Vol. I · Privacy Policy · Last updated · May 11, 2026

Privacy Policy.

We collect the minimum data we need to ship your order, answer your questions, and run our affiliate program. We do not sell your data. Period.

§ I

What we collect.

Order data. Your name, email, and shipping address are collected when you place an order. This is the minimum required to ship your bag and contact you if there is a problem.

Newsletter signup. If you subscribe to our newsletter, we collect your email address and nothing else.

Contact form. When you reach out via the contact form, we receive your name, email, the topic you selected, and your message.

Affiliate data. If you join the affiliate program, we collect your name, email, and the referral data needed to attribute sales and pay out commissions.

Analytics. Basic page-view analytics (which pages were visited, traffic source). No personal identifiers tied to behavior.

§ II

Payment processing.

Payments are processed by Stripe. Zim Zam Labs does not see, store, or process your credit card number. Stripe's privacy policy governs how your payment information is handled — see stripe.com/privacy.

§ III

Third-party services.

The services we use to run the business:

Stripe — payment processing.

Resend — transactional emails (order confirmations, replies).

USPS — shipping carrier. They receive your shipping address.

Cloudflare — website hosting and traffic protection.

Supabase — database hosting. Your order records, affiliate account, and any data tied to your purchases are stored here.

Cloudflare Access — login security for our internal admin tools. Only used to verify our team's identity, not yours.

We do not sell your personal data to any third party. Ever.

§ III·b

Affiliate cookies.

If you arrive on the site through an affiliate link (a creator's code or a mosque's referral link), we set a single first-party cookie that remembers which affiliate sent you. The cookie lasts 30 days from your last visit and contains only the affiliate's code — no personal identifiers.

If you place an order during that window, the affiliate is credited and (for mosque affiliates) the masjid receives its contribution. If you do not want this cookie set, your browser's privacy controls or extensions can block it; the site will still work, and you will simply not be attributed to an affiliate.

§ IV

Your rights.

You have the right to:

Access the data we hold about you.

Correct any inaccurate data.

Delete your data entirely (except where we are legally required to keep it for tax or shipping records).

To exercise any of these rights, email zimzamlabs@gmail.com from the address tied to your account. We respond within 30 days.

California residents have additional rights under the CCPA. The same email address handles those requests.

§ V

Honest note.

This page is currently under formal legal review by our counsel. The substance above is accurate. The exact legal language will be updated once that review is complete.

If you have a privacy concern that cannot wait, email zimzamlabs@gmail.com and we will address it directly.

§ Questions

We answer privacy emails first.

If you have a concern about your data, it goes to the top of the queue.

Email Privacy Concerns