Privacy at the club

Zero Customers Club is operated by Mees Tierolff. We use your email to sign you in and send essential membership and launch notices. We do not publish your email or sell your information.

What we keep

Your profile, product URLs, review snapshots, confirmed launch dates, contributions, publication permissions, chat messages and reactions support the club’s core flow. Manual review notes remain private. We keep short-lived onboarding drafts so your website and TrustMRR URL follow your magic link across devices. Login tokens are stored hashed, expire quickly and work once.

We record deliberate website/X link openings separately from members’ action confirmations. A click is not evidence of product use or a verified follow. We do not scrape TrustMRR or X, import outside community members or retain raw IP addresses for tracking. Rate-limit identifiers expire and are cryptographically derived.

The live “online” counter uses a random number that exists only while a page is open. We store a keyed hash of it for about ten minutes; no cookie, device storage, IP address or account link is involved. The public activity feed is anonymous; approved members see the names of other approved members. It never lists who followed whom on X.

We measure visits with DataFast in its cookieless mode. It sets no cookies; while a tab is open it keeps a temporary session ID in that tab’s session storage, which your browser deletes when the tab closes. DataFast receives the page address, referrer, browser details and your IP address to count visits and estimate an approximate location. It is never loaded on sign-in or unsubscribe pages, because their links contain private codes. The globe on the home page shows only rounded locations from the last ten minutes, never who visited or which page.

We also count page views with Vercel Web Analytics, which works without cookies. It receives the page address, the referrer and the technical details of your browser’s request. Before a page view is sent we remove everything after the page path (invite codes, product links, fragments) except campaign tags such as utm_source, and sign-in and unsubscribe pages are never reported.

If you enter a referrer, we match their email address or invite code against existing members once your account is created; the entry is kept only with your ten-minute sign-in draft. If you submit your club post on X, we store its link.

Public and private

Your approved launch page includes your name, optional photo, bio, product details, dated revenue evidence and permitted LOVEs. Each public experience includes its stated relationship and point/free-access disclosure. Private TIPs can only be read by their author, product owner and authorised admins. The member chat is accessible only to approved active members and alumni.

Your controls

Edit your profile in My Profile. Product or evidence-source changes require another manual review. Correct or withdraw your public LOVE permission on the product page; withdrawing does not remove legitimately earned points. We notify the founder to remove reused copies. We cannot automatically recall independent copies.

You can edit or delete your chat messages. Optional community launch digests are off until you choose them and include an unsubscribe link. Essential sign-in and reserved-launch notices are separate from digests.

Service providers

Neon stores application data in the EU. Vercel hosts the app. Brevo sends transactional emails using an authenticated sender. DataFast and Vercel Web Analytics provide cookieless visit statistics. Avatar images are resized and reencoded to remove metadata. We do not use advertising trackers, third-party session replay or analytics on sign-in pages.

Product icons load directly from the saved product website, without a third-party icon provider or a referrer. That website receives the browser’s image request. Unreviewed product websites are hidden from public pages, including their icons.

Retention and requests

Launch pages are intended to remain available after a launch; your publication permissions still apply. Short-lived drafts, expired credentials and rate-limit records are cleaned up. Security and moderation records are retained only as useful to operate and protect the club. Ask the operator for access, correction, deletion or an account export.

Contact Mees through the founder’s public profile. Do not send passwords, login links or API keys in messages.