Jenkins & Jones Privacy Policy
Effective October 30, 2026 (updated the same day for accounts, alerts and the Home Screen app)
Jenkins & Jones is a brand of ZCC Media Agency, a business run by Zion Boggan ("we", "us"). This policy explains what personal information the Jenkins & Jones website at jenkinsjones.net (the "Site") collects, why, and what you can do about it. We collect as little as we can.
1. What we collect
| What | When | Why |
|---|---|---|
| Your email address and the time you sent it | You fill in the private preview access form | To review your request and reply |
| Your email address, checked by Cloudflare Access, plus a login cookie | You sign in to the private preview | To let approved people in and keep others out |
| Your email address and the time you sent it, plus your name, organisation and research-notes choice if you give them | You request the free report | To give you the download link and, only if you ticked the box, to send occasional research notes |
| Your email address, organisation and what data you need, with the time you sent it | You join the data waitlist | To tell you when we can supply what you asked for, and to gauge demand |
| Your email address and organisation, with the time you sent it | You ask for early access to the trader ledger | To invite you when early access opens |
| Your email address, the time you created your account, a random invite code, and which account invited you (if you arrived through an invite link) | You create a free account (sign in with an emailed link or code) | To sign you in, show your settings and count how many friends joined from your link. We never show your email to anyone else |
| A sign-in cookie (`jj_s`): a random code, stored on our server only as a one-way hash, with the kind of device (for example "iPhone") | You sign in | To keep you signed in on that device for up to 90 days. It is a first-party, functional cookie; no tracking or advertising use |
| Your alert choices (which updates, quiet hours) and, if you allow notifications, the push address your browser gives us for this device with its encryption keys | You turn on alerts | To send only the probability updates you picked, outside your quiet hours, and nothing else |
| A record of which updates we sent you and when | We send you an update | To keep to the per-round limits and send the daily recap. Deleted with your account |
| Your choice of the daily recap email | You turn it on | To email you the daily recap until you turn it off |
| Your email address, with the times you signed up, confirmed and unsubscribed | You sign up for the weekly J&J-1 scorecard email | To confirm you asked for it (we email a confirmation link first) and to send the weekly email until you unsubscribe |
| A small "already requested" flag stored in your own browser | You send a private preview access request | So the page can tell you a request is already in. It stays on your device |
| Small settings stored in your own browser: whether you saw the intro, chose "Later" for Add to Home Screen, added the app, and an invite code you arrived with | You use the live page | So the page does not ask you the same thing twice. It stays on your device and is never sent to us, except the invite code when you sign up |
| Your name, email, billing details and what you bought | You buy something | To deliver it, keep tax and accounting records, and answer questions |
| What you write to us | You email us | To reply |
We count visits to our public pages on our own server, without cookies or third-party analytics: for each page view we record the page, the referring website and, to count unique visitors per day, a one-way code made from your IP address, browser type and a random value that changes every day and is then deleted. We never store your IP address, and the daily code cannot be linked to you or across days. We keep only the totals. When the app is opened from a Home Screen, the page tells our server so (the same kind of daily, one-way code, kept for 60 days and never linked to an account) so we can count installs. We use no advertising trackers and no third-party cookies.
2. Who else handles it
- Cloudflare carries traffic to the Site and runs the sign-in check. It processes connection data, such as IP address, under its own privacy policy.
- Stripe processes payments. Your card details go to Stripe, not to us. We see your name, email, amount and the last four digits of the card.
- Google hosts our business email at [email protected] and delivers our sign-in, confirmation and recap emails.
- Your browser's push service (Apple for Safari and Home Screen apps on iPhone, Google for Chrome and Android, Mozilla for Firefox, Microsoft for Edge on Windows) carries the alerts you turn on. Each alert is end-to-end encrypted to your device, so the push service cannot read it. We send it only the push address your browser created and the encrypted message.
If we add a new provider that receives personal information, we will update this policy before we switch it on. We do not sell personal information, and we do not share it for advertising. We disclose it only when the law requires, or to protect the Site and its users from fraud or abuse.
3. Email from us
We email you only about your request, your purchase, or updates you asked for. Every update email has a working unsubscribe link and our postal address. We honour unsubscribe requests within 48 hours and keep a list of opt-outs so you are not added again.
4. How long we keep it
- Access requests: until the preview closes, or sooner if you ask us to delete yours.
- Waitlist and early-access sign-ups: until the product you signed up for launches or is dropped, then deleted, or sooner if you ask.
- Accounts: until you delete your account (Account › Delete account deletes your email, settings, sign-in sessions, push devices and send log from our server right away, and removes you from the weekly scorecard list). Sign-in links and codes expire after 15 minutes and are deleted within a day. Push addresses that a push service reports as gone are deleted automatically.
- Weekly scorecard sign-ups: while you are subscribed; after you unsubscribe we keep only your address on an opt-out list so you are not added again. Unconfirmed sign-ups are deleted after 30 days.
- Purchase records: as long as tax and accounting rules require.
- Emails: as long as needed to deal with the matter, then deleted.
5. Your choices
You can delete your account yourself at any time on the Account screen, turn off any alert, or turn off notifications in your device settings. You can also ask us to show you, correct or delete the personal information we hold about you, or to stop emailing you. Email [email protected] and we will answer within 30 days. We will not treat you differently for asking.
6. Security
The private parts of the Site sit behind Cloudflare Access; the public pages (the live round, scorecard, alerts, account sign-in, data, research, services, about, contact, the integrity log and these policies) need no Cloudflare login. Account data is kept in a database readable only by the server's administrator account. The Site runs on servers we operate in the United States and stores only the fields listed above. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.
7. Children
The Site is for adults. We do not knowingly collect information from anyone under 18. If you think a child has sent us information, email us and we will delete it.
8. Changes
If we change this policy, we will post the new version here with a new effective date. If a change affects how we use information we already hold, we will tell you by email first.
9. Contact
ZCC Media Agency (Jenkins & Jones), [email protected]