Privacy policy
Last updated: 9 October 2026
Zooki World (zooki.world) is a small online zoo you walk around in your browser. We collect as little as we can, keep it only as long as we need it and never sell it.
Operator and controller: [legal name and address of the operator]. Questions and requests: [email protected].
What we process, and why
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Your email address, when you sign in or book a tour reminder | To send the sign-in code or the reminder, and to show your purchases | Contract (Art. 6(1)(b)) | While your account exists; tour bookings until the tour is over |
| What you buy as a caretaker or tour sponsor: brand name, colour, logo, website, description | To show it in the zoo, which is what you pay for. It is public by design | Contract | For the time you are the caretaker or sponsor |
| The name and note you write on a treat for a feed box | To show who put what in the box, which is what you pay for. It is public by design; your email is never shown | Contract | The box keeps its latest 200 treats |
| Purchase records (amount, date, Paddle transaction ID) | Accounting and support | Legal obligation (Art. 6(1)(c)) | As long as tax law requires |
| Your position, character and messages in the zoo | To show you to other visitors in real time. Messages go only to people near you and are not stored | Contract | Not stored: gone when you leave |
| Your IP address | Security (limiting abuse such as too many codes, purchases or connections) and counting visits | Legitimate interest (Art. 6(1)(f)) | In memory only, for minutes; not written to logs |
| Anonymous statistics with Umami, only if you allow analytics | To learn which parts of the zoo people enjoy | Consent (Art. 6(1)(a)) | Aggregated; no cookies, no profile of you |
| If you follow Zooki World on X, Instagram or Bluesky: your public username, display name and profile picture | To show you on the guest wall inside the gate, with a link to your profile. We copy the picture to our server so visitors' browsers never contact those networks | Legitimate interest (thanking our followers in public) | While you follow us; write to [email protected] and we take your card down for good |
| Your votes on who moves into the closed pens | Counting the votes | Legitimate interest | Only the totals are kept |
Who helps us
- Paddle (Paddle.com Market Ltd) is the reseller and merchant of record for every purchase: it takes the payment, handles taxes and invoices, and processes your payment details under its own privacy policy. We never see your card.
- Cloudflare delivers the site, protects it from attacks and sends our emails.
- Hetzner hosts our server in the EU.
- Umami, installed on our own server, for the anonymous statistics above (only with your consent).
- X, Instagram (Meta) and Bluesky: we read the list of our own followers from them for the guest wall. Nothing about visitors is sent to them.
- ElevenLabs turns caretaker and tour sponsor texts into the tour guide's voice. Only that text is sent, nothing about visitors.
- Google Fonts provides the fonts; your browser loads them from Google, which sees your IP address.
Some of these companies are outside the EU. Where they are, transfers rely on the EU Standard Contractual Clauses or an adequacy decision.
Cookies and storage in your browser
See the cookie policy. You choose what is allowed when you first arrive and can change it at any time under Cookie settings.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable form. Where we rely on consent you can withdraw it at any time, without affecting what happened before. Write to [email protected]; we answer within a month. You can also complain to your data protection authority.
Children
The zoo is fun for all ages, but accounts and purchases are for adults (16+, or the age of digital consent where you live).
Changes
If this policy changes in a way that matters, we will say so in the zoo and, where we rely on your consent, ask again.