Privacy & Cookie Policy
Last updated: 14 July 2026
This policy explains how Zaos (the website at zaos.global, operated by Zaos Entertainment S.A, 50th Street and Corner of Elvira, Tower Financial Center, 35th Floor, Suite L, Panama City, Panama — the data controller, the “we”) handles cookies and personal data, and the rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR and the ePrivacy Directive. This site is currently a “coming soon” teaser page — it does not offer accounts, login or payments yet. The only personal data you can choose to give us is your email address, if you sign up for early access (see section 2).
1. What we collect
Three categories of data may be processed:
- Strictly necessary / hosting & security data. Our host and CDN, Cloudflare, processes standard request metadata (e.g. IP address, browser type, timestamps) to deliver the page securely and protect against abuse. When you submit the signup form, Cloudflare Turnstile runs a privacy-friendly human-verification check (no advertising or cross-site tracking). This is required for the site to work and to keep it safe.
- Early-access signup data (only if you submit it). If you enter your email in the signup form and tick the consent box, we store your email address together with the time of signup, your browser language, a one-way hashed form of your IP address (we never keep the raw IP), and a coarse country code — so we can send you your Alpha/Beta invite and prevent abuse. See section 2.
- Analytics data (only with your consent). If you accept cookies, Google Tag Manager loads Google Analytics, which sets cookies to measure anonymous, aggregated traffic (pages viewed, approximate region, device type) so we can understand interest and improve Zaos.
2. Early-access signups (your email)
The signup form is entirely optional. If you use it, we process your email address on the basis of your consent (GDPR Art. 6(1)(a)), which you give by ticking the consent box before submitting.
- Purpose. We use your email only to invite you to the closed Alpha and Beta and to send occasional news about the Zaos launch. We do not sell, rent or share it for third-party marketing.
- Where it is stored. In a Cloudflare D1 database. Your email is not shown publicly.
- Retention. We keep your email until you unsubscribe/ask us to erase it, or until the early-access programme ends and we no longer need it — whichever comes first.
- Withdrawing consent. You can withdraw at any time by emailing privacy@zaos.global (an unsubscribe link will also be in every email once invites go out). Withdrawing does not affect processing that happened before.
3. Consent & Google Consent Mode
Before any non-essential tag runs, consent is set to denied by default using Google Consent Mode v2. Nothing that stores analytics or advertising cookies fires until you choose Accept in the cookie banner. If you choose Decline, those tags stay off. You can change or withdraw your choice at any time via the “Cookie settings” link in the site footer — withdrawing is as easy as giving consent.
4. Cookies & storage we use
| Name | Type | Purpose | Set when | Retention |
|---|---|---|---|---|
zaos_consent | Local storage (necessary) | Remembers your cookie choice | Always | Until you clear it |
_ga | Analytics cookie | Google Analytics — distinguishes visitors | Only after you Accept | Up to 2 years |
_ga_<id> | Analytics cookie | Google Analytics — session state | Only after you Accept | Up to 2 years |
The consent choice is stored locally in your browser and is not personal data sent to us.
5. Legal basis
- Consent (GDPR Art. 6(1)(a)) — for the early-access email signup, for analytics cookies, and for any future marketing.
- Legitimate interests / necessity (Art. 6(1)(f)) — for security, abuse-prevention (including Turnstile) and delivering the site.
6. Third parties & international transfers
We rely on the following processors, which may transfer data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses / EU–US Data Privacy Framework):
- Cloudflare, Inc. — hosting, CDN, security, Turnstile human-verification, and the D1 database that stores early-access emails. See the Cloudflare Privacy Policy.
- Google LLC — Tag Manager & Analytics (only with consent). See Google’s Privacy Policy.
We do not sell your personal data.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. Where processing is based on consent (such as the early-access email list), you may withdraw it at any time without affecting prior processing. You also have the right to lodge a complaint with your local data protection authority.
8. Contact
For any privacy request or question, contact us at privacy@zaos.global, or by post at:
Zaos Entertainment S.A
50th Street and Corner of Elvira
Tower Financial Center, 35th Floor, Suite L
Panama City
Panama