Privacy Policy

Last updated: July 1, 2026

This Privacy Policy (“Privacy Policy”) describes the types of personal data that the Zcash Foundation (“Zcash Foundation,” “the Foundation,” “we,” “our,” and/or “us”) collects, uses, and discloses from individuals (“you” or “your”) through the z.cash website at https://z.cash, which the Foundation operates and manages, along with its related subdomains and content (collectively, the “Service”).

As used in this Privacy Policy, “personal data” means any information relating to an identified or identifiable individual, including any information that constitutes “personally identifiable information,” “personal data,” or “personal information” under applicable privacy or data protection laws or regulations.

By using the Service, you acknowledge the collection, use, disclosure, and other processing of your personal data as described in this Privacy Policy.

Summary

In short: Zcash Foundation is a privacy organization, and we wrote this policy to collect as little data as possible. The only personal data we collect from visitors to the Service is standard website-analytics information, to understand how the site is used. We do not collect and therefore cannot sell your personal data or use it for advertising. We honor Global Privacy Control (GPC) browser signals, and you can manage cookies at any time. If you choose to email us, we will retain whatever information you decide to send us. This summary is for convenience only; the full policy below governs.

Contents

About us and our approach to privacy

The Zcash Foundation is a 501(c)(3) public charity that builds financial privacy infrastructure for the public good, primarily serving users of the Zcash protocol and blockchain, and it operates and manages the z.cash website. Privacy is our mission, and that mission shapes how we treat your data: we aim to collect as little personal data as is reasonably necessary to operate the Service and meet our legal obligations. Where we can serve you without collecting personal data, we try to do exactly that.

What this policy covers

This Privacy Policy applies to personal data we process as a data controller in connection with the Service described above.

It does not apply to the Zcash protocol or the Zcash blockchain itself. Zcash is an open, decentralized, public network that the Foundation does not own or control. Transactions on the Zcash blockchain are governed by the protocol and the choices of the people who use it — not by this policy — and the Foundation does not collect, hold, or have access to your wallet keys, seed phrases, or the contents of shielded transactions. This policy also does not apply to third-party wallets, exchanges, applications, or other software in the Zcash ecosystem that we do not operate. Please review the privacy policies of those services directly.

Information we collect

We aim to keep this short, because we collect very little.

Website analytics information. When you visit the Service, we and our service providers automatically collect standard information about your visit, such as your browser type, operating system, IP address, device identifiers, the pages you view, referring pages, links you click, and date and time stamps. We collect this information using server logs, cookies, and similar technologies (see “Cookies and analytics” below), and we use it to understand how visitors use the Service.

Information you send us directly. If you choose to contact us — for example, by email — we will receive whatever you include, such as your name, email address, and the contents of your message. We use this only to respond to you and to keep a record of our correspondence.

We may process and disclose information that has been aggregated or anonymized without limitation, where it can no longer be used to identify a specific individual.

How we use information

We use the information we collect to:

  • Operate, maintain, secure, and improve the Service;
  • Understand how visitors use the Service through analytics;
  • Respond to inquiries or requests you send us directly;
  • Generate de-identified, aggregated, or anonymized data that we may use for any lawful purpose;
  • Detect, investigate, and prevent fraud, abuse, and security incidents;
  • Comply with applicable laws and regulations, enforce our terms and policies, and establish, exercise, or defend legal claims; and
  • Fulfill any other purpose for which we provide specific notice at the time the information is collected.

If you are located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, we process your personal data only when we have a valid legal basis, including:

  • Consent. Where you have consented to the processing — for example, where required, before we set non-essential analytics cookies. You may withdraw your consent at any time.
  • Contractual necessity. Where processing is necessary to take steps at your request, such as responding to an inquiry you send us.
  • Compliance with a legal obligation. Where we are required to process your personal data to meet legal or regulatory obligations.
  • Legitimate interests. Where we or a third party have a legitimate interest that is not overridden by your rights and interests — for example, in understanding how the Service is used and keeping it safe, secure, and functioning properly.

How we disclose information

We do not sell your personal data. We may disclose the information described above in the following circumstances:

Service providers. We may disclose information to vendors who perform services (e.g. error monitoring) on our behalf, such as our website hosting provider.

Legal and safety. We may access, preserve, and disclose information if we believe it is reasonably necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our terms, policies, and agreements; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of the Foundation, our community, or the public.

Organizational changes. We may disclose or transfer information in connection with, or during negotiations of, any merger, reorganization, asset transfer, financing, dissolution, or similar transaction or event involving all or a portion of our assets or operations.

