Privacy Policy
This policy explains what information Gagzoo collects when you use the Gagzoo Chrome extension and the website at this address (together, "Gagzoo"), why, and what choices you have. We wrote it to be readable; if anything is unclear, ask us.
1. Who we are
Gagzoo is operated by MenuWays Ltd. (company no. 514231802), 1 Snonit St., Caesarea 3079127, Israel ("we", "us"). We are the controller of the personal information described here. Contact: gagzoo@olalim.com.
2. What we collect
| Information | When | Details |
|---|---|---|
| Google account basics | When you sign in with Google | Your Google account ID, name, email address and profile picture link. We never see your Google password. |
| What you create | When you save or share | Your Gagzoos (the YouTube video ID, title, description and the stickers, text, sounds and effects with their timing), comments, likes and remixes. |
| Reports | When you report a Gagzoo or a comment | The reason you choose, the time in the video (for a Gagzoo), a copy of the reported comment so we can still review it if it is deleted, and any details you write. If you report from a share page without signing in, we store a scrambled code derived from your network address (it can't be turned back into the address) only to stop duplicate reports. If a Gagzoo or comment of yours is removed, we may keep a record of the strike on your account. |
| Account activity | While signed in | When your account was created and last signed in, how the account was created (through the extension or the website, and the share channel such as WhatsApp if you came from a share link), when you last used the extension, and sign-in session records (stored only as a scrambled hash). |
| Usage events | When you use Gagzoo | Simple events such as "share link opened", "button clicked", "extension installed", "first Gagzoo saved" or "Gagzoo published", with the device type (phone or computer) and the app a link was shared through. For visitors who are not signed in we attach an identifier calculated from the network address that changes every day and cannot be traced back to you or linked across days. When the extension is removed, the browser opens a page on our site (the address contains only the extension version). We count that visit and, if you choose to answer, the reason and any comment you type (up to 300 characters). We store no name, email, IP address or other identifier with it. |
| Moderation records | When our moderators act | Each moderation action (for example hiding or deleting a Gagzoo, deleting a comment, a strike, a ban or deleting an account) is logged with the moderator, the time and a short description of what it was about as it was at that moment: this can include an account's display name and email address, a Gagzoo's title or a comment's text. When you delete your own account we log only that an account was deleted and how many items it had, without your name or email. |
| Technical data | On every request | Like any website, our server receives your IP address and browser details. We use the IP address briefly in memory to count each view once and to stop abuse; we do not store it with your account. Our hosting provider may keep standard server logs. We also keep counts of server errors and of requests blocked by our abuse limits, and a record of when our maintenance tasks ran. These records contain no names, email addresses or IP addresses. |
We do not use advertising, ad networks or third-party analytics trackers, and we do not sell or rent personal information.
3. How we use it
- To run Gagzoo: sign you in, save and show your Gagzoos, deliver comments and likes, and show share pages and link previews. (Legal basis: performing our agreement with you.)
- To keep Gagzoo safe: review reports, remove content that breaks the rules, block abuse and spam, and enforce our Terms. (Legitimate interests; legal obligations.)
- To improve Gagzoo: understand, in aggregate, how people find and share Gagzoos. (Legitimate interests.)
- To talk to you: answer your messages and send important notices about the service. We do not send marketing email.
4. What is public
- Published Gagzoos can be seen by anyone with the link and by Gagzoo users watching that YouTube video. They show your display name and profile picture as the creator, plus like, comment and view counts.
- Video greetings (made from a greeting template) are unlisted: anyone with the link can watch them, but they are not shown on Explore, profiles, search or to Gagzoo users watching that YouTube video, and the page asks search engines not to index it.
- Comments on published Gagzoos are visible with your name and picture.
- Remixes: others can make their own copy of your published Gagzoo; it credits you while your original is published.
- Drafts (saved, not shared) are visible only to you, and to our moderators if they are reported.
Your email address is never shown publicly.
5. Services we rely on
- Google: sign-in in the extension or on the website (Google receives that you signed in to Gagzoo). On the website, pages with a "Sign in with Google" button and the editor load Google's sign-in script as soon as they open while you are signed out, so the sign-in window can open when you tap; that request goes from your browser to Google, which receives your IP address and browser details. YouTube's embedded player on share pages, which is provided by YouTube and may use cookies under Google's Privacy Policy; video thumbnails and emoji images loaded from Google's servers.
- KLIPY (GIF search): when you search for GIFs, your search words and a random ID created for your Gagzoo installation (not linked to your name or email) go directly from your browser to KLIPY, and GIFs load from KLIPY's servers. See KLIPY's privacy policy.
- Hosting: our servers are run by a hosting provider in the United States that stores data on our behalf.
- Email delivery: we use an email delivery provider to send operational alerts to the people who run Gagzoo (for example "a report is waiting"), including new account notices (counts and ids only). These emails contain counts, report categories and reference numbers only; they do not contain your name, email address, comments or anything you wrote. The provider handles them on our behalf and only for that purpose.
- Uptime monitoring: an outside service checks regularly that Gagzoo is online. It receives no information about you.
We may also disclose information if the law requires it, to protect people's safety, or as part of a merger or sale of the business (with this policy continuing to apply).
6. Stored on your device
- Extension: your unsaved edits, settings (such as language), sign-in session and the random GIF-search ID are kept in Chrome's extension storage on your computer.
