Privacy policy
ZapZen does not collect your data.
The extension runs only in the WhatsApp Web tab, on your computer. It has no server and no account, and sends data to no one: what goes out is only what you yourself send through WhatsApp. Below is, in detail, what it reads on the screen, what it stores and where.
Version of October 20, 2026
- No server of oursYour chats