Zero-Telemetry & Zero-Knowledge Architecture

Privacy Policy

Effective Date: October 12, 2026 • Version 2.4 • Zevbuild Studio (Goa, India)

At Zevbuild Studio, privacy is not a compliance checklist—it is our core engineering foundation. We design zero-knowledge cryptographic vaults, offline-first utilities, and probabilistic analytics where your data never leaves your personal device.

Zero-Knowledge Security Guarantee

Zevbuild operates on an absolute zero-custody model. For all client-side cryptographic tools (including ZevSafe and offline utilities), your keys, passwords, and unencrypted files are never transmitted to our servers, never stored in databases, and mathematically inaccessible to Zevbuild engineers.

01. Information We Do NOT Collect

Unlike traditional software companies, Zevbuild deliberately does not implement user tracking, identity profiling, or behavioral monitoring. We do not collect:

  • No Personal Identifiers: No names, email addresses, phone numbers, or account credentials are required to use our public web tools.
  • No File Uploads or Content Logging: Files processed through tools (e.g., text encoders, QR generators, data parsers) execute entirely in client-side WebAssembly and JavaScript in your browser sandbox.
  • No IP Address Logging: We do not log, associate, or store your IP address with your interactions.
  • No Third-Party Ad Trackers: No Google AdSense, Meta Pixel, tracking pixels, or cross-site fingerprinting scripts.

02. Cryptographic Zero-Knowledge Architecture

For software designed with security features (such as ZevSafe):

  • Client-Side Primitives: Cryptography runs using native W3C Web Cryptography API standards (AES-256-GCM and PBKDF2-SHA512 key derivation with 600,000+ iterations).
  • Zero Key Custody: Encryption keys are derived strictly in local memory and are never persisted across network requests.
  • Subpoena Immunity: Because Zevbuild holds no encryption keys, user databases, or ciphertexts, we are technically and mathematically incapable of decrypting your data or providing user records to third parties.

03. Privacy-Preserving Web Analytics

To maintain server availability, optimize global routing, and detect denial-of-service traffic, our static pages embed Cloudflare Web Analytics. We selected Cloudflare specifically because of its industry-leading privacy commitments:

100% Cookieless

Does not write or read cookies, local storage tracking keys, or persistent tokens on your machine.

No Personal Profiling

Does not collect IP addresses, user identities, search histories, or cross-site tracking profiles.

Aggregate Metrics Only

Provides only broad aggregate statistics (page views, country of origin, and referrer domain).

GDPR & CCPA Compliant

Respects Do Not Track (DNT) and complies with European and international privacy directives.

04. Local Storage & Progressive Web App (PWA) Caching

Our applications may utilize standard browser caching mechanisms (such as localStorage, IndexedDB, and Service Workers) exclusively to:

  • Remember your UI theme preference (Light or Dark mode).
  • Cache static assets (HTML/CSS/JS) so tools function seamlessly when offline.
  • Retain local settings for tools (e.g. customized UPI links, bookmark states) strictly on your hardware.

You can clear this local data at any time through your browser's "Clear Site Data" or "Clear Cookies & Cache" settings.

05. Third-Party Links & External Platforms

Our website and tools may include direct hyperlinks to third-party services:

  • GitHub: For open-source code repositories, issue tracking, and actions workflows.
  • Cloudflare Pages: Our static hosting edge network providing global SSL/TLS and DDoS mitigation.
  • UPI / Payment Links: If you choose to make a voluntary donation, you are redirected to your device's native banking application (e.g., Google Pay, PhonePe, Paytm). Zevbuild never processes, views, or records your financial credentials.

We encourage you to review the privacy notices of external platforms, as their data handling policies are outside of Zevbuild Studio's control.

06. Global Privacy Rights

Under global privacy laws (including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and India’s Digital Personal Data Protection Act (DPDPA)):

Because Zevbuild does not collect, record, or retain personal data, there is no centralized database to search, export, or erase. You inherently hold absolute sovereignty over your data, because it never leaves your machine.

07. Contact & Engineering Security Inquiries

If you have questions regarding this Privacy Policy, our cryptographic architecture, or security disclosures, please contact:

Zevbuild Studio
Open Source & Cryptographic Engineering Group • Goa, India
zevbuildstudio@gmail.com