Privacy Policy

1. Introduction

This Privacy Policy explains how ZonaiShare collects, uses, and protects the information you provide when using our website and mobile application. We are committed to protecting your privacy and handling your personal data with transparency and in accordance with applicable data protection laws.

By using ZonaiShare, you accept the practices described in this Privacy Policy. We recommend that you carefully read this document. If you do not agree with any part of this policy, we ask that you do not use our service.

2. Information We Collect

2.1 Information Provided by the User

To create an account and use certain features of ZonaiShare, we may collect the following information:

• Email address
• Username
• Profile picture, biography, and optional social media link
• Your Google account identifier and email address, if you choose to sign in with Google
• Preferences such as language, theme, and which emails you wish to receive
• Content created or shared through the service, including images, QR codes, titles, descriptions, tags, comments, and collections

ZonaiShare does not use passwords. You sign in with a single-use code sent to your email address, or with your Google account. We do not store passwords of any kind.

2.2 Automatically Collected Information

When you use ZonaiShare, we may automatically collect certain information, including:

• Device information (device type, operating system, browser)
• Log information (IP addresses, time and date of access, pages visited)
• Usage data (interactions with the service, usage time)
• If you use the mobile application and enable notifications: a push notification token, a device identifier, the platform, and your language
• On Android, an integrity attestation issued by Google Play, used only to verify that sign-in requests come from the genuine application and not from an automated system

3. How We Use the Information

We use the collected information to:

• Provide, maintain, and improve our services
• Process and manage your account
• Facilitate the social function of sharing content
• Automatically moderate published content in order to keep the community safe
• Translate content into your language when you request it
• Send notifications and emails you have chosen to receive
• Communicate with you about your account, updates, or changes to the service
• Analyze and improve the user experience
• Prevent fraudulent or abusive activity and protect the security of our users

We process this information on the following legal bases: performance of the contract between you and ZonaiShare (providing the account and the service), our legitimate interest (security, abuse prevention, moderation, and improving the service), your consent (push notifications, non-essential emails, and personalized advertising where applicable), and compliance with legal obligations.

4. Information Sharing and Service Providers

We do not sell your personal information to third parties. To operate the service we rely on the following providers, which process data on our behalf:

• Google — sign-in with Google, Google Play Integrity (device verification), Firebase Cloud Messaging (push notifications), Google Play (purchases), and Google AdMob and AdSense (advertising).
• OpenAI — automated moderation of the text and images you publish, and on-demand translation of content. The content being checked or translated is sent to this provider for that purpose.
• QR decoding services — when you publish a creation, the image is sent to api.qrserver.com, and to quickchart.io as a fallback, in order to read the QR code it contains and verify that it is a valid in-game code.
• Cloudflare — network security, content delivery, and Turnstile anti-bot protection.
• Postmark — delivery of transactional and notification emails.

We may also share information when necessary to comply with a legal obligation, a court order, or to protect our legal rights; in connection with a merger, acquisition, or sale of assets, provided that the receiving entity maintains this privacy policy; and in aggregated or anonymized form that does not individually identify any user.

4.1 International Transfers

Some of the providers listed above are located outside the European Economic Area, mainly in the United States. When data is transferred outside the EEA, it is done on the basis of the safeguards provided for in data protection law, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

5. What Other Users Can See

ZonaiShare is a community service, so part of your activity is visible to other people. This section explains exactly what is visible and to whom.

• Always public: your username, profile picture, biography, social media link, achievements, published creations, comments, followers and accounts you follow, and the number of likes and favourites your creations have received. Your position in the community ranking is also public.
• Your favourites: public by default. You can hide them from other users at any time in your settings.
• Your collections: private unless you choose to make them public.
• Creations you like: the list of everything you have liked is private and only you can see it, in your saved items.
• Who liked a creation: the author of a creation can see which users have liked it. No one else can. This applies to all likes, including those given before this feature existed.
• Never public: your email address, your device identifiers, and your account settings.

Your email address is never shown to other users, not even to the author of a creation you have interacted with.

6. Data Storage and Security

We take reasonable measures to protect the information we collect against loss, misuse, and unauthorized access. These measures include data encryption in transit, access controls, and periodic security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.

We retain your personal information for as long as your account remains active. If you delete your account, your personal data is removed from our systems; content you have published may be deleted along with it. Backup copies are kept for a limited period, currently eight days, after which they are overwritten. Server logs are kept for limited periods for security and diagnostic purposes. We may retain certain information after account closure where necessary to comply with legal obligations, resolve disputes, or enforce our agreements.

7. User Rights

Depending on your location, you may have certain rights regarding your personal information, which may include:

• Access: Right to request access to your personal information.
• Rectification: Right to request correction of inaccurate information.
• Deletion: Right to request deletion of your personal information.
• Opposition: Right to object to the processing of your personal information.
• Portability: Right to receive a copy of your personal information in a structured format.

You can exercise some of these rights directly from your account settings, without contacting us: change your email address, edit or delete your profile information, choose which emails you receive, hide your favourites, and permanently delete your account.

To exercise any other right, please contact us using the information provided in the "Contact" section of this policy. If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with your local supervisory authority; in Spain, the Agencia Española de Protección de Datos.

8. Cookies and Similar Technologies

ZonaiShare uses cookies and similar technologies to improve the user experience, remember preferences, and collect information about how our service is used.

We use strictly necessary cookies for the operation of the service and functionality cookies to remember your preferences, such as your language and theme.

You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features may not function properly if you reject cookies.

To protect our forms against spam and abuse we use Cloudflare Turnstile, a CAPTCHA alternative provided by Cloudflare, Inc. (United States) that does not set tracking cookies or profile users. Cloudflare may process technical signals such as your IP address and basic browser data solely to verify that the request is not coming from a bot. We do not use Google reCAPTCHA.

9. Advertising

ZonaiShare displays advertisements to keep the service free. We use Google AdMob in our mobile application and Google AdSense on our website.

These services may use cookies, device identifiers, and location data to show relevant ads. Advertisers may use these technologies to measure the effectiveness of their ads and personalize advertising content.

In the European Economic Area, the United Kingdom, and Switzerland, ads only use cookies with your prior consent. That consent is requested through a message managed by Google, in line with its consent management requirements, and you can withdraw it or change your choices at any time from that same message.

You can also manage your ad preferences or disable the use of cookies for personalized advertising through your device and browser settings.

10. Children's Privacy

ZonaiShare is not directed at children under 13 years of age, and we do not intentionally collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so that we can take the necessary steps.

Our commitments in this area, and the moderation measures we apply, are set out in our Child Safety policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy periodically. The most recent version is always available on this page, together with the date it was last updated. We recommend that you review this policy regularly to stay informed about how we protect your information.

Significant changes to this policy will be notified through a prominent notice in our service or by email to registered users.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, you can contact us at:

Email: [email protected]

Data controller: Miguel López Soriano. The full identifying details of the site owner are available in our Legal Notice.