Legal · Privacy
Privacy Policy
ZenouMath has no accounts and no analytics. This page is the complete list of what is collected anyway, and by whom.
[SQUARE BRACKETS] are facts only the operator can supply and must be completed before this page is relied on. What needs review.
1. Who is responsible
The operator named in the contact page is responsible for the small amount of personal information described here. Whether the operator is an "APP entity" bound by the Australian Privacy Principles is a question of fact and law — see what needs legal review. This policy is written to the standard of the Privacy Act 1988 (Cth) and the Australian Privacy Principles, whether or not that Act formally applies.
2. What is not collected
This is the shortest list to trust, so it comes first:
- No accounts. No name, email address, password or profile.
- No advertising or analytics trackers. No Google Analytics, no Meta pixel, no session recording, no fingerprinting script.
- No first-party cookies. The site sets none of its own.
- No server-side viewing history. What you watch, play or save is not recorded on the server.
- No selling or renting of personal information. Ever, to anyone.
3. What is collected
Two things, both ordinary:
Server request logs
The web server that serves the pages records ordinary request metadata: the requested path, the time, the HTTP status, the user-agent string your browser sends, and the IP address the request came from. These logs exist to keep the site up and to detect abuse. They are retained for [RETENTION PERIOD] and then deleted or rotated.
API usage counters
The optional metadata API in front of TMDB keeps in-memory counters (requests served, cache hits and misses) and a keyed cache of upstream responses. These are operational statistics, not profiles: there is no per-visitor identifier attached to them and they are cleared when the process restarts.
4. What stays in your browser
These keys live in localStorage on your device. They never reach a server, and clearing site data deletes them.
| Key | Holds |
|---|---|
zenoumath.consent | The agreement version you accepted and the date you accepted it. Nothing else. |
zenou_prefs | Appearance: theme, glow, radius, density, motion, background, accent hue. |
zenou_lib and related | Favourites, playlists, ratings, notes, recently opened items, hidden games. |
| Doorway templates | Proxy address templates you add yourself. They stay local because public proxy instances are short-lived. |
__gsuite_theme_pref_v2 | A cached copy of the doorway menu, so a dead mirror does not leave a blank door. |
Because none of it is transmitted, the operator cannot read it, export it or restore it for you. That cuts both ways: it is private, and it is not backed up.
5. Third parties your browser contacts
This is the part most privacy policies bury. Wherever you go on this site, your browser may talk directly to the following companies, and they will see your IP address and user-agent at minimum:
| Service | When | What they can see |
|---|---|---|
TMDB (image.tmdb.org) | Any lecture page with artwork | Your IP and which images you loaded. Metadata text is proxied through our server; images are not. |
| Google Fonts | Every page | Your IP and user-agent when the font file is requested. |
| YouTube | Media shelf playback | Full YouTube cookie and tracking behaviour, exactly as on youtube.com. |
| Spotify, SoundCloud | Audio bench playback | Their own embed analytics and cookies. |
| TikTok, Instagram, Discord | Only if you open one of those embeds | Their own tracking, subject to their policies. |
| Game publishers (CrazyGames, Scratch, HoodaMath, developers) | When a practice set loads | Their own analytics and whatever advertising their build includes. The site does not control it. |
| Third-party players and AI assistants | When you open one | Their own policies apply in full, including their advertising and account systems. |
| Proxy doorway (Magma) | Only if you choose to use it | Every request passes through that third party's server. It can see the addresses you visit, and its own operator's privacy practices govern. Nothing on this site can change that. |
We cannot delete data held by those companies, and we cannot tell them to. Contact them directly, under their own policies.
6. Cookies
The site sets no first-party cookies. Third-party embeds on a page — YouTube, Spotify, game builds — may set their own as soon as they load. If you want to block them, block third-party cookies in your browser, or use a content blocker; the site continues to work without them, though embeds may not.
7. Why the little we hold is held
- Server logs — to serve the site, diagnose faults and resist abuse (APP 3, directly related to operation).
- Acceptance record — to keep the agreement and to avoid asking you again (stored on your device, not collected).
- API counters — to keep upstream request volume inside TMDB's limits so the site stays available.
8. Disclosure and overseas storage
Personal information is not sold, rented or shared for marketing. It may be disclosed where the law compels it, or to a hosting provider strictly as part of serving the site. Logs may be held on infrastructure located outside Australia, most likely the United States or the European Union, depending on where the site is hosted. The countries involved are [HOSTING LOCATIONS] and should be confirmed against the host actually used.
9. Security
The site is served over HTTPS. There is no account database to breach because there are no accounts. That reduces risk; it does not eliminate it. No system is perfectly secure, and no guarantee of security is given.
10. Your rights and complaints
Under the Australian Privacy Principles you may ask what personal information is held about you, ask for it to be corrected, and ask for a correction to be associated with the record. In practice, almost everything is in your own browser — but the request can still be made.
Send a request to the privacy address on the contact page. We will respond within a reasonable period, ordinarily 30 days. If you are not satisfied with the response, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Children
The site is not directed at children under 13 and does not knowingly collect personal information from anyone. It has no registration, so it could not collect a child's details even if it wanted to. Where the site is used by a student, local school policy on acceptable use is a matter between the student and the school.
12. Changes
This policy carries the site's agreement version, currently 2026-11-07. A material change bumps it and the first-visit gate asks again. The date at the foot of this page records the last edit.
Version 2026-11-07. Last updated 7 November 2026. ZenouMath is an independent study site: not a school, not accredited, and not affiliated with any school, university or education authority.