Legal

Privacy Policy

Last updated: August 14, 2026

Overview

This Privacy Policy explains how RZTZRON handles information in connection with www.rztzron.com and the RZTZRON sign-in service used by our first-party products. You can browse the public website without signing in. Individual RZTZRON apps or services may publish additional privacy notices when their data practices differ.

Information we process

When you visit the website or sign-in service, hosting and security infrastructure may process technical request data such as IP address, browser or device information, requested URL, timestamp, and security signals. If you sign in, we also process authorization and session metadata, an internal client-specific user identifier, a masked account label, provider credential references, timestamps, and security or rate-limit records. If you email us, we receive the address and information you choose to include in your message.

Google sign-in

If you choose Google sign-in, Google authenticates you and may provide RZTZRON with a stable Google account identifier, a verified email address, and protocol security claims needed to complete the sign-in. RZTZRON uses the stable provider identifier for authentication and stores a pseudonymous credential reference and a masked account label for account display. The full Google email address is not used as the primary account identifier and is not stored as the authentication database account label.

Email verification codes

If you choose Email OTP sign-in, we process the email address you submit so that a one-time verification code can be delivered. The address is normalized for authentication, converted to a keyed lookup value for the authentication database, and represented by a masked account label. RZTZRON uses Resend to deliver the verification email, so Resend receives the destination email address and the transactional message needed to provide that service.

Security and abuse prevention

Authentication uses short-lived authorization transactions, one-time codes, cryptographic digests, encrypted temporary values, rate limits, and security logs to prevent unauthorized access and abuse. Email OTP requests use Cloudflare Turnstile, which may process browser, device, network, and interaction signals to distinguish legitimate users from automated or malicious traffic.

How we use information

We use information to provide and secure the website and sign-in service, authenticate users, maintain sessions across RZTZRON first-party products, deliver verification messages, show a masked account identity, prevent abuse, troubleshoot failures, respond to requests, and meet legal obligations. Where applicable law requires a legal basis, processing may rely on steps taken at your request, performance of the service, our legitimate interests in operating and securing it, legal obligations, or consent where consent is specifically requested.

Cookies, analytics, and advertising

RZTZRON uses strictly necessary authentication cookies when you sign in. A short-lived transaction cookie protects the login flow, a central RZTZRON sign-in cookie may remain for up to 30 days, and an individual App session may remain for up to 7 days subject to an idle timeout. These authentication cookies are Secure and HttpOnly where applicable. The current website does not intentionally run behavioral analytics or load advertising-serving scripts, and it does not set non-essential cookies for those purposes.

Service providers

RZTZRON uses Cloudflare for hosting, delivery, security infrastructure, database services, and Turnstile; Google when you choose Google sign-in; and Resend when you choose Email OTP. These providers may process information necessary to provide their respective services, and their processing is also governed by their own privacy and data-protection terms.

Retention

Authorization requests, Google authentication transactions, and Email OTP challenges are designed to expire after short periods; one-time authorization codes expire after about one minute. Current central sign-in sessions have an absolute lifetime of up to 30 days, while individual App sessions have an absolute lifetime of up to 7 days and an idle timeout. Expired authentication records, security records, and technical logs may be retained for security, abuse prevention, troubleshooting, audit, backup, and legal purposes for longer than the active session itself. Email correspondence is kept only as long as reasonably necessary for the request and related business or legal needs.

International processing

RZTZRON and its service providers may process information in more than one country or region. Where applicable law requires safeguards for international transfers of personal information, we use the safeguards available for the relevant service and processing relationship.

Your privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, portability of, or objection to certain processing of your personal information, and you may have the right to complain to a data-protection authority. To make a privacy request, contact RZTZRON using the email address on the Contact page. Some information may need to be retained where required for security, fraud prevention, dispute resolution, or legal obligations.

Children

The website and unified sign-in service are intended for a general audience and are not directed to children. If a RZTZRON product is directed to children or we knowingly process children's personal information, we will provide additional notices and safeguards as required by applicable law.

Changes to this policy

We may update this Privacy Policy as the website, authentication service, products, service providers, or legal requirements change. The date at the top of this page identifies the current version.

Contact

RZTZRON operates this website and its unified sign-in service. Privacy questions and requests can be sent to the public email address shown on the Contact page.