Privacy Policy

Who we are

The operator of APKzona processes personal and technical data needed to run the catalog, accounts, moderation, and security. Privacy contact: [email protected].

What we collect

Account and identity:

- email, display name (if provided);

- password hash or Google OAuth id when signing in with Google;

- account status and moderation roles (if applicable).

Content you submit:

- app submissions, descriptions, screenshots;

- reviews, version comments, reports;

- payout wallet address (if contributor bounties are enabled);

- APK files and media for publishing.

Technical data and logs:

- IP address, user-agent, and request time in server, proxy, or CDN logs for a limited period;

- requested URLs and response codes for error diagnosis;

- signals of suspicious activity (request rate, bot patterns) for abuse protection.

Cookies and local storage:

- session cookies / tokens for login;

- UI preferences (theme, locale);

- technical UI flags.

We do not ask for passports, tax IDs, or bank details for ordinary catalog use, and we do not sell personal data to third parties for targeted advertising.

Purposes of processing

- provide account, moderation, and settings access;

- publish, review, and store user content;

- handle DMCA, malware reports, and support requests;

- protect the service (spam, brute-force, abuse blocking);

- improve stability and performance;

- pay contributor bounties when the program is enabled;

- comply with legal obligations when a mandatory request applies.

Legal bases (depending on applicable law) may include performance of a contract with you, legitimate interest in service security, consent where required, and legal obligations.

Cookies and similar technologies

Session cookies are required for authentication. Theme and locale preferences may be stored locally in the browser. Blocking cookies may break sign-in and preference persistence. We do not use cookies as a standalone product to track you across third-party websites.

Third parties

Data may be processed by infrastructure providers to the extent needed for the service:

- hosting and CDN (page and static delivery);

- email providers (notifications and replies);

- file storage (e.g. object storage or Yandex Disk);

- OAuth providers (Google) when you sign in with them;

- hash-based malware / reputation scanners;

- blockchain networks for crypto payouts (on-chain transactions are public).

We do not sell user databases. Sharing is limited to operating the service or complying with lawful requests.

Retention

Account and published content data are kept while the account and material remain active. Server and proxy logs are typically retained from a few days to a few weeks unless an incident is under investigation. After account or content deletion we erase or anonymize data within a reasonable period, except where law, dispute resolution, or security requires retention.

Backups may retain fragments longer than calendar deletion until backup rotation.

Your rights

Depending on applicable law you may request:

- access to account data we hold;

- correction of inaccurate data;

- deletion of your account or specific personal data;

- restriction of processing in certain cases;

- export of account data in a machine-readable form where technically feasible.

Email [email protected]. We may verify email ownership. We typically respond within 30 days unless law requires otherwise.

Children

The service is not directed to children under 13 (or the age required by local law) without parental or guardian consent. If you believe a child provided data without consent, contact [email protected] and we will take steps to delete it.

International transfers

Infrastructure may be located in different countries. By using the service you understand that data may be processed outside your country of residence. We apply reasonable organizational and technical safeguards for such processing.

Security

We apply standard measures: HTTPS, restricted admin access, password hashing, and anomaly monitoring. No online service is perfectly secure; report suspicious incidents to [email protected].

Policy changes

We may update this Policy. The current version is at /legal/privacy. Material changes will be reflected by an update date or in-product notice where practical.

Privacy contact

[email protected] — subject “Privacy”.