Privacy policy
1. Your Zone01 data
We don't sell, share or monetize your information. Progress, projects, audits and cohort data are read live from the official Zone01 Oujda API during your session and are not copied into our own database.
2. Sessions and cookies
When you sign in, your credentials are sent once to Zone01 to get a session token. The token is stored in a secure, HttpOnly, SameSite=Strict cookie that page scripts can't read, and it's cleared when you sign out. If you link your campus account for logtime, that token is stored the same way. We don't set advertising or cross-site tracking cookies ourselves; see section 4 for optional ads.
3. What we do store
- Anonymous page visits (the path, the referrer and a shortened browser user agent) to understand usage.
- Avatar and email change requests you submit in Settings, until an admin reviews them.
- Support messages you send from Settings.
Aggregate traffic is also measured with Vercel Analytics, which doesn't use cookies.
4. Ads and your consent
To keep z01oujda free, some public pages and your dashboard may show ads from Google AdSense. Ads are never shown on the sign-in page or in account settings. Nothing from Google loads until you choose Accept in the consent banner. If you accept, Google and its partners may use cookies or similar identifiers to show, limit and measure ads; see how Google uses data from partner sites. If you decline, no ad code loads.
Your choice is saved in your browser only (local storage, key z01_ads_consent). Change it anytime with Ad choices in the footer, or by clearing site data. You can also manage personalised ads at adssettings.google.com. We process this under Moroccan Law 09-08 on personal data protection and, for visitors in the EU, the GDPR; you may ask us to access or delete data about you using the contact below.
5. Contact
For privacy or security questions, email zohir@hexops.pro or use the support form in Settings.