Privacy Policy

Introduction

This Privacy Policy describes how we collect, use, and protect your information when you use services at zebby.org ("Services"). We are committed to protecting your privacy and giving you control over your data.

Information We Collect

Account Information

• Username: A user-chosen identifier (changeable once per 24 hours)
• Display Name: Optional name for display purposes
• Authentication Credentials: Cryptographic public keys stored for passwordless login via WebAuthn
• Account Metadata: Account creation date, last login time, last username change time

Usage Information

• Service Access: Which services you've accessed and when
• Analytics Data: We may use analytics and tracking technologies to understand how our services are used
• Session Data: Temporary session cookies for authentication (essential for service functionality)

What We Don't Collect

• No email addresses (unless you explicitly provide one for optional features)
• No passwords (we use passwordless authentication)
• No personal identification information unless you choose to provide it

Data Storage

Your data is stored on servers located in the us-west1-b region (Oregon) on Google Cloud Platform infrastructure.

How We Use Your Information

We use collected information to:

• Provide and maintain our Services
• Authenticate your access
• Track service usage for improvement
• Analyze usage patterns and service performance

Data Sharing

• We do not sell your data to third parties
• We do not share your data except:
  • When explicitly authorized by you through a specific user interaction
  • When required by law or valid legal process
  • With service providers who assist in operating our Services (under strict confidentiality agreements)

Your Rights

You have the right to:

• Access your data at any time through your account dashboard
• Modify your username (once per 24 hours) and display name
• Delete your account and all associated data at any time
• Export your data (available upon request)

Communications

We will not send you any communications unless you explicitly opt-in to receive them.

Cookies

We use only essential session cookies required for authentication. These cookies:

• Are deleted when you log out or close your browser
• Do not track you across other websites
• Are necessary for the Services to function

Age Restrictions

You must be at least 16 years old to use our Services. We do not knowingly collect information from users under 16.

Data Security

We implement industry-standard security measures including:

• WebAuthn passwordless authentication
• Encrypted connections (HTTPS)
• Secure session management
• Regular security updates

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

• Account data is retained until you delete your account
• Upon account deletion, all associated data is permanently removed
• Session data is automatically deleted after logout or session expiration

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of Services after changes constitutes acceptance of the updated policy.

Contact

For privacy-related questions or to exercise your data rights, please contact:
Consulting by Jeff Day
Oregon, United States

Compliance

This policy is designed to comply with applicable privacy laws including:

• California Consumer Privacy Act (CCPA)
• General Data Protection Regulation (GDPR) for EU users
• Oregon state privacy laws