With your consent. We may disclose information for any other purpose with your consent or at your direction.

Cookies and analytics

We and our service providers use cookies and similar technologies to operate the Service, keep it secure, and understand how it is used. We use these technologies to collect the website-analytics information described above.

The Service provides a cookie management tool that lets you accept, reject, or customize non-essential cookies, and most browsers also let you refuse or delete cookies or notify you when one is set. Essential cookies are necessary for the Service to function and cannot be switched off through these controls. Disabling certain cookies may affect how the Service functions.

Your choices and rights

Cookies. You can manage your cookie preferences at any time using the cookie management tool on the Service or your browser settings, as described above.

Global Privacy Control and Do Not Track. The Service recognizes the Global Privacy Control (“GPC”) signal. When your browser or a browser extension sends a GPC signal, we treat it as a valid request to opt out of any sale or sharing of personal data, and non-essential cookies and tracking are disabled automatically, without any further action from you. There is no commonly accepted standard for the older “Do Not Track” (“DNT”) signal, which has been deprecated by most browsers, and the Service does not respond to DNT.

Rights in the EEA, UK, and Switzerland. Subject to applicable law, you may have the right to: request access to the personal data we hold about you; request that we correct or update inaccurate or incomplete data; request deletion of your personal data; object to or request that we restrict certain processing; request a portable copy of your data or that we transfer it to another organization; and withdraw any consent you previously gave (without affecting the lawfulness of processing before withdrawal). You also have the right to lodge a complaint with your local data protection or supervisory authority.

US state privacy rights. If you are a resident of a US state with a comprehensive privacy law — such as California, Virginia, Colorado, Connecticut, and others — you may, subject to that law and certain exceptions, have the right to:

  • Confirm whether we process your personal data and request access to it;
  • Request that we correct inaccuracies in your personal data;
  • Request that we delete personal data we have collected from you;
  • Obtain a portable copy of your personal data;
  • Opt out of the “sale” of personal data, “sharing” for targeted advertising, and certain profiling. Note that we do not sell your personal data, share it for cross-context behavioral advertising, or use it for targeted advertising;
  • Not be subject to discrimination for exercising any of these rights; and
  • Appeal a denial of your request, where your state provides a right to appeal.

To exercise any of the rights described in this section, please contact us using the details in the “Contact us” section below. We may need to verify your identity before responding, and there are exceptions and limitations to each of these rights. We do not use personal data to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

The Service may contain links to websites, platforms, and tools that we do not own or operate — for example, code repositories, community forums, social media, wallets, and exchanges. We are not responsible for the privacy practices of these third parties, and this Privacy Policy does not apply to them. We encourage you to review their privacy policies before providing them with personal data.

Data retention

We retain information for as long as reasonably necessary to fulfill the purposes for which it was collected, to operate the Service, and to comply with our legal, tax, accounting, and recordkeeping obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete it or to keep it in a form that no longer identifies you.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data from unauthorized access, use, alteration, or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee the absolute security of your personal data.

Children’s privacy

The Service is not directed to children, and we do not knowingly collect personal data from children under 18 years of age. If you believe a child has provided us with personal data in violation of this Privacy Policy, please contact us using the details below so we can delete it.

International visitors and data transfers

The Foundation is based in the United States. While the Foundation is based in the United States, we recognize that the Zcash community is global. If you choose to access the Service from the EEA, the UK, Switzerland, or another region with data protection laws that differ from those of the United States, please be aware that your personal data may be transferred to, stored in, and processed in the United States by us and our service providers.

Where required by applicable law, we rely on appropriate safeguards — such as European Commission- or UK-approved Standard Contractual Clauses, your consent, or the necessity of taking steps at your request — to transfer personal data internationally. For more information about these safeguards, please contact us using the details below.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the “Last updated” date above. Material changes may be communicated through additional notice where appropriate. Your continued use of the Service after the revised policy takes effect constitutes your acceptance of the changes.

Contact us

The Zcash Foundation is the data controller responsible for the personal data described in this Privacy Policy. If you have any questions, comments, or requests regarding this policy or our data practices, please contact us by email at [email protected] or by mail at:

Zcash Foundation
1390 Chain Bridge Road
Suite A132
McLean, VA 22101
United States

If you are located in the EEA, the UK, or Switzerland and are not satisfied with our response, you also have the right to lodge a complaint with your local data protection or supervisory authority.