← Back to home

Privacy Policy

Last updated: April 2, 2026

ZipToTimeZone ("we", "us", "our") operates the website ziptotimezone.com and the Zip to Timezone Lookup API (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

We collect the following types of information:

• Account information: When you create an account, we collect your email address through Firebase Authentication. You may sign in with email/password or Google Sign-In.
• Payment information: When you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. Stripe handles all payment data under their own Privacy Policy.
• API usage data: We track the number of API calls made with your API key for quota enforcement. We log the API key used and request count per billing period. We do not log the specific zip codes you query.

2. How We Use Your Information

• To provide and maintain the Service
• To manage your account and subscription
• To enforce API usage quotas and rate limits
• To communicate with you about your account or the Service
• To detect and prevent abuse or unauthorized use

3. Data Storage and Security

Your data is stored on Google Cloud Platform infrastructure through Firebase (Firestore database and Firebase Authentication). The entire Service, including API processing, data storage, authentication, and hosting, runs on Google Cloud's fully managed infrastructure.

Google Cloud maintains industry-leading security certifications and compliance standards, including SOC 1, SOC 2, SOC 3, ISO 27001, ISO 27017, and ISO 27018. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

For full details on Google's security practices and commitments:

• Google Cloud Security Overview
• Firebase Data Privacy and Security
• Google Cloud Compliance and Certifications
• Google Cloud Data Processing Addendum

4. Third-Party Services

We use the following third-party services that may process your data:

• Firebase (Google Cloud): Authentication, database storage, and hosting. Firebase Privacy
• Stripe: Payment processing and subscription management. Stripe Privacy Policy

5. Cookies and Tracking

We do not use tracking cookies, analytics cookies, or third-party advertising cookies. The only cookies used are functional session cookies required by Firebase Authentication to keep you signed in. These are strictly necessary for the Service to function and are not used for tracking or advertising purposes.

6. Data Retention

We retain your account data (email, API key, usage metrics) for as long as your account is active. If your subscription is canceled, your API key is deactivated but your account data is retained for 90 days in case you resubscribe. After 90 days, or upon request, your data will be deleted.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Data portability: Request your data in a machine-readable format.
• Opt out: Cancel your subscription at any time through your account dashboard or by contacting us.

To exercise any of these rights, contact us at it@moblize.it. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal information to third parties.

9. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.