Privacy policy

Last updated: 13 August 2026

Zossoz, Inc ("Zossoz", "we", "us") runs this website at www.zossoz.com. This policy explains what we collect when you use it, why, who else sees it, and what you can ask us to do about it. It is written to be read, not to be survived.

The short version

We collect two things: what you type into a form, and analytics about how the site is used, including Microsoft Clarity, which records mouse movement, clicks and scrolling to show us where the site confuses people. We do not sell your information. We do not take payments on this site, and we never ask for a social security number, a government ID, or a card number. If you want your data gone, email privacy@zossoz.com and ask us to delete it.

What you give us

The site has two forms. Both are optional; you can read every page without submitting either.

Free Website Teardown. Your website address, your name, and your email address. Three fields. We do not ask for a phone number.

Contact form. Your name, your email address, your message, and optionally your business name.

That is the entire list. Each field is capped at 2,000 characters and stored with the time you submitted it. If you email or call us directly, we hold whatever you chose to put in that message.

None of this is a legal requirement. You can read every page of this site without giving us anything. But we cannot send you a teardown or reply to a message without a way to reach you.

What we collect automatically

Basic traffic counting. We use Umami, a cookieless analytics tool, to count page views, referring sites, and rough country and device type. It sets no cookies, stores no persistent identifier for you, and cannot follow you to another site. Because it does not store anything on your device or identify you, it runs for everyone rather than waiting behind the banner. It also respects your browser's Do Not Track setting if you have one on.

Google Analytics. We use Google Analytics 4 to count visits and understand which pages people actually read. It records approximate location derived from IP address, device and browser type, referring site, and the pages you view. Unlike Umami, it uses cookies.

Session analytics. We use Microsoft Clarity, which records how people interact with pages: mouse movement, clicks, scrolling, and how far down a page they get. These recordings are used to find broken or confusing parts of the site. This is more than page counting, so we do not run it on anyone who has not agreed to it, in any country.

Server logs. Our host, Vercel, keeps standard request logs including IP address, user agent and request time. These are used for security and debugging.

What we do not collect

We are specific about this because generic privacy policies routinely claim otherwise:

• No payment or card details. No transaction happens on this site.
• No social security numbers, passport numbers, driver's licenses or government-issued ID.
• No accounts, logins or passwords. There is nothing to sign into.
• No precise device geolocation.
• No background checks, credit checks or application data of any kind.

The fonts on this site are served from our own domain rather than loaded from Google at page view, so using the site does not send your IP address to a font provider.

Why we use it

To answer you when you contact us. To produce the teardown you asked for. To keep records of who we have worked with and talked to. To understand which pages work and fix the ones that do not. To keep the site secure and functioning.

If you write to us, we write back. We do not add you to a marketing list off the back of a form, and we will not start sending you campaigns because you asked for a teardown. If that ever changes we will ask you first, separately, and you will be able to say no without losing anything.

We do not use your information to make automated decisions that produce legal or similarly significant effects.

Who else sees it

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do use service providers who process it on our behalf:

Provider	What it handles	Needs your consent
Formaloo	Stores form submissions; our system of record for enquiries	No
Resend	Delivers form submissions to us by email	No
Umami	Cookieless page-view counting	No; sets no cookies
Google Analytics 4	Site analytics	In the EEA, UK and Switzerland
Microsoft Clarity	Session recording and heatmaps	Yes, everywhere
Vercel	Hosting, content delivery and server logs	No

Each of these processes data under its own terms and privacy policy. Submissions may also pass through an automation service we run (n8n) on their way to us.

We may also disclose information where the law requires it, to enforce our terms, to protect against fraud or abuse, or as part of a merger, acquisition or sale of the business.

Cookies and tracking

Google Analytics and Microsoft Clarity set cookies to recognize returning visitors and stitch a session together. There is no advertising network on this site.

