Privacy policy

This policy covers what zapzonex stores, how we handle it, and how to have it removed. We keep it short because we collect very little.

What we collect

When you sign in with Discord we store only your Discord user ID and username. No email, no password, no contact list. Session cookies keep you signed in: they are HttpOnly, encrypted, and scoped to .zapzonex.net, so page scripts cannot read them and they are never sent to another site. To run a solve you also hand us Roblox account cookies through the site or the API; those get the separate, stricter handling described below.

How we use it

We use what we store only to run the service: to sign you in, solve captchas for your accounts, and charge and refund your prepaid balance. We do not use third-party analytics, advertising trackers, or browser fingerprinting, and we never sell or rent your data. If the portal crashes unexpectedly, it sends an error report to Sentry so we can diagnose and fix it. Reports contain a stack trace, browser and device context, and the shape of the URL after IDs and the entire query string are removed. Session replay and input, click, and console breadcrumbs are disabled; we do not attach your Discord or Roblox identity, cookies, headers, request bodies, or form values. Sentry may process the source IP only to provide error monitoring. Server logs (IP address, user agent, and timestamps) are kept for operational troubleshooting.

Your Roblox cookies

Roblox cookies get the strictest treatment. We never write your raw cookies to a log and never show them back to you in full. Delete a machine and its cookies are wiped immediately, not just hidden from view. Cookies from a one-shot batch are wiped a short while after the batch finishes. Your top-up codes and anything else you log in with are never stored or logged either.

Keeping and deleting your data

We hold what we need only as long as we need it: server logs and Sentry error reports for up to 30 days, cookies until you delete the machine or the batch completes. If you want your account and everything tied to it removed, or you want to know what we hold, ask in our Discord and we will handle it. There is no email inbox to write to; Discord is the channel for privacy requests.