On the website we use only these cookies and browser storage items. All of them are needed for the site to work or remember what you were doing; none is used for advertising or tracking, and we do not use advertising cookies.
| Name | Kind | What it is for | How long |
|---|---|---|---|
.AspNetCore.Antiforgery.* | Cookie, every visitor | A security token that stops other sites from sending likes, comments, reports, sign-ins or deletions in your name. Set when you open a page of the website, signed in or not. | Until you close the browser |
gz_web | Cookie, after you sign in | Keeps you signed in on the website (encrypted, not readable by scripts). | 30 days after your last visit, or until you sign out or delete your account |
.AspNetCore.Mvc.CookieTempDataProvider | Cookie, after some actions | Carries a one-time message to the next page, for example "Deleted" after you delete a Gagzoo. | Removed as soon as the message is shown |
gz_draft_{video}, gz_edit_{Gagzoo} | Local storage, in the editor | Your unsaved work in the editor (stickers, texts, timing and title), so it is not lost if the page closes. | Until you save or discard it, or clear this site's data |
gz_lang, gz_muted | Local storage, in the editor | The editor language and whether sounds are muted. | Until you clear this site's data |
gz_ref | Local storage, share page | If you click "get Gagzoo" on a share page: which Gagzoo you came from, the share channel and the time of the click, so we can count that the share led to an install. Used at most once and only within 7 days. | Until you clear this site's data |
gz_gr_{template} | Session storage, greeting maker | What you typed into a greeting (names and message), kept only while you sign in so it can be filled back in. | Removed once filled back in, and when you close the tab |
Moderators also get a separate sign-in cookie (gz_admin) for the moderation pages. If Google's sign-in script sets its own g_state cookie, the site deletes it straight away. The YouTube player on share pages and in the editor is provided by YouTube, which may set its own cookies or storage (see section 5).
7. How long we keep it
- Account information and your Gagzoos, comments and likes: until you delete them or your account (you can do both yourself, see section 8).
- Sign-in sessions: website and extension sessions end 30 days after they were last used, when you sign out, or when you delete your account.
- Usage events, including uninstall counts and the optional uninstall reasons and comments: deleted automatically after 400 days. They do not contain your name, email or IP address, and if you delete your account their link to your account is removed.
- Moderation records (section 2): deleted automatically after 400 days. They are kept for that time even after the account they are about is deleted, so we can show how abuse reports and deletion requests were handled.
- Operational alerts: deleted automatically after 90 days. System records (error and abuse-limit counts, maintenance task runs): deleted automatically after 90 days.
- Strikes and a ban on your account: until a moderator removes them. Deleting your account does not remove them: if your account has a ban, strikes or content under review (hidden by our moderators, or reported and not yet reviewed), a minimal moderation record stays after deletion: your Google account ID, the ban and strikes, and that content, hidden, with its reports. A Gagzoo that got a strike is kept the same way, hidden with its reports (closed ones too), for as long as the strike exists, so we can show what the strike was given for. Once a moderator removes the strike, it stays hidden with its reports; there is no fixed deletion date yet, and a moderator can delete it once no report remains. Your name, email and picture are removed. Signing in again with the same Google account brings the strikes back with it; a banned account stays banned.
- Content hidden by our moderators: kept hidden (visible only to you and our moderators) until we delete it; while it is hidden you can see it but not change or delete it.
- Reports, and the copies of reported comments: for as long as needed to handle the case and prevent repeat abuse; we have not set a fixed deletion date for them. If you delete your account, reports you sent are kept without your name.
8. Your rights
Depending on where you live (for example under the GDPR in the EU/UK, or the Israeli Privacy Protection Law), you can ask us to:
- give you a copy of your personal information;
- correct it;
- delete your account and everything linked to it (Gagzoos, comments, likes, sessions), apart from the moderation record described in section 7;
- restrict or object to some uses, and receive your data in a portable format.
Email gagzoo@olalim.com from the address you sign in with and we will answer within 30 days. You can also complain to your local data protection authority (in Israel, the Privacy Protection Authority).
You can delete any of your Gagzoos yourself at any time (except one hidden by our moderators, one that was reported and not yet reviewed, or one that got a strike) with the 🗑️ Delete button in My Gagzoos on the website or in My Gagzoos in the extension, and remove Gagzoo's access in your Google account settings.
You can also delete your whole account yourself, straight away: sign in on the website and choose Delete my account at the bottom of My Gagzoos. That page lists what is deleted and what is kept: a ban, strikes, and content under review or that got a strike stay as a hidden moderation record (section 7), everything else goes. If you can't sign in, ask us as described above and we will delete it for you.
9. Age and young users
Gagzoo is for people aged 13 and over. It is not directed at children under 13 and we do not knowingly collect their information. If you believe a child under 13 is using Gagzoo, contact us and we will delete the account.
In some countries the age at which you can agree to the use of your data online is higher than 13 (for example up to 16 in parts of the EU). If you are below that age where you live, a parent or guardian must agree before you sign in. If you are under 18, please use Gagzoo with your parent's or guardian's permission.
10. Security and location
Connections to Gagzoo are encrypted (HTTPS). Sign-in sessions are stored only as hashes, access is limited to the people who run Gagzoo, and we apply rate limits against abuse. No system is perfectly secure, but we work to protect your information. Our servers, and some of the service providers listed in section 5, are located in the United States and other countries, so your information may be processed outside the country where you live. Where the law requires it, we use appropriate safeguards for these transfers.
11. Changes and contact
If we change this policy we will update the date above, and for important changes we will give notice in Gagzoo before they apply. Questions: contact us.