| LINK CHECKED · Verified: 2026-07-25T17:42Z | Community directory · Independent |
Privacy Policy
Primary endpoint
http://torzon4lwbzadv33szkmxcskjixn6stm6aoq3wkcytc3irxqemyiimyd.onionThis site is an independent informational resource. We do not operate TorZon Market, nor do we store or process any market-related data. Below is how we handle visitor information on this directory.
Last updated:
Affiliation & Scope
TorZon Market Mirrors is not affiliated with TorZon Market. We provide verified mirror links and operational status as a public service. The market itself operates under its own governance and privacy policies.
Risk
Visitors may confuse this directory with the market, leading to misplaced trust or data exposure.
Risk level: MEDIUM
Mitigation
Every page carries a disclaimer in the footer. We avoid market-specific branding in navigation and use distinct visual cues (e.g., "Mirror Directory" in the header).
Data Collected
We collect minimal data necessary to operate the directory and ensure security. No personal information is stored unless voluntarily submitted (e.g., via the contact form).
Server Access Logs
- IP address (anonymized after 30 days)
- User agent string
- Referrer URL
- Timestamp of request
- Requested page
User-Submitted Data
- Comments: author name, email (if provided), comment text, timestamp
- Contact form: name, email, message
- Search queries (stored for 7 days, then purged)
Risk
Logs could theoretically be used to correlate visitor activity, especially if combined with other data sources.
Risk level: LOW
Mitigation
Logs are retained for 30 days only. IP addresses are truncated to /24 for IPv4 and /48 for IPv6 after 24 hours. No third-party analytics or tracking scripts are used.
Data Retention
We retain data only as long as necessary for operational or legal purposes. Retention periods are strictly enforced.
- Server access logs
- 30 days
- User comments
- Until removed by user or moderator
- Search queries
- 7 days
- Contact form submissions
- 90 days (for follow-up purposes)
Risk
Longer retention periods increase the risk of data exposure in the event of a breach.
Risk level: LOW
Mitigation
All data is encrypted at rest. Access is restricted to administrators with PGP-encrypted keys. Automated purging scripts run daily.
Data Sharing
We do not share, sell, or transfer visitor data to third parties. The only exceptions are:
- Legal requests from law enforcement (with a valid court entry)
- Security incidents (e.g., DDoS mitigation, where IP data may be shared with hosting providers)
Risk
Legal requests could compel disclosure of visitor data, especially in jurisdictions with weak privacy protections.
Risk level: MEDIUM
Mitigation
We operate under a jurisdiction with strong privacy laws. Data minimization practices ensure we have little to disclose. All requests are reviewed by legal counsel.
Cookies & Tracking
We use a single session cookie to maintain login state for administrators. No advertising cookies, tracking pixels, or third-party scripts are used.
Session Cookie
- Name:
session - Purpose: Maintain admin login state
- Expires: When browser closes
- Secure: Yes (HTTPS-only)
- HttpOnly: Yes
Third-Party Content
We embed no third-party content (e.g., YouTube, Google Fonts). All assets are self-hosted. The only external requests are to the Tor network for mirror verification.
Risk
Cookies could be intercepted if the connection is compromised (e.g., via a malicious exit node).
Risk level: LOW
Mitigation
The cookie is marked Secure and HttpOnly, preventing JavaScript access. It is also bound to the session IP address.
Visitor Rights
Under GDPR and CCPA, you have the right to access, correct, or delete your data. You may also request a copy of your data or object to its processing.
-
Request Access
Email
[email protected]with the subject "Data Access Request". Include your IP address or any identifiers you used when submitting data. -
Verify Identity
We will respond with a PGP-encrypted message containing a verification token. Reply with the token to confirm your identity.
-
Receive Data
We will provide a copy of any data we hold about you within 30 days, encrypted with your PGP key if provided.
Risk
Requests could be spoofed by third parties, leading to unauthorized data disclosure.
Risk level: MEDIUM
Mitigation
All requests require PGP verification. We never disclose data based solely on an email claim. Our PGP fingerprint is published on the Canary page.
Third-Party Content
This site references TorZon Market and other darknet markets for informational purposes. All trademarks and service marks are the property of their respective owners.
Important
We do not endorse or affiliate with any market. Links to TorZon Market are provided for verification purposes only. Always conduct your own due diligence before accessing any darknet service.
Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be announced on the News page and via the site banner.
- Last major update
- June 2024
- Notification method
- Site banner (7 days)
- Effective date
- Immediately after banner removal
Mirror Authenticity Check
Paste any .onion address claiming to be a TorZon Market mirror. We will verify it against the market's documented PGP signing key.
Contact Us
For privacy-related inquiries, email [email protected] or use the contact form. For sensitive requests, encrypt your message with our PGP key (fingerprint on the Canary page).