Privacy
Privacy policy 1.9.7: a detailed log for administrator accounts only
A detailed operations log now exists for administrator accounts only. Customer accounts stay zero-log, but customer data shown in admin views can appear in the log.
Text version
Customer requests are served with no log entry. Administrator requests go to the operations log: memory only, 30 days, readable by administrators. Account 1 also has a session recording for 30 days.
ZeroLog now keeps a detailed operations log, but only for accounts with the administrator role. Customer accounts get no new log entries. The zero-log setting from 3 October stays as it is.
For administrator accounts the log records the full IP address, the device, each request with its content (up to 64 KB), chats, tool calls, errors and sign-ins. We use it to find faults and to see what an administrator did and what it caused. Passwords, keys, tokens and one-time codes are removed before anything is stored, though this works by patterns and can miss an unusual form. The log lives only in the main server's memory in Switzerland. Entries are deleted after 30 days, and everything is gone when the server restarts. Only administrators can read it, and every look at the log is itself recorded.
One honest limit: when an administrator opens an admin view or works on a customer account, customer data shown or typed there can end up in that log entry, for example a username, an email address or a credit balance. The same 30 days and the same access rules apply. This is a record of what the administrator did, not of how the customer uses ZeroLog.
The operator's own account also records mouse movements, clicks and inputs, with secret fields masked, so he can retrace his own steps. Clicked texts and inputs can contain customer data too. No other account is recorded. Those files are kept for 30 days.
The details are in section 3.4.1 of the privacy policy, version 1.9.7.