Privacy Policy

This policy explains what personal data Zumset collects when you visit zumset.com, contact us or buy a product, why we collect it, how long we keep it and what your rights are. We collect as little as possible and we never sell your data.

1. Who is responsible for your data

The data controller is Zumset, Craiova, Romania. For any privacy question or request, please use the contact page.

2. What we collect and why

• Visitor statistics (no cookies). We count page views with our own privacy-friendly statistics. They use an anonymous identifier that changes every day and cannot be linked back to you; no cookie is set for this. Legal basis: legitimate interest (understanding how the Site is used).
• Security log. To protect the Site against attacks, spam and abuse, every request that reaches our server is recorded with its IP address, browser user agent, the page requested, the referring page, the date and time, and whether the browser runs JavaScript. This log is kept for 30 days and then deleted automatically (only anonymous daily totals are kept). It is used only for security and traffic analysis and is never shared. Legal basis: legitimate interest (security of the Site and of our customers).
• Contact form. Your name, e-mail address, subject and message, plus the IP address and browser of the sender (to fight spam). We keep messages as long as needed to answer you and for up to 2 years afterwards, unless you ask us to delete them sooner. Legal basis: your request / legitimate interest.
• Purchases. Your name, e-mail address, the product and license you bought, the PayPal transaction details (transaction ID, amount, status) and the IP address used for the order. We need this to deliver the product, provide support and updates, validate your license and keep accounting records. Legal basis: performance of the contract and legal obligations (accounting records are kept as long as Romanian law requires).
• License activation. When a Product is installed, it may send the domain name and server IP address to our license server, together with your license key. Legal basis: performance of the contract (license validation).
• Download Center sign-in. When you request a sign-in link, we store a one-time token linked to your e-mail address for a short time.

3. Cookies

• Session cookie (zs_sess) — created only when you submit a form, sign in to the Download Center or buy a product. It is strictly necessary for security and expires when you close your browser.
• Browser check cookie (zs_js) — a small technical cookie set by our anti-bot protection to remember that your browser passed the security check. It contains no personal data and expires after about a week. It is strictly necessary for security.
• Preferences — your light/dark theme choice and your cookie choice are stored in your browser’s local storage, not on our server.
• Optional third-party cookies — if we enable Google Analytics or advertising, those scripts are loaded only after you accept them in the cookie banner. You can change your choice at any time by clearing your browser’s site data.

4. Who we share data with

• PayPal processes payments. PayPal has its own privacy policy; we never receive your card details.
• Our hosting and e-mail providers, who store data on our behalf under data-processing agreements.
• Cloudflare (if the Site is served through it) handles network traffic to protect the Site from attacks.
• Authorities, only when the law requires it.

Some of these providers may process data outside the European Economic Area; in that case they use safeguards approved by the European Commission, such as Standard Contractual Clauses.

5. How we protect your data

The Site uses HTTPS everywhere, passwords are stored with modern one-way hashing, administrator accounts are protected by two-factor authentication, and access to personal data is limited to the people who need it to serve you.

6. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, contact us — we will answer within one month. Data we must keep by law (for example invoices) cannot be deleted before the legal period ends. You also have the right to complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro) or to the authority in your own country.

7. Children

The Site is intended for professionals and is not directed at children under 16. We do not knowingly collect their personal data.

8. Changes to this policy

We may update this policy when our services or the law change. The date of the last update is shown at the bottom of this page.

Last updated: 07 October 2026