Privacy Policy

1. Who operates Sharezip

Sharezip is operated by the site operator, an individual with tax residency in China. This policy applies to Sharezip at sharezip.easyuse4you.cloud.

2. How the service works

You provide a public iCloud shared-album URL in one of these supported forms: https://www.icloud.com/sharedalbum/#TOKEN or https://photos.icloud.com/shared/album/TOKEN. Sharezip sends that URL to its server to request the public album through Apple's unofficial public shared-album endpoints.

The listing request is sent as JSON to POST /api/album. A ZIP request is sent as JSON to POST /api/zip and includes the URL, requested output format, photo limit, and quality when applicable. Sharezip requests public album data and photo bytes from Apple-controlled hosts. If Apple does not return the album, the interface may show a bundled sample fixture.

3. Information we process

• Public album link and request settings: the URL you submit and the ZIP options needed to fulfill your request.
• Public album content: album metadata and still-photo bytes returned for that public link. Photo bytes are processed in memory for the request. Sharezip has no code path that stores album photo bytes in Cloudflare KV.
• Google account data, if you sign in: Sharezip requests the openid email profile scopes. A verified email is required. Sharezip stores your email, Google account ID, and name when supplied. It does not store a Google profile picture URL.
• Subscription records: Cloudflare KV may store subscription status and Creem customer and subscription identifiers.

4. Cookies and local storage

Sharezip uses only the following cookies and browser storage:

• sharezip_session: an HTTP-only sign-in session cookie with Path /, SameSite=Lax, a maximum age of 30 days, and Secure enabled on HTTPS.
• sharezip_oauth: a short-lived HTTP-only cookie used during Google OAuth, with Path /, SameSite=Lax, a maximum age of 600 seconds, and Secure enabled on HTTPS.
• sharezip-locale: a localStorage value of en or zh that remembers your language choice.

5. Accounts and Cloudflare KV

When you use optional Google sign-in, Sharezip upserts an account record in Cloudflare KV keyed by normalized email. The record includes email, Google ID, name, subscription status (initially “none”), and creation and update timestamps. It may later include Creem customer and subscription identifiers and an updated status such as active, trialing, or canceled.

6. Billing

When billing is configured and you choose “Subscribe with Creem,” Sharezip creates a checkout using your account email and sends you to Creem to complete it. Creem is the Merchant of Record and handles payment processing and related tax. Sharezip does not store card numbers. Creem may process your information under its own terms and privacy policy.

7. Why we use information

We process this information to provide album listings and ZIP downloads, authenticate accounts, apply guest and subscription access limits, provide configured billing, maintain service security, troubleshoot failures, and comply with legal obligations.

8. Sharing and retention

The public album URL and related requests are sent to Apple services to retrieve the public album and its photos. Account and subscription records are stored using Cloudflare services, and billing information is exchanged with Creem when checkout is used. We do not sell your personal information.

Photo bytes are kept only in memory for the request. Account and subscription records may be retained while needed to operate the service, administer subscriptions, resolve disputes, and meet legal obligations. You may contact us to request access, correction, or deletion, subject to applicable law and records we must retain.

9. Security, international processing, and children

We use reasonable technical and organizational measures, but no online service is completely secure. Because Sharezip uses service providers and is operated from China, information may be processed in countries other than your own, subject to applicable law. Sharezip is not directed to children who cannot legally consent to this processing in their jurisdiction.

10. Changes and contact

We may update this policy as the service or legal requirements change. The date above identifies the latest version. Questions or privacy requests may be sent to [email protected].