Privacy & Cookie Policy
Last updated: August 2026. This page explains what personal data Zoommy collects, how we use it, the cookies we set, and your rights under the GDPR. If anything is unclear, contact us at sharpfuryz@gmail.com .
Who we are
Zoommy ("we") operates the Zoommy application and website (zoommyapp.com), which helps you discover free stock photos. We are the data controller for the personal data described below.
What data we collect
- Account data: your email address and password (stored hashed) when you create an account or activate a licence token.
- Usage data: your saved favorites, collections, and the devices linked to your account, so the app works across your devices.
- Payment data: purchases are processed by our payment provider (2Checkout). We receive your email and order reference, but not your card details.
- Technical data: standard server logs (IP address, request time) kept short-term for security and debugging.
How we use it
- To provide the service — sign-in, syncing favorites, and licence validation.
- To send transactional emails (account, licence, password reset).
- To keep the service secure (rate-limiting and abuse prevention).
Legal basis (GDPR Art. 6): performance of our contract with you (account & licence), and our legitimate interest in keeping the service secure.
Cookies
We keep cookies to a minimum:
| Cookie | Purpose | Type |
|---|---|---|
| _zoommie_session | Keeps you signed in during your visit. | Essential |
| cookie_consent | Remembers your cookie choice on this banner. | Essential |
Essential cookies are required for the site to function and do not need consent. If we add optional analytics or social-sharing cookies, they will load only after you accept them in the cookie banner.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- erase your account and data ("right to be forgotten");
- export your data in a portable format;
- object to or restrict processing;
- lodge a complaint with your local data-protection authority.
To exercise any of these, email sharpfuryz@gmail.com and we will respond within 30 days.
Data retention & sharing
We keep account data while your account is active and delete it on request. We do not sell your personal data. We share it only with processors needed to run the service (payment provider, email/hosting) under appropriate agreements.
Changes
We may update this policy; material changes will be noted here with a new "last updated" date.