Legal Information

Privacy Policy

Last updated: 10 September 2026

This policy explains what personal data we collect when you use zenistock.com, why we collect it, how long we keep it, and what rights you have.

1. Who is responsible for your data

Zeni is the data controller for the personal data described here. Zeni ("we", "us") operates zenistock.com.

2. What we collect

Account information

Email address
Password, stored hashed and never in readable form
Two-factor authentication status
Discord username, if you link your account
Registration date

Technical and security information

IP address
Country
Browser and operating system
User agent string
Network provider (ASN)
Session timestamps and last-used times

Order information

Purchase history, including items, prices and dates
Invoice records and payment references
Account balance and store credit transactions
Referrer, showing how you arrived at the site

Communications

Support tickets and their contents
Newsletter subscription status, if you opt in

We do not store your full card details. Payment information is handled directly by our payment providers.

3. Why we collect it, and our legal basis

Purpose	Data used	Legal basis
Delivering your order	Email, order details	Performance of a contract
Managing your account	Email, password, 2FA	Performance of a contract
Providing support	Email, order history, tickets	Performance of a contract
Preventing fraud and abuse	IP, country, browser, ASN, session data	Legitimate interests
Defending payment disputes	Order records, delivery and access logs	Legitimate interests
Meeting tax obligations	Invoices, transaction records	Legal obligation
Sending newsletters	Email	Consent, withdrawable at any time

4. Credentials for purchased items

We permanently delete our copy of these credentials 48 hours after delivery. After that point we retain no means of accessing anything you have bought.

Your order record remains visible in your dashboard so you can see what you purchased, but the working credentials themselves are removed from our systems.

5. Who we share data with

We do not sell your personal data. We share it only with providers who help us run the store:

SellAuth, our e-commerce platform, which hosts the storefront, processes orders and stores account data for us
Payment providers including Stripe, PayPal and cryptocurrency processors, each handling payment data under their own privacy policies
Discord, where you choose to link your account or contact us there

We may also disclose data where required by law, or to defend a payment dispute or legal claim.

6. How long we keep it

Invoices and transaction records: as required by applicable tax law
Account data: while your account is open, and for a reasonable period afterwards
Support tickets: 2 years from resolution
Security and session logs: 12 months
Item credentials: deleted 48 hours after delivery
Newsletter subscription: until you unsubscribe

7. International transfers

Some of our providers process data outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards, such as Standard Contractual Clauses or an adequacy decision.

8. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you
Correct anything inaccurate
Erase your data, subject to records we must keep for tax purposes
Restrict how we process it
Object to processing based on legitimate interests
Receive your data in a machine-readable format
Withdraw consent at any time, where consent is the basis

To exercise any of these, open a ticket or contact us on Discord. We respond within 30 days.

9. Cookies

We use cookies that are strictly necessary for the site to function, including keeping you logged in, maintaining your cart and protecting against fraud. These are required for the service to work and do not need your consent.

If we use any cookie beyond that, such as analytics, we ask for your consent through a banner before setting it. You can decline, and you can change your choice at any time. Declining non-essential cookies does not affect your ability to use the site or place an order.

You can also block or delete cookies through your browser settings, though some parts of the site may not work correctly if you block the essential ones.

10. Security

We protect your data with encryption in transit, hashed password storage, optional two-factor authentication, and access logging on accounts.

No system is completely secure. If a breach occurs that puts your rights at risk, we will notify you as required by law.

11. Children

This site is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will remove it.

12. Changes

We may update this policy. The date at the top shows when it was last changed. Significant changes will be announced on the site or in our Discord.

Questions about your data? Open a ticket or ask in discord.gg/Zeni.