Privacy notice.
Updated 10 November 2026 · Version 1.2
Who is responsible and contact
zzou is responsible for the data it uses to operate this storefront and provide product support. Use our contact form for privacy questions, access requests, correction or deletion requests. We may ask for proportionate information to verify a request; do not send identity documents unless an appropriate secure process has been agreed.
Browsing, cart and essential storage
The cart stores product identifiers in your browser’s localStorage (zzou-cart-v1) until you remove them or clear browser data. This contains no name, email or card details. Category and search choices appear in the page URL. After a checkout session is created, an essential signed, HttpOnly session cookie links this browser to that checkout for up to 24 hours so the server can verify payment status. Clearing storage may remove cart or order lookup access but does not cancel a paid purchase. We do not add advertising trackers or analytics scripts.
Orders and payments
When payment is enabled, Dodo Payments processes hosted checkout, payment and receipts. After server-verified payment, zzou provides protected downloads from Cloudflare R2 and sends delivery emails through Resend. These providers receive only the file requests, order information and recipient details needed for their services. It receives the customer and billing details you enter on its secure page, purchased product information and transaction data. zzou’s server saves an order reference, the selected products, price, currency, checkout session and purchase-term acceptance in private Cloudflare R2 storage. It checks payment status to authorize downloads, records delivery status and revokes download access when a refund is recorded. Card details are entered with the payment provider and are not stored by this storefront. If the payment or delivery service is unavailable, checkout displays an unavailable message. Read Dodo Payments’ privacy policy for its processing and retention.
Contact and hosting
The contact form collects your email, selected topic and message through Netlify Forms so we can answer, investigate file issues, handle refunds and respond to privacy requests. Netlify hosts the site and server functions and may process IP addresses, user agents, request timestamps and operational logs to deliver and secure the service. Its free-plan platform badge opens Netlify’s own interface. See Netlify’s privacy policy. Do not submit card information, passwords or sensitive worksheet contents.
Purpose, sharing and transfers
We use necessary data to fulfill purchases, answer requests, prevent misuse, keep essential transaction records and comply with obligations. Where applicable, the bases are performance of a contract, legitimate interests in secure operation and support, and legal obligations. Data is shared with hosting and payment providers for those purposes and with authorities only where required. We do not sell personal data or use it for targeted advertising. Providers may process data internationally under their applicable transfer safeguards; their notices explain those arrangements.
Retention and your choices
Cart data remains in your browser until cleared; the checkout cookie expires after 24 hours. We aim to remove resolved routine inquiry records within 12 months, unless a dispute, security issue or legal obligation requires longer retention. Payment and accounting records are retained as required by applicable rules and the provider’s obligations. You may ask to access, correct, delete, restrict or receive your data, or object to relevant processing where those rights apply. Some essential transaction records cannot be deleted immediately. You may also contact your competent data-protection authority.
Your worksheets and children
Your completed worksheets remain wherever you choose to save or import them. zzou cannot see entries in downloaded files unless you send them to support. A spreadsheet or cloud service you choose has its own policies. The store is intended for adults purchasing for personal household use; we do not knowingly seek children’s personal data. Contact us if you believe it has been submitted.
Changes
Material changes are published here with a revised date. We will provide additional notice where required. Contact us if anything about your data is unclear.