Privacy Policy

Effective date: 2026-11-07 · Español

In short: we collect only what we need to make and deliver your surprise, we never sell your data, we don't show ads or use advertising or tracking cookies, and we delete surprises automatically. You can ask us to see, correct or delete your information at any time.

This policy explains what personal information ZINFEXX collects, why, who we share it with, how long we keep it and what choices you have. ZINFEXX is operated by a sole proprietorship based in Florida, United States, under the fictitious name "ZINFEXX", registered with the Florida Division of Corporations under no. G26000139367 ("we", "us"); mailing address: 1070 Montgomery Rd #2238, Altamonte Springs, FL 32714. Contact: service@zinfexx.com or our contact page.

1. What we collect

• Order details: your email address, language and time zone; the occasion, plan and extras; the name and message shown in the surprise; optional notes for our team; the unlock date you choose; whether you asked for the one-time "opened" notice; and a record of when you accepted our Terms.
• Your content: the videos, photos and audio you upload. We remove location (GPS) data and other hidden metadata from JPEG, PNG and WebP photos, and GPS location data from MP4 and MOV videos.
• Payment information: handled by Stripe (and by Link for purchases "Sold through Link"). We receive the payment status, amount, taxes, the billing country and payment identifiers, never your full card number.
• Your approximate country: our security provider, Cloudflare, tells our server the country of your internet connection, based on your IP address. We use it to show what is available where you are and to check orders against where we sell (see our Terms), and we keep only the two-letter country code with your order, never your precise location.
• How you found us: if you arrive through a link with campaign tags (for example, utm_source=pinterest), the browser tab remembers those tags; if there are none, it remembers only the name of the website that sent you (such as pinterest.com, never the full address of the page). If you place an order, these details are saved with it so we know which of our campaigns work. We don't use them to build a profile of you.
• Messages and reports: what you send through our contact form (your name if you give it, your email, the topic, an order number if you add one, your message and language) or our report form (the surprise link, the reason, details and, optionally, your email). For a request to remove an intimate image, we also collect the name you type as your electronic signature, how to contact you and your good-faith statement, because the law requires them.
• Recordings: if you choose to record a video or your voice, your browser asks for permission to use the camera or microphone. Recording happens on your device and nothing is sent until you choose "Use this recording"; it is then treated like an upload. The camera and microphone are only available on the page where you create a surprise; the surprise page can never use them.
• Links you give us: a Google Drive or Dropbox link is used once, by our server, to copy that file; the link itself is not stored or shown. Links to YouTube, Spotify and similar platforms are stored with your order and shown in the surprise as a button.
• Personalization extras: the voice note you upload or record, the names in the group signatures and, if you add a secret question, the hint and a scrambled summary of the answer (never the answer itself).
• Replies: if your surprise allows replies and the recipient sends one, we store that text (and the name, if they write one) with the order and send it only to the buyer. It is deleted with the surprise.
• Recipients: we don't ask recipients for any information. When a surprise is opened we count how many times it was opened and when it was first opened, not who opened it. If the buyer asked for it, we email the buyer once with the time of the first opening, and nothing else. The surprise page never accesses the camera, microphone, contacts or location.
• Anonymous statistics: we keep daily totals of a few steps (for example, visits to the home page, surprises started, payments completed and surprises opened). These totals are plain numbers: they contain no personal information and can't be linked to anyone.
• Visit and speed measurement: on our public pages (home page, occasions, glossary, contact and legal pages) we use Cloudflare Web Analytics, from our hosting provider, to see in aggregate how many visits we get, which country and website they come from, and how fast each page loads. It uses no cookies and stores nothing on your device, doesn't follow you across websites, doesn't record anything after the “?” in web addresses, and Cloudflare discards your IP address. It is never used on the surprise page, your order page, the report page or the private admin area.
• Technical and security data: to protect the service we process IP addresses and browser information in real time (for example, to stop abuse). With orders, messages and reports we store only a shortened one-way fingerprint (a "hash") of the IP address, not the address itself. Our security check (Cloudflare Turnstile) processes technical signals, such as your IP address and browser details, only to tell people from bots. Our hosting and security providers keep standard technical logs for a limited time.

2. Cookies and storage on your device

We don't use advertising, analytics or tracking cookies, and we don't load any third-party tracking scripts (the Cloudflare Web Analytics measurement described above uses no cookies or storage). The website only keeps the following on your device, to make it work and remember your choices:

All of these are strictly necessary or remember a choice you made. You can delete them at any time in your browser settings; the site will still work, but it will forget your preferences.

3. Why we use it

• to create, deliver and support your surprise and to send you emails about your order (to perform our contract with you);
• to process payments, apply taxes and the rules about where we sell, prevent fraud and abuse, keep the service secure and enforce our rules (our legitimate interests and legal obligations);
• to send you the one-time "opened" notice, only if you ask for it (your consent, which you give by ticking that box);
• to understand, with anonymous totals and campaign tags, which pages and campaigns bring customers, so we can improve the website and spend wisely on advertising (our legitimate interests);
• to comply with the law, including tax, accounting and child-protection laws, and to handle legal requests and removal requests (for this we keep a technical fingerprint of each stored file, which lets us find identical copies of a reported file and is deleted together with the file);
• to answer your messages.

