Privacy Policy

1. Who is responsible for your data?

ZyloMods is responsible for the processing described in this policy.

For privacy questions or requests, use the contact page.

2. Data we may process

• Contact information: your name, email address, subject and message when you use the contact form.
• Discord account information: Discord user ID, username and email address when you choose Discord sign-in.
• Customer and purchase information: email address, order or transaction identifiers, purchased products, entitlement status and subscription status received from Ko-fi or legacy Patreon integrations.
• Licensing and portal information: DayZ server IP addresses, mod selections, whitelist entries, download entitlement, device or licence activation information and relevant timestamps.
• Management-panel server information: server names, IP addresses and ports, RCON credentials, API or agent identifiers, hostnames, server paths, installed-mod information, configuration, webhook settings, performance information and management commands.
• DayZ player and gameplay information: Steam IDs, current and historical player names, IP addresses, connection details, location coordinates, health, ping, playtime, chat messages, team information, priority-queue information and ban records when a customer connects a DayZ server to the management panel.
• Technical information: IP address, browser or device information, request time, requested URL and security logs that may be recorded by the VPS, Caddy, application services or hosting providers.
• Necessary browser storage: login session data, security tokens, portal preferences and the acknowledgement of the cookie notice. Details are in the Cookie Policy.

ZyloMods does not receive or store your complete payment-card details. Payments are processed by the payment platform you choose.

3. Why we use this data

• To create and secure customer sessions and accounts.
• To provide purchased mods, downloads, licences and whitelist access.
• To verify purchases, subscriptions and product entitlements.
• To answer questions, provide support and handle disputes.
• To operate, troubleshoot and protect the website and services.
• To prevent fraud, abuse, unauthorised downloads and security incidents.
• To comply with tax, accounting and other legal obligations.

4. Legal bases

Depending on the situation, processing is based on:

• Contract: providing products, downloads, licences, subscriptions and support you requested.
• Legitimate interests: securing the service, preventing fraud, maintaining records and improving reliability, balanced against your rights.
• Legal obligation: tax, accounting, fraud response and lawful authority requests.
• Consent: where consent is specifically requested. You may withdraw consent without affecting earlier lawful processing.

5. Service providers and data sharing

Data is shared only when needed to provide or secure the service. The providers used by the website may include:

• Discord: account sign-in and community links.
• Ko-fi: checkout, payments and purchase webhooks.
• Patreon: legacy account or subscription integrations where applicable.
• FormSubmit: delivery of contact-form submissions.
• Supabase/PostgreSQL providers: account, entitlement, licence and whitelist data.
• VPS, DNS and hosting providers: website delivery, logs, availability and security.
• Google Fonts: delivery of website fonts, which can disclose technical request data such as an IP address.

We may also share information when legally required, to establish or defend legal claims, or to investigate fraud and security incidents. Some providers may process data outside the European Economic Area under their own safeguards and privacy terms.

6. DayZ server operators and player data

A customer who connects a DayZ server to Zylo Management controls which server and player information is sent to the panel. That customer remains responsible for having a valid legal basis and for giving its players any privacy notice required by law or platform rules. ZyloMods processes that information to provide the requested hosting and management functionality.

Server operators should not send unnecessary personal data and should delete old player, chat, ban and server records when they are no longer needed.

7. Retention

We retain data only for as long as reasonably necessary:

• Contact and support correspondence is retained while the request is active and afterwards when needed for follow-up or disputes.
• Account, entitlement, licence and whitelist records are retained while the service or entitlement is active and for a reasonable period afterwards for support, fraud prevention and legal claims.
• Management-panel server, player, chat, location, playtime and ban records are retained while needed by the connected server operator and for service operation, subject to deletion and account controls made available to that operator.
• Transaction and invoice records may be retained for the statutory tax and accounting period, which can be up to seven years.
• Security and server logs are retained according to operational security needs and hosting configuration, then deleted or rotated.
• Browser session storage normally disappears when the browser tab or session is closed. Other necessary preferences remain until cleared or replaced.

8. Security

We use technical and organisational measures intended to protect personal data, including HTTPS, access controls, signed sessions, server-side entitlement checks and restricted administrative access. No internet service can guarantee absolute security. Please contact us immediately if you suspect unauthorised account or data access.

9. Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may also withdraw consent where processing relies on consent.

Send your request through the contact page. We may ask for reasonable proof of identity. You also have the right to complain to your local data-protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

10. Children

The services are not directed at children below the age at which they can independently consent to online services under applicable law. If you believe a child supplied personal data improperly, contact us so the situation can be reviewed.

11. Changes to this policy

This policy may be updated when the website, service providers or legal requirements change. Material changes may also be announced on the website.