Privacy Policy

1. Introduction

zonesniper ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our domain monitoring service ("Service").

Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Email address, password (hashed)
• Set up monitors: Domain names, keywords, TLD preferences, monitoring rules
• Configure alerts: Email addresses, webhook URLs, notification preferences
• Make payments: Billing information is processed by Stripe; we store only subscription status and Stripe customer/subscription IDs
• Contact us: Any information you include in support requests or communications

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device information: Browser type, operating system, device type
• Usage data: Pages visited, features used, timestamps, referring URLs
• IP address: Used for security, fraud prevention, and approximate location
• Cookies and similar technologies: See Section 6 for details

2.3 Information from Third Parties

• OAuth providers: If you sign in with Google, we receive your email address and basic profile information
• Payment processor: Stripe provides us with transaction status and subscription information

3. How We Use Your Information

We use your information to:

• Provide the Service: Process your monitoring rules, detect matching domains, send alerts
• Manage your account: Authentication, account recovery, subscription management
• Process payments: Handle billing through our payment processor
• Communicate with you: Service notifications, alerts, billing updates, support responses
• Improve our Service: Analyze usage patterns, fix bugs, develop new features
• Ensure security: Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations: Respond to legal requests, enforce our terms
• Marketing (with consent): Send promotional emails about new features or offers

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data based on:

• Contract performance: Processing necessary to provide the Service you subscribed to
• Legitimate interests: Improving our Service, security, fraud prevention
• Consent: Marketing communications, non-essential cookies
• Legal obligation: Compliance with applicable laws

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

5.1 Service Providers

• Stripe: Payment processing
• Resend: Email delivery
• Cloudflare: CDN, security, R2 storage
• Railway: Hosting infrastructure

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if necessary to protect our rights, safety, or property.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Necessary cookies: Required for the Service to function (authentication, security)
• Functional cookies: Remember your preferences (theme, settings)
• Analytics cookies: Help us understand how you use the Service
• Marketing cookies: Used to deliver relevant advertisements

6.2 Your Cookie Choices

When you first visit our website, you will see a cookie consent banner. You can customize your preferences at any time. Note that disabling certain cookies may affect Service functionality.

6.3 Do Not Track

We currently do not respond to "Do Not Track" browser signals. You can control tracking through our cookie consent preferences.

7. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure password hashing (bcrypt)
• Access controls and authentication
• Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

9. Your Rights

9.1 All Users

Regardless of your location, you can:

• Access and update your account information
• Delete your account
• Opt out of marketing communications
• Manage cookie preferences

9.2 EEA, UK, and Swiss Residents (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent
• Lodge a complaint: With your local data protection authority

9.3 California Residents (CCPA/CPRA)

You have the right to:

• Know what personal information we collect and how it's used
• Delete your personal information
• Opt out of the sale or sharing of personal information (we do not sell your data)
• Non-discrimination for exercising your rights
• Correct inaccurate personal information
• Limit use of sensitive personal information

To exercise any of these rights, please contact us at privacy@zonesniper.com. We will respond within the timeframe required by applicable law.

10. International Data Transfers

Our Service is hosted in the United States. If you are accessing the Service from outside the United States, your data will be transferred to and processed in the United States.

For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.

11. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 16, we will delete it promptly.

12. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@zonesniper.com
Address: 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110

For GDPR-related inquiries, you may also contact your local data protection authority.