We don't sell your personal information, we don't share it for cross-context behavioral advertising, we don't allow third parties to collect information about your activities across websites through our site, and we don't use your content to train artificial-intelligence models. We don't share personal information with third parties for their own direct marketing.

4. Who we share it with

Only with service providers that help us run ZINFEXX, and only what each one needs:

• Stripe (payment processing) and Link (Stripe's payment service; for purchases "Sold through Link" it is the merchant of record and processes your data under its own privacy policy);
• Cloudflare (domain, content delivery, security and bot protection, email forwarding, hosting of the website and its database on their servers, and private storage for files and encrypted backups, and aggregate, cookie-free measurement of visits and speed);
• Resend (sending order emails);
• Google and Dropbox, only if you import a file from them: our server requests the file from the link you give us;
• Music and video platforms (YouTube, Spotify, Apple Music and others): we send them nothing. If someone taps a platform button in a surprise, that platform processes the visit under its own privacy policy;
• AI music tools, only for custom songs: the details you give us for the song (such as names, style and mood), never your email address or the files you upload;
• public authorities when the law requires it or to protect someone's safety (for example, reports to NCMEC), and a buyer of the business if it is ever sold, who must respect this policy.

5. Who can see a surprise

Anyone who has its private link, who can also save a copy of the uploaded video, song and photo. Links are long random codes that cannot be guessed, and surprise pages are hidden from search engines. Files are stored privately and are delivered through links that expire after a few minutes. Only the owner of ZINFEXX, protected by a password and two-step verification, can see orders in order to produce and support them.

6. How long we keep it

• Surprises and their files (including voice notes and replies): 365 days (1,825 if you bought "Keep it for 5 years" or chose Premium) after purchase or, if you scheduled an unlock date, after that date. Then the files and personal details (including your email, the campaign tags and the countries saved with the order) are deleted and the link expires. Prepaid packs are kept while they still have credits.
• Uploads and orders that are never paid: deleted after 48 hours (payments still being processed: up to 14 days).
• Contact messages and reports: up to 1 year from when they are sent (a report that is still being handled is kept until it is resolved). The personal details in a report, including those in an intimate-image removal request, are deleted earlier if the related surprise is deleted.
• Anonymous daily totals: about 13 months (400 days).
• Encrypted backups: we keep one encrypted copy of our records per day for 30 days. Information you deleted can remain in these backups until they are overwritten or automatically deleted, up to 31 days later. Backups don't include your videos, photos or audio.
• Basic accounting records (order number, date, amount, taxes and payment identifiers): as long as tax and accounting laws require, generally up to 7 years.
• Information we must preserve by law: for the time the law requires. For example, material reported to NCMEC is preserved for one year (18 U.S.C. § 2258A), or longer if the authorities ask us to.

7. Your rights and choices

Wherever you live, you can ask us to:

• know and access the personal information we have about you, and get a copy in a portable format;
• correct information that is wrong;
• delete your personal information, or a surprise before its expiry date (we keep only what the law requires us to keep).

How to ask: write to service@zinfexx.com from the email address used for the order, or use our contact page and choose "Privacy". To protect you, we check that the request comes from the email address used for the order and may ask for your order number. You can also use an authorized agent: we will ask for your signed permission and may ask you to confirm your identity directly with us.

Timing: we answer within 45 days. If we need more time (up to 45 more days), we will tell you why within the first 45 days.

Appeals: if we decline your request, you can appeal by replying to our answer with "Appeal" in the subject within 60 days. We will answer your appeal in writing within 45 days and explain our decision. If you are not satisfied, you can contact your state attorney general.

No discrimination: we will not treat you differently for exercising your rights.

Sale, sharing and Global Privacy Control: we don't sell or share personal information for advertising, so there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing, which we already honor for everyone.

Do Not Track: we don't track visitors across websites, so the site works the same whether or not your browser sends a "Do Not Track" signal.

People who appear in or receive a surprise: you don't need to be the buyer to ask us to remove a surprise that shows you. Use the report form or our contact page; intimate images follow the faster process in our Acceptable Use Policy.

For purchases "Sold through Link", you can also manage your payment data with Link at link.com, including asking Link to delete it.

8. Security

We use encrypted connections (HTTPS), private storage, encrypted backups, strict access controls with two-step verification, automatic deletion and limits against abuse. No system is 100% secure; if a security incident affects your personal information, we will notify you as the law requires.

9. Children

ZINFEXX is for adults: buyers must be at least 18 years old. We don't knowingly collect personal information from children under 13. Parents or guardians may include their children in a surprise and can ask us to delete it at any time.

10. International users

ZINFEXX is operated from the United States, and for now our paid services are not offered in the European Economic Area or the United Kingdom. Your information is processed in the United States and in other countries where our providers operate. Wherever you are, you can use the rights described in section 7.

11. Changes and contact

If we change this policy, we will post the new version on this page with a new effective date before it applies. Questions: service@zinfexx.com · https://zinfexx.com/contact · ZINFEXX, 1070 Montgomery Rd #2238, Altamonte Springs, FL 32714.