The short version
- ZoneBlade doesn't keep a record of the sites you visit.
- We count how much data each device uses, by country, to run allowances. Counts only.
- You don't need an account. No ads, and we don't sell data. This website counts visits only if you allow it.
What we keep
| What | Where | How long | Why |
|---|---|---|---|
| Your email address (only if you sign in) | Our database | Until you ask us to delete your account | To sign you in and keep your plan on all your devices |
| Your Google account number (only if you sign in with Google) | Our database | Until you ask us to delete your account | To recognise you next time |
| If you buy Premium: your subscription (monthly or yearly, its status and renewal date) and our payment provider's customer number for you | Our database | Until you delete your account | To give you Premium and show it on your account page |
| Each device: a name like "Chrome on macOS", when it was added and last used | Our database | Until you delete your account. A signed-out device: 30 days. A device never signed in: until it's gone unused for about 13 months | So you can see your devices and sign them out |
| Sign-in links, website sessions and device tokens | Our database, scrambled (one-way hashes), never in readable form | Sign-in links work for 15 minutes and are deleted after an hour; website sessions last 30 days and are deleted when they end; device tokens 90 days | To keep you signed in |
| How much data each device used: bytes per country, per hour, day and month | Our servers | Hourly counts 40 days; daily and monthly counts about 13 months | To run Premium's monthly allowance and show you your use |
| Which server each tab's country goes through: a random tab number and the country, no sites | Our servers' memory | Under an hour | To keep each tab on a server that sites place in the country you chose |
| Your IP address | Rate-limit counters | Up to a day | To stop floods of sign-ups and sign-in emails |
| How much data Free uses from each internet address (IPv6: its first half) and each network: bytes by day and by month | Our servers | Daily counts 2 days; monthly counts 35 days | To keep Free fair: very heavy use from one connection is slowed, then paused |
| Which of our servers each Free browser used in the last minute or two (its ID and the country) | Our servers | Two minutes | So one browser can't use every server at once |
| Only if you allow analytics: visits to this website (the pages you open here, roughly where you are, your browser and device) | Our analytics provider | 14 months at most | To see which pages of this website help people. Never what you browse with ZoneBlade |
| The networks an account's browsers connect from | Our servers | Two hours | To notice an account shared or resold across many places |
| Signs of abuse: the browser's ID, its account, its address, what we noticed (for example very many different sites in an hour, or many refused connections) and a number. Never which sites | Our database | 90 days | To stop abuse, and to check each case by hand |
| Suspensions: what was suspended (a browser, an account, an address or a network), why, by whom, and when | Our database | While in force, and two years after | To keep abuse off ZoneBlade, and to answer anyone who asks why |
| Totals across everyone, a day at a time: active browsers, traffic, revenue and costs | Our database | As long as we run ZoneBlade | To run ZoneBlade without losing money (no one person is in them) |
| Each request to this website and our API: your IP address, the address requested, and your browser's name | Our hosting's web server log | A log of fixed size that keeps only the latest requests: older ones are overwritten as new ones arrive | Security, and finding faults |
| Each request's page or API path, result and timing, without your IP address | Our monitoring | 14 days | To spot errors and slowness |
Your settings (countries, mode, site rules, and that you agreed to these terms) stay in your browser. They never reach us.
What we don't keep
- The sites you visit, the addresses of pages, or your browsing history.
- What our IP page (zoneblade.com/ip) shows you. It shows your address and country, and saves neither.
- The content of pages. Secure (https) pages are encrypted between your browser and the site; we can't read them.
- Anything that ties a site to you in our logs. Our error logs record error codes, never addresses.
- What your browser's connection looks like (its secure-connection handshake) and how many different sites it reaches. They're looked at as you browse, to tell browsers from scripts and spot abuse, and never stored: only a sign of abuse, as above, is kept.
- Your card number. Our payment provider takes it when you pay; we never see it.
Like any VPN, ZoneBlade has to know which site to connect you to (its name and port) while the connection is open. It isn't written down.
Who else sees your traffic
- The network you're on (the Wi-Fi, your internet provider) sees that you use ZoneBlade and which country, not which sites: your connection to us is encrypted.
- Sites you visit see an address in the country you chose, not yours.
- The servers you browse through, ours and our network provider's, carry that traffic. They see which sites are connected to, and the encrypted traffic, on ZoneBlade's account. They don't know who you are.
- Our email provider delivers sign-in links.
- Our security provider protects this website and our API from attacks, so it sees each request to them: your IP address and the address requested. It also runs the quick check that you're a person when you set ZoneBlade up, which sees your browser and IP address. It doesn't carry your browsing.
- Our analytics provider, only if you allow analytics, counts visits to this website: which pages you open here, roughly where you are, and your browser and device. It never sees what you browse with ZoneBlade.
- Our payment provider takes your card and billing address when you buy Premium, and keeps payment records as the law requires. It sees your email address and what you bought, never which sites you visit.
Who we use
- Our hosting provider, in the EU, hosts this website, our API and our database.
- Our cloud provider runs servers that carry browsing, and sends our emails.
- Our network provider runs servers that carry browsing too.
- Our security provider protects this website and our API, and runs the human check.
- Our payment provider takes payments for Premium.
- Our analytics provider, in the US, counts visits to this website if you allow it.
Some of them handle data outside the UK. Where they do, they protect it with the safeguards UK law requires.
Cookies
When you sign in, this website sets zb_session, which keeps you signed in for up to 30 days. If you choose a country for prices, your browser remembers it.
Analytics cookies are set only if you allow them: _ga and _ga_GBDMVTKM2M, which let our analytics provider tell one visit from the next, for up to 2 years. Your answer stays in your browser. Change it any time with Cookie settings at the bottom of every page; saying no removes those cookies. No advertising cookies, ever.
Our payment provider's checkout and billing pages set its own cookies, which it uses to prevent fraud.
The browser extension
To send your browsing through the country you choose, the extension handles every request your browser makes. It uses them only for that: it doesn't read pages or collect your history, and apart from carrying your traffic as described above, it sends nothing about the sites you visit. When one site is open in tabs of two countries, it keeps that site's cookies for each country apart, in your browser; they never reach us.
Our use of information the extension handles follows the Chrome Web Store User Data Policy, including its Limited Use requirements: we use it only to provide ZoneBlade, never sell it, never use it for advertising or credit decisions, and no one reads it.
Your choices
- Use ZoneBlade without an account.
- Cancel Premium any time on your account page.
- Sign a device out from the extension or your account page. It stops working at once.
- Delete your account and everything above from your account page, or email privacy@zoneblade.com. Only suspension records stay, for as long as the table says, so abuse can't come back as a new account.
Who we are
ZoneBlade is run by Scoritz Limited, registered in England, company number 03426573, VAT number 699 3624 73. We are the data controller for everything on this page.
Scoritz LimitedThe Loft Unit 11Hunthay Business ParkAxminsterDevonEX13 5RJPrivacy questions: privacy@zoneblade.com.