Privacy & website analytics
Updated 24 September 2026
Website activity
ZENIX LUCKY GOODS LIMITED records the pages viewed, visit time, network IP address when supplied by our host, approximate country, browser and device category, and the referring website name. We also record estimated active time on each page, which product cards are in focus, and add-to-bag interactions. Active time pauses when the page is hidden, loses focus or has no interaction for 60 seconds. These measurements help us understand product interest and improve our store; they do not establish personal preferences with certainty. We do not save query strings or complete referring URLs in visitor analytics.
Visitor totals use an anonymous random browser identifier stored for up to 90 days. A separate tab session identifier groups page visits, starting a new session on the next page load after 30 minutes of inactivity. Clearing browser storage or using another device can count someone again; a shared browser can combine people. Older records used IP and browser estimates. This identifier is not used for advertising or cross-site tracking. We do not load third-party analytics scripts. Visitor analytics respects browser Do Not Track and Global Privacy Control signals; payment-security records remain part of order processing.
Checkout and payment records
When you start checkout, we record the network IP supplied by our host and the time. We separately store an IP address returned by Paystack, if available, when checking a payment. These records support order security and payment enquiries. The checkout IP and payment IP may differ when a device changes networks. Neither is proof of a person's identity or precise location.
Paystack handles payment details on its hosted checkout. This analytics feature does not collect card numbers, security codes, passwords or bank authentication codes.
Order emails and shipment tracking
When these services are connected, we use Resend to send order and shipping emails to the payment email address, and AfterShip to retrieve courier updates using the carrier and tracking number. Order lookup shows shipment progress without displaying your name, email, street address or purchased products. Anyone with your complete order number can view this limited tracking information, so keep the number private.
Access and retention
Detailed visit records and IP addresses are available only to authorized administrators. They are retained for up to 90 days, with expired records removed on the next analytics collection or administrator analytics request. Core order, payment, policy-acceptance and delivery records are maintained separately for order processing, customer service and record keeping.
Your enquiries
For questions about your data or to request access or deletion, contact ambasa@corestone.chat or our official WhatsApp. Include your order number if relevant; do not send full card details or bank verification codes.
Custom enquiries
When you submit a custom request, we save your contact details and project brief so our team can review your idea and reply. Providing a brief does not subscribe you to marketing. Your draft is kept in this browser session until you submit it. Contact ambasa@corestone.chat if you would like your enquiry details removed.
Saved cards and payment records
If you choose Save my card, we store an encrypted Paystack reusable authorization after verified payment. We do not receive or store your full card number, CVV or bank verification codes. Cards are linked to your member account and only the card ending, brand and expiry are displayed. Sign-in remains active when you refresh or browse in the same tab. New tabs start signed out. Your account has one new-card checkout attempt, including a failed or cancelled attempt; removing a saved card does not reset that limit. Remove saved cards in checkout at any time. You must confirm each new purchase; your bank may require additional authentication. We retain consent, payment and refund records for order support and reconciliation. Cashback, when offered, is reviewed and returned through the original payment method.
Member accounts and saved addresses
Registration uses your email and password. Your orders, shipment details, saved address and reusable payment authorization belong to your member account. Save card and Save address are selected by default at checkout; you can untick either before continuing. A confirmed shipping address is saved to your account only when you choose to save it.
Passwords are hashed for sign-in and also retained in encrypted form so the main store administrator can view them for account support. Authorized team accounts may reset your password, but cannot view the stored password. Use a unique password for this store. Password viewing and resets are recorded. Contact the store if you need account assistance.
Member sign-in is kept in this tab’s session storage. Refreshing or browsing in the same tab keeps you signed in. New tabs start signed out, and closing the tab ends its session. Browser session-restore features may restore previously closed tabs. Order and delivery records remain saved for support and fulfillment.