Privacy Policy

Overview

This policy covers zeoob.com. It describes what the site collects, why, and how long it keeps it. It is written to match what the software actually does; where a section says “nothing”, it means nothing.

Making a mockup

Everything you type, upload or change while building a post, a story or a chat stays in your browser. The names, the messages, the counts and any photo you add are never sent to Zeoob while you are editing. Pressing Generate is what sends an image; nothing before it does. Closing the tab ends it.

Drafts are saved in your browser’s own storage so you can come back to them. That storage is on your device and is cleared when you clear site data. We will not tell you it is unreadable, though: localStorage can be read by any script running on this site, ours included. What keeps a draft on your device is that nothing we ship uploads one.

Four things can happen to your work, and they are worth keeping apart:

• Guest drafts stay in your browser. They are never uploaded.
• Saved work, signed in is uploaded to your account when you ask it to sync, so you can open it on another device.
• Downloads pass through our server to be watermarked and signed, and the file stays there for up to 7 days — see below.
• Share links put a copy on our server, at an unguessable address, until it expires — see below.

Downloading a mockup

When you click Generate, the image is sent to Zeoob to be watermarked, signed and returned to you. We keep a record of that: the file name, the tool it came from, its size, the date, the country the request came from, your IP address, the kind of device, operating system and browser you used, and, if you were signed in, which account made it.

We keep it to stop abuse of the endpoint and to be able to answer the question “did this image come from Zeoob?”, which is what the verification tool does. The device, operating system and browser are there so that a fault you report can be reproduced on the same setup.

The file itself is kept on our server for up to 7 days. A daily job deletes files past that, and we may remove a file sooner than that at any time, for example when the server needs the space, so download it, and make any PDF or share link you want from it, straight away. The record stays after the file has gone, without the image, and is what our own usage statistics are counted from. If you were signed in when you generated it, the image is listed on your account page for as long as it is there, and you can delete it yourself.

Rating a tool

When you rate a tool we record the stars, the tool, the date, the country the request came from (looked up from your IP address on our own server, without sending it anywhere), the language of the page, and any note you choose to write. We do not store your IP address with a rating. To allow one rating per tool every 30 days, your browser keeps a random code for this site and sends it with the rating; we keep only a keyed one-way hash of that code (or, if your browser blocks storage, of your IP address and browser), which cannot be turned back into either. To stop one connection flooding a score, we also count ratings per connection for 24 hours, by a hash rather than the address. Please leave names, email addresses and phone numbers out of a note.

Share links

If you create a share link, a copy of the image is stored outside the public web root and given an unguessable address, optionally behind a PIN. You choose how long it lasts — 1, 3, 7 or 30 days. A daily job deletes expired copies and their records. You can revoke a link from your account page at any time, which deletes the copy at once.

Anyone who has the link can open it until it expires. Treat it like a key.

Comments

When you leave a comment we store what the form asks for, plus your IP address and browser user-agent string, which is how spam is detected. Comments and their details are kept so follow-up comments from the same person can be approved automatically. Ask us and we will delete them.

We do not use Gravatar. The circle beside a comment is the first letter of the name given, drawn by us, so no request is made to any other service and nobody is told who is reading.

Accounts

An account is optional and nothing on the site requires one to make or download a mockup. If you create one, we store what you give us and what you save. You can see, change and delete all of it, and deleting the account deletes the saved work with it. Images you generate while signed in are linked to the account so that you can see and delete them; when the account is deleted their files are removed and the records are unlinked from it.

The email list

If you give us your address for new-tool announcements we store the address, the date and a hashed IP, and send one email asking you to confirm. Nothing is sent until you do. Every message carries a link to unsubscribe, which deletes the record.

Cookies and advertising

Zeoob’s own code sets no cookie that follows you anywhere. Three Google services do set cookies: Google Analytics 4, which counts visits and sets first-party cookies on this domain; Google AdSense, which serves the ads; and Google reCAPTCHA, which protects the contact form and the verification tool. Comments may also set a cookie to remember your name so you do not retype it. Each one, what it sets and how to turn it off is in the cookie policy, which prints the list of what is actually running rather than describing it from memory. None of them sets a cookie before you have answered the consent prompt, which you can reopen from Cookie settings at the foot of every page.

Embedded content

An article may embed something from another site — a video, for example. Embedded content behaves exactly as if you had visited that site, and what it collects is governed by its own policy, not this one.

How long things are kept

• Share copies — deleted when the link expires, by a daily job.
• Generated images — kept for up to 7 days, and removed at any time before that if we need to, if you delete them from your account page, or if you ask us.
• Their records — kept without the image, including the IP address, for abuse handling, verification and usage statistics. A record tied to an account is unlinked from it when the account is deleted.
• Ratings — kept as the history behind each tool’s score, with the note if you wrote one. Ask us, quoting the note, and we will delete it.
• Comments — kept until you ask us to remove them.
• Email list entries — kept until you unsubscribe.
• Account data — kept until you delete the account.

Your rights

You can ask for a copy of anything we hold about you, ask us to correct it, or ask us to delete it. Write to support@zeoob.com from the address concerned, or from the one on your account, and we will answer within 30 days. The exception is anything we are obliged to keep for legal or security reasons.

Changes

If this policy changes in a way that affects what is collected or how long it is kept, the date at the top of this page changes with it.