Session recording never starts without your permission, wherever you are. Clarity is not loaded for anyone until they say yes. There is no version of visiting this site where we quietly record how you move around it.

If you are visiting from the EEA, the UK or Switzerland, neither one loads until you say yes. You will see a short banner asking. Until you answer, nothing is injected, and any tracking cookies left over from a previous visit are cleared.

Everywhere else, Google Analytics runs by default while Clarity waits for an answer. Saying no turns off both.

Either way you can change your mind at any time using the Cookie settings control in the footer of every page.

Beyond that, most browsers let you block or clear cookies in settings, and Google offers a browser opt-out at https://tools.google.com/dlpage/gaoptout. Microsoft states that Clarity respects the Global Privacy Control signal; that is Microsoft's commitment about its own product rather than something this site enforces in its own code. Blocking cookies will not break anything here.

How long we keep it

We keep information only as long as there is a reason to. In practice that means:

• Form submissions and correspondence are kept while we are talking, and afterwards for as long as we may reasonably need the record of it, for example to pick up a conversation you started, to honor work we quoted, or to meet a tax or accounting obligation.
• Analytics data expires automatically on the retention window set in each product, and we do not extend it past 14 months.
• Server logs are short-lived and kept only for security and debugging.

When none of those reasons applies any more, we delete it. You do not have to wait for that: email privacy@zossoz.com and ask us to delete your information, and we will.

Your rights

Wherever you live, you can email privacy@zossoz.com and ask us to show you what we hold, correct it, or delete it. We will not treat you differently for asking.

Some of the rights below only bind companies above a certain size, and a studio this small may sit under those thresholds. We are not going to make you work that out. We apply them to everyone who asks, whether or not the law compels us to.

If you are in the EEA or the UK, you have the right to:

• Access the data we hold about you
• Correct anything inaccurate or incomplete
• Erase it
• Restrict or object to how we process it
• Receive it in a portable, machine-readable format
• Withdraw consent at any time, where our processing relies on consent

Our legal bases for each activity are:

• Answering you and doing the work: performance of a contract, or steps taken at your request before entering one.
• Analytics, where we ask first: your consent. In the EEA, UK and Switzerland nothing loads until you give it, and withdrawing it takes one click in the footer.
• Analytics elsewhere, plus server logs and security: our legitimate interests in running, securing and improving this site.
• Anything we are legally required to keep: compliance with a legal obligation.

You also have the right to complain to your national data protection authority.

If you are in California, the CCPA and CPRA give you the right to know what personal information we have collected, used and disclosed in the past 12 months; the right to correct inaccurate information; the right to delete; the right to a portable copy; and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined. You may use an authorized agent to make a request, and we will not discriminate against you for exercising any of these rights.

If you are in Colorado, Connecticut, Oregon, Texas, Utah or Virginia, you have comparable rights to access, correct (except in Utah), delete, obtain a portable copy, and opt out of targeted advertising. If we decline a request, you may appeal by replying to our response, and we will reconsider it.

We may need to confirm your identity before acting on a request, which usually means replying from the email address you originally contacted us from. We aim to respond within 30 days.

International transfers

We are based in Miami, Florida. Formaloo, which stores form submissions, hosts in the EU by default. Our other providers process data in the United States, so if you contact us from the EEA or the UK your information is transferred there.

Where a provider is not covered by an adequacy decision, that transfer is made under the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum for UK transfers. Some providers additionally self-certify under the EU-U.S. Data Privacy Framework and its UK Extension. Email privacy@zossoz.com and we will tell you which mechanism applies to a given provider and send you a copy of it.

Security

The site is served over HTTPS and we use reasonable technical and organizational measures to protect what we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

This site is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has sent us personal information, email privacy@zossoz.com and we will delete it.

Changes

We will update this policy when what we do changes, and the date at the top will always tell you when it last happened. Material changes will be noted on this page.

Contact

Zossoz, Inc Miami, Florida privacy@zossoz.com (305) 788-2174