Privacy Policy

• Account data: your display name, email address, date of birth (used only to confirm you meet the minimum age), and a securely hashed password.
• Usage data: conversations, missions you start, reports generated, and Z-Coins activity.
• Technical data: IP address, browser/user-agent, and audit logs for security.
• If you sign in with Google or GitHub, we receive your basic profile (id, email, name) from that provider only.

• To operate your account, authenticate you, and provide the service.
• To enforce the minimum age requirement and prevent abuse.
• To maintain security, detect fraud, and keep audit trails.
• We do not sell your personal data.

Passwords are stored only as salted Argon2id hashes — never in plain text. Sessions use rotating refresh tokens. Despite reasonable safeguards, no system is perfectly secure; you use the platform at your own risk.

Chat and analysis are processed by a configured AI provider. Message content needed to produce a response is sent to that provider for processing. Do not submit secrets or sensitive personal data you don't want processed.

You may request deletion of your account. On deletion, your login access and display name are removed and your email is released so it can be re-registered. Some records may be retained where required for security, legal, or audit purposes.

Zero-Recon is a tool operated entirely by you. Any target you choose to scan or analyze, and any consequence of doing so, is your sole responsibility. See our Terms of Use for the full authorized-use terms.

Questions about this policy? Reach us via the contact page.