Your Data & ZEN
What we store, why we need it, and how you stay in control
This page explains what data ZEN collects when you browse the site, use the dashboard, or run the external client. We keep collection to a minimum and only keep what is needed to run the service securely.
What ZEN Actually Stores
Account and platform data
- Email address and username (from Discord OAuth)
- Discord user ID and Discord username
- Your ZEN username and password used to log in to the ZEN software (passwords are stored only in hashed form)
- Screenshots you submit through the website or dashboard (e.g. support or verification requests)
- IP address, used for abuse prevention and ban enforcement
- Payment metadata via Stripe: invoice numbers, plan type, and redemption status. We do not store card details.
- Profile content you voluntarily provide (bio, avatar, ZEN ID)
- Activity logs: logins, purchases, HWID reset requests, and staff actions
Data collected by the external client
- ZEN username and password (credentials used to authenticate with the software)
- A screenshot captured by the software during use, for security and abuse prevention
- Hardware UUID (BIOS)
- Windows version
- RAM amount
- CPU model
- Discord user ID
- IP address
This hardware data is collected solely for license binding and HWID verification. It is not sold or shared with third parties.
What we never collect
- Card numbers, CVC codes, or bank credentials (handled entirely by Stripe)
- Keystrokes, browsing history, personal files, or documents
- Webcam or microphone data
- Advertising identifiers or cross-site tracking data
Why ZEN Needs This Information
- To verify your identity and bind your license to your hardware
- To process payments and manage your subscription
- To provide support, including HWID reset requests
- To enforce bans and prevent abuse
- To sync your Discord roles with your dashboard access
- To comply with legal, tax, and accounting obligations
We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects on you.
Our Lawful Grounds
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
Contract (Art. 6(1)(b))
Account creation, license delivery, subscription management, and support.
Legitimate interests (Art. 6(1)(f))
Fraud prevention, HWID binding, ban enforcement, and platform security.
Legal obligation (Art. 6(1)(c))
Tax, invoicing, and accounting record keeping.
Consent (Art. 6(1)(a))
Optional profile content you choose to make public. You can withdraw consent at any time.
Partners We Rely On
We share the minimum data required with the processors below. Each provider processes data under its own privacy and security terms, and we do not sell your data to any of them.
Stripe
Payment processing and invoicing. Receives billing details you enter directly.
Discord
Identity verification, role sync, and community support.
Cloudflare
Hosting, CDN, and DDoS protection.
Supabase infrastructure
Database, authentication, and file storage for the platform.
How We Keep It Safe
- Encryption in transit (TLS) for all site, dashboard, and client traffic
- Passwords stored only as salted hashes — never in plain text
- Row-level access rules so users can only read their own records
- Privileged actions restricted to verified staff and owner roles, with activity logging
No system can be guaranteed fully secure. You are responsible for keeping your credentials confidential.
If Something Goes Wrong
If a breach occurs
- We contain and investigate the incident immediately
- Where required, we notify the competent supervisory authority within 72 hours of becoming aware
- Affected users are informed without undue delay when there is a high risk to their rights
- We document the incident and the remediation taken
Where Your Data Lives
Our providers may process data outside your country, including in the United States. Where data leaves the EEA or UK, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent approved safeguard.
Storage location
Platform data is stored with our hosting and database providers on EU and US infrastructure, protected by the safeguards described above.
How Long We Keep Records
How long we keep data
- Account and profile data — while your account is active
- Invoices and payment metadata — up to the period required by tax law (typically 7 years)
- HWID and license records — for the life of the license, plus a short period for fraud prevention
- Ban records and related identifiers — retained indefinitely to enforce the ban
- Support screenshots and logs — up to 12 months
When a retention period ends, data is deleted or irreversibly anonymised.
Age Requirement
Minimum age
ZEN is not intended for anyone under 16, and we do not knowingly collect data from children. If we learn that a minor has created an account, we will terminate it and delete the associated data.
Requests You Can Make
Depending on where you live, you may have the following rights over your personal data:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion, subject to legal retention and ban enforcement
- Restriction and objection — limit or object to certain processing
- Portability — receive your data in a machine-readable format
- Withdraw consent — where processing is based on consent
How to submit a request
Email sales@zencheats.net or open a ticket in our Discord server. We respond to verified requests within 30 days. We may ask you to confirm ownership of the account before acting.
Raising A Complaint
Escalating a complaint
If you believe we have mishandled your data, contact us first so we can resolve it. You also have the right to lodge a complaint with your local data protection authority, or with the Information Commissioner's Office if you are in the UK.
Updates To This Page
We may update this Privacy Policy as the service evolves or the law changes. The revision date at the top of this page always reflects the current version, and continued use of ZEN after an update means you accept the revised policy.
Who To Reach
Data controller
ZEN (zencheats.net) is the controller of the personal data described in this policy.
Get in touch
Privacy questions or data requests? Contact us on Discord or at sales@zencheats.net.