1. Who we are
This Privacy Policy explains how GoZen (personal project of Kimetz Egiazabal) (“we”, “us”) handles personal data when you use the marketing website at go-zen.app (the “Site”) and related waitlist features.
- Public name / controller: GoZen (personal project of Kimetz Egiazabal)
- Location: Hondarribia, Gipuzkoa, Spain
- Legal form: not a company; no CIF
- Privacy contact: info@go-zen.app
If you use the GoZen mobile app, that product may process data differently (for example, game progress stored on your device). This Policy covers the Site first. App-specific processing will be described in an in-app or store Privacy Policy when the app is published; until then, assume the app is designed for local-first / offline play where described on the Site and does not require an account for core play features described on the Site.
2. What this Site does today
The Site is a marketing / coming-soon presence. The main personal-data activity we anticipate is:
- Collecting an email address if you join the waitlist (and any optional fields we explicitly show on that form).
We do not, on the current Site, intend to run:
- non-essential analytics cookies,
- advertising trackers,
- social “pixel” embeds, or
- third-party behavioral profiling.
If that changes, we will update this Policy and, where required, obtain consent or provide opt-out controls.
3. Personal data we collect
3.1 Data you give us
| Data | When | Why |
|---|---|---|
| Email address | Waitlist / contact forms | To email you when Android is ready and, if you opt in, occasional product updates, and to reply if you contact us |
| Name or other optional fields | Only if shown on a form | To personalize replies or waitlist management |
| Message contents | Contact / support forms (if enabled) | To respond to your request |
3.2 Data collected automatically (technical)
When you visit the Site, our hosting or server may automatically process limited technical data such as:
- IP address,
- date/time of request,
- browser / device type,
- pages requested,
- basic security / error logs.
This is typically necessary to operate, secure, and debug the Site. Retention of raw server / security logs is limited to what is needed for security and operations: 90 days, unless a longer period is needed to investigate a security incident.
3.3 Cookies and similar technologies
- Essential: cookies or storage strictly necessary for security, load balancing, or remembering cookie preference (if we add a banner).
- Non-essential (analytics, marketing): not planned for the current Site. If introduced later, we will describe them here and request consent where required by law.
You can control cookies through your browser settings. Blocking essential cookies may break parts of the Site.
4. Purposes and legal bases (GDPR / EEA / UK)
If EU/UK GDPR (or similar laws) apply, we rely on these bases:
| Purpose | Legal basis (typical) |
|---|---|
| Operate and secure the Site | Legitimate interests (Art. 6(1)(f)): keeping the Site safe and working |
| Process waitlist signup and email you when Android is ready, plus occasional product updates if you opt in | Consent (Art. 6(1)(a)) and/or steps at your request prior to a contract (Art. 6(1)(b)), depending on how the form is framed |
| Reply to messages you send us | Legitimate interests or steps prior to contract |
| Comply with law (e.g. respond to lawful requests) | Legal obligation (Art. 6(1)(c)) |
You may withdraw consent at any time (for example, by using the unsubscribe link in an email, or writing to info@go-zen.app). Withdrawal does not affect processing already done lawfully.
We do not use waitlist emails for unrelated third-party advertising without a lawful basis and clear notice.
5. Who we share data with
We do not sell your personal data.
We may share data with:
- Hosting / infrastructure: IONOS (IONOS Cloud S.L.U. / related IONOS entities), which hosts go-zen.app. IONOS acts as a processor under a data processing agreement (Art. 28 GDPR) available via IONOS account / terms.
- Email delivery for waitlist confirmation and launch notice: also IONOS (IONOS Cloud S.L.U.), through our own mailbox noreply@go-zen.app hosted by IONOS. This is covered by the same IONOS data processing agreement (Art. 28 GDPR). We do not use a separate email marketing provider.
- Professional advisers or authorities when legally required.
Processors act under contract and only on our instructions.
International transfers (outside EEA/UK): we do not expect transfers of your data outside the EEA for this processing. If an IONOS subprocessor ever processes data outside the EEA, the safeguards under GDPR Chapter V are those stated in the IONOS data processing agreement and its subprocessors list. We do not invent a separate transfer ID here; ask info@go-zen.app if you need a copy or summary of the safeguards we rely on.
6. How long we keep data
| Data | Retention |
|---|---|
| Waitlist email | Until you unsubscribe or ask for deletion, or until launch or 24 months, whichever comes first; then we delete or anonymize remaining addresses (or only keep them for a new purpose with fresh consent) |
| Contact messages | Up to 24 months after the last reply |
| Server / security logs | 90 days, unless needed longer for an incident |
7. Security
We use reasonable technical and organizational measures appropriate to a small marketing Site (HTTPS, access controls, least privilege, limited plugins). No method of transmission or storage is 100% secure.
8. Children
The Site is not directed at children under 16 (or the digital-consent age in your country). We do not knowingly collect children’s data. If you believe we have, contact info@go-zen.app and we will delete it.
9. Your rights
Depending on your location (especially EEA/UK), you may have rights to:
- access,
- rectification,
- erasure,
- restriction,
- portability,
- object to processing based on legitimate interests,
- withdraw consent,
- lodge a complaint with a supervisory authority (in Spain: Agencia Española de Protección de Datos (AEPD) – https://www.aepd.es – or your local authority).
To exercise rights, email info@go-zen.app with enough detail for us to verify and fulfill the request. We aim to respond within one month as required by GDPR.
10. GoZen mobile app (high-level, until the app policy ships)
Product intent (marketing promise, subject to the published app policy):
- Calm premium Go (Weiqi / Baduk) for beginners,
- Local-first play and learning features that do not require an account for core use as described on the Site,
- Daily tsumego / Learn content stored primarily on device where feasible,
- No claim on this Site that we sell rankings, chats, or always-on cloud AI identity features day one.
When the Android (or other) app launches, installers will see store listings and an app Privacy Policy that controls in-app data. If the app later adds accounts, cloud sync, crash reporting, or analytics, that policy will say so explicitly.
11. Changes
We may update this Policy. For material changes we will post the new version on this page and update the date. Where required, we will ask for fresh consent.
Last updated: 6 October 2026.
12. Contact
Questions about privacy: info@go-zen.app Postal / location: Hondarribia, Gipuzkoa, Spain Controller: GoZen (personal project of Kimetz Egiazabal)