Privacy policy

Your account, or none

There are two ways to use Zas, and one exists only on the website. An anonymous session asks for nothing: no email, no name, no password. The server gives it an internal identifier and nothing else, and the link holding its code is the only way back to it — lose the link and it cannot be recovered, by you or by us. The other is with an account: you sign in through Google or through Apple (via Firebase Authentication), and from it we receive your email address, your name, and your profile photo, used only to identify you and your channels. If you sign in with Apple and use Hide My Email, what we receive is the forwarding address Apple creates, not yours. The Android app always uses this second one: it has no anonymous sessions. There is no separate registration and no passwords of ours.

Your content

Everything you send is encrypted on your device before it leaves. The server stores sealed boxes it cannot open: no filenames, no titles, no content, no previews. Even public share links carry the key in the link itself — it never reaches the server.

What the server does see

• Your account or session, and the channels you own or follow.
• For each item: date, size, and expiry. Not the content.
• If you share a channel, who its members are: the server has to see that to let them in. And for each public link, how many times it was opened, copied and downloaded — counts only, never who.

That is the minimum needed to run the service.

Where it is stored

We use Google Firebase (authentication, database, hosting) and DigitalOcean Spaces (the encrypted file chunks). For usage statistics, Google Analytics and PostHog, explained further down. All of them process data on our behalf; none can read your content. We do not sell data or share it with third parties for advertising.

Retention

Zas is a corridor, not a warehouse. In an anonymous session each item lasts 2 days; with an account, 7. A session left empty deletes itself after half an hour. The one exception is you: a pinned item does not expire until you release or delete it. That is your decision, not ours.

Analytics and ads

This website uses Google Analytics and PostHog for basic usage statistics: how many items are created, downloaded, copied, shared, pinned and deleted, how often a channel is shared, an invite is created or accepted, a QR is shown, and someone arrives from a shared link. About each item we send numbers: its size, and how long it lived before you deleted it. Never the filename, the type, the text, or the channel name. Neither is sent the full page address: whatever follows the # never leaves your browser, and the addresses we do send carry no channel, session or share identifier. We do send your account or session identifier — not your email, not your name — for two reasons we would rather say out loud: so we can help you when you write to us, and so we count people rather than browsers. Both leave an identifier on your device: Google Analytics a cookie lasting about a year, PostHog an entry in local storage. Deleting your account deletes your content from Zas; to have your analytics data deleted as well, write to us. The Android app has no analytics and no ads of any kind.

Deleting your data

You can delete any item or channel from the app, at any time. To delete everything at once: Settings → “Delete my account”, which removes your account or your session with everything in it. An anonymous session also expires on its own.

You can also request deletion by writing to support@zas.red.

Children

Zas is not directed at children under 13. Signing in with an account requires a Google or Apple account; an anonymous session asks for nothing, so we do not verify age — doing so would mean asking for exactly the data this policy says we do not ask for.

Changes

If this policy changes, this page and its effective date are updated.