise.

Third-party links. The Services may link to third-party sites or services. Their practices are governed by their own policies; we are not responsible for them.