Zunavek

Data handling

Privacy Policy

Last updated: October 22, 2026

At Zunavek ("we," "us," or "our"), privacy is at the core of everything we build. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information when you use our website at zunavek.com (the "Service").

1. Data We Collect

1.1 Privacy Scan Data

When you run a privacy scan, we process technical data including:

  • IP address — used for geolocation, ASN lookup, and risk assessment
  • HTTP headers — User-Agent, Accept-Language, and other request headers
  • TLS fingerprint (JA4) — derived from your browser's TLS handshake
  • TCP/IP fingerprint — derived from network packet characteristics
  • Browser fingerprint signals — canvas, WebGL, audio, fonts, screen, and other browser signals
  • Leak test results — DNS resolver IPs and WebRTC candidate IPs

Results are streamed to your browser. The scan service also stores scan records in its database, including your IP address, a session identifier, location and network data, browser and TLS fingerprint signals, leak-test observations, port-scan results, diagnostic scores, User-Agent, and scan time. These records can contain identifiers and are not anonymous aggregates.

1.2 Analytics Data

We use Google Analytics to measure site usage. It can use cookies and browser identifiers to collect:

  • Pages visited and referral sources
  • Browser, device, and screen information
  • Approximate location and usage events

See Google's Privacy Policy for how Google processes data. Browser tracking protection can limit analytics collection.

Our server logs may include request IP addresses, User-Agent, and affiliate-link click information for operation and usage analysis.

2. How We Use Your Data

  • Provide scan results — process your technical data to generate privacy scores and recommendations
  • Service improvement — usage analytics to understand usage patterns and improve the platform

3. Data We Do NOT Collect

  • We do not sell, rent, or share your personal data with advertisers
  • We do not build advertising profiles from scan data
  • We do not collect passwords as part of a privacy scan

4. Third-Party Services

We use the following third-party services:

  • Hosting and CDN services — deliver the website and process request information such as IP addresses and HTTP headers. Cloudflare provides CDN services.
  • Diagnostic services — leak tests contact DNS and STUN infrastructure, which can observe your connection IP and test requests. Domain and network tools query public DNS, registration, routing, and certificate services; these may receive the domain or IP address you submit.

5. Data Retention

  • Usage and operational logs — retention depends on the logging service and operational configuration; we do not promise an automatic 30-day deletion period.
  • Analytics — handled according to our Google Analytics configuration and Google's policies. Analytics may contain browser identifiers rather than only anonymous aggregates.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access — request a copy of the data we hold about you
  • Deletion — request deletion of your personal data
  • Correction — request correction of inaccurate data
  • Portability — receive your data in a machine-readable format
  • Objection — object to processing of your data for specific purposes

To exercise any of these rights, contact us at [email protected].

7. Security

We implement industry-standard security measures to protect your data, including:

  • HTTPS and WSS encryption for website and API traffic; DNS and STUN diagnostic probes use their own protocols
  • Rate limiting and abuse detection
  • Dependency updates and review of reported security issues
  • Infrastructure hardening with minimal attack surface

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.

9. International Transfers

Hosting, CDN, analytics, and diagnostic providers may process data in countries other than your own. Review the linked provider policies before using the Service if data location is important to you.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. We encourage you to review this page periodically.

11. Contact Us

For privacy-related questions or concerns, contact us at [email protected].