Privacy contact and cookie choices
Email support@zoxero.com for privacy questions or rights requests, including if you cannot sign in. Find our business address on the Contact page. See the Cookie Policy for cookies, storage durations and controls for optional analytics and advertising cookies.
1. Scope and controller
This policy applies to ZOXERO Store websites, customer accounts, orders, order chat, support tickets and the Creator Program. The data controller is ZOZX LLC. This policy does not cover a game publisher, bank, card network or payment provider acting under its own privacy notice.
2. Information ZOXERO collects
Account and contact
Email, username, password hash, verification status, security settings and account role.
Orders and delivery
Products, prices, status history and the game information supplied for delivery, such as player ID, platform, server or region. Some packages may also require game account login details. Confirm the required information with ZOXERO before purchasing.
Payments
Provider references, amount, currency, fee, tax, discount, payment status and limited card metadata such as brand or last four digits when provided. ZOXERO does not store full card numbers or CVCs.
Support and media
Messages, tickets, attachments, delivery evidence, refund requests and safety-review notes.
Device and security
IP address, browser/device data, timestamps, session events, cookie identifiers and fraud signals.
Creator Program
Channel links, audience description, code attribution, clicks, eligible earnings, payout method and encrypted payout details.
3. Why ZOXERO uses information
- Create and secure accounts, verify email, reset passwords and enforce access controls.
- Quote checkout totals, process payment, fulfil orders and provide receipts.
- Operate private order chat, support, refunds, disputes and delivery evidence.
- Detect fraud, abuse, account takeovers, sanctions concerns and prohibited activity.
- Run Creator code attribution, commissions, reversals and withdrawal review.
- Maintain records required for tax, accounting, payment-provider and legal obligations.
- Improve reliability, measure store performance and diagnose technical problems.
4. Legal bases
Depending on your location, ZOXERO relies on performance of a contract, legitimate interests in operating and protecting the store, compliance with legal obligations, and consent where consent is required. You can withdraw consent for optional processing without affecting processing already lawfully completed.
5. Who receives information
ZOXERO shares only what is reasonably needed with service providers such as payment processing, email delivery, cloud storage/hosting, database infrastructure, fraud and security tools, and analytics that ZOXERO has enabled. Information can also be disclosed to authorities, professional advisers or counterparties when lawfully required, or during a legitimate business reorganization with appropriate safeguards.
Game-delivery information may be submitted to the relevant authorized fulfilment or game channel to complete the top-up. ZOXERO does not sell personal data for money.
6. International transfers
Service providers can process information in countries different from yours. Where required, ZOXERO uses an appropriate transfer mechanism and contractual or technical safeguards.
7. Retention
ZOXERO keeps account and order records only as long as needed for fulfilment, support, fraud prevention, accounting, tax, payment disputes and legal obligations. Security logs and chat attachments can have different retention periods. When retention is no longer necessary, information is deleted, anonymized or securely isolated unless a legal hold applies.
8. Security
ZOXERO uses server-side secret storage, password hashing, access controls, encryption in transit, restricted admin functions and protected payout-detail storage. No internet service is risk-free. Never share your ZOXERO password, banking login, full card number, CVC or payment verification code.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may complain to a data-protection authority. Some records must be retained for payment, fraud, tax or legal reasons. Submit a private support ticket from the account concerned so ZOXERO can verify the request safely.
10. Children
ZOXERO is not directed to children who cannot lawfully consent or contract in their location. A parent or guardian should contact support if a child submitted personal information without appropriate authorization.
11. Changes and contact
Material changes will be published with a new update date. For privacy questions or rights requests, use the ZOXERO support-ticket system. For an existing order, use the private order chat so the request can be verified against the correct transaction.
Welcome offers and shopping reminders
After registration and email verification, we use your email address and purchase status to send a welcome discount if you have not purchased, and at most one further helpful reminder. No separate offers subscription is needed. These messages stop after a purchase or when you turn them off in Account preferences or through an email unsubscribe link. Order receipts and account security emails are separate.
Optional store analytics
With your permission, ZOXERO records page views, visible offers, shopping steps, a referring website hostname and device category. A signed first-party cookie identifies a browser for up to 90 days; session storage groups activity into visits with a 30-minute inactivity limit. These analytics do not store IP addresses, email addresses, game IDs, chat content or payment details.
Use Privacy settings to reject analytics or withdraw your choice. Browser Do Not Track and Global Privacy Control signals are respected. Raw analytics events are scheduled for deletion after 90 days. Order and payment records are separate and retained for operational and legal purposes.
Google Analytics
Google Analytics measures public page visits and confirmed purchases. Its optional cookies are included in the Accept or Reject choice alongside store analytics and advertising cookies.
The shared Google tag uses denied analytics storage by default and can send limited cookieless measurements to Google. If you allow Google Analytics cookies in Privacy settings, Google can store analytics identifiers for up to 90 days. This does not enable advertising cookies or personalized ads. Private pages and sensitive form fields are not included in our analytics events.
Google Ads measurement and optional cookies
The Google tag loads on public store pages using Advanced Consent Mode. Before you agree, or if you reject Google Ads cookies, it can send limited measurements without advertising cookies, including consent state, page information, timestamps and browser/network information. This does not mean no information is sent to Google. Advertising storage, advertising user data and personalization default to denied.
If you accept optional cookies in Privacy settings, the Google tag measures visits to public store pages and ad-click attribution. Google may receive your IP address, browser/device information, public page URL, cookie identifiers and Google ad-click identifiers. This is separate from ZOXERO's first-party store analytics. Personalized advertising is disabled.
After the server confirms a real payment, the confirmation page can send Google a purchase event containing the paid amount, currency and a random order reference used to prevent duplicate counting. The same consent controls apply. Test payments are excluded. ZOXERO does not send names, email addresses, phone numbers, account credentials, chat content, support-ticket details or card details in these events. Enhanced conversions are not enabled by this integration.
Reject or withdraw advertising cookies in Privacy settings. Do Not Track and Global Privacy Control prevent this tag from loading. Private account and order pages are excluded from page-view events; purchase measurement runs only after server-confirmed payment on the confirmation page.
How Google uses information from sites that use its services
OpenAI Ads purchase measurement
Accepting optional cookies allows completed purchases to be connected to ads in ChatGPT. After you agree, ZOXERO can remember the ad-click reference in a first-party cookie for up to 30 days. After our payment service confirms a live, paid order, our server can send OpenAI the ad-click reference, a random order reference, payment amount, currency, event time and our website origin. The order reference prevents duplicate counting.
We do not load OpenAI's browser Pixel or use automatic customer matching. We do not send names, email addresses, telephone numbers, account credentials, chat content or card details through this integration. Events opt out of future user-level personalization. Purchases without an available ChatGPT ad-click reference are not sent by this integration.
OpenAI Ads measurement stays off until you choose it in Privacy settings. Your previous Google or store analytics choices do not grant this permission. Rejecting or withdrawing it deletes our OpenAI attribution cookies and stops future measurement; it cannot undo an event already sent. Do Not Track and Global Privacy Control take priority. Blocking or clearing cookies can prevent attribution.