1. Introduction

At zTiles ("we," "our," or "us"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this Privacy Policy carefully.

2. Information We Collect

2.1 Information You Provide

Account information (email address, username, password)
Profile information (name, bio, avatar)
Payment information (processed securely through Stripe)
Z-Credits balances, Monero deposit/withdrawal addresses, and payout history
Authenticator (TOTP) enrollment metadata when you enable two-factor authentication
Content you create or upload (maps, videos, text)
Communications with us (support requests, feedback)

2.2 Automatically Collected Information

Device information (IP address, browser type, operating system)
Usage data (pages visited, features used, time spent)
Cookies and similar tracking technologies
Log files and analytics data

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Service
Process transactions and manage subscriptions
Authenticate users and prevent fraud
Send you service-related notifications and updates
Respond to your inquiries and provide customer support
Analyze usage patterns to improve user experience
Comply with legal obligations
Protect our rights and prevent abuse

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as payment processing, data analytics, hosting, and customer support. These providers are contractually obligated to protect your information.

4.2 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use essential cookies so you can stay signed in and so we can protect your account (for example access_token, refresh_token, and csrftoken). We also use browser storage (localStorage and sessionStorage) for preferences such as sidebar layout and video quality - not for third-party advertising by default.

Where we enable them, optional analytics (for example Google Analytics) or advertising (for example Google AdSense) cookies are only loaded if you accept them in our cookie notice. See our Cookie Policy for a full list and how to change your choice.

You can block or delete cookies in your browser; blocking essential cookies may prevent sign-in. OAuth providers (Google, Microsoft, etc.) may set their own cookies during login on their sites.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

Access: Request access to your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request transfer of your data
Opt-out: Opt-out of certain data processing activities
Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us through our contact page or your account settings.

8. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

Our legal basis for processing your data includes: consent, contract performance, legal obligations, legitimate interests, and protection of vital interests.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

10. Data Retention

We retain your personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate safeguards to ensure your information receives adequate protection.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at our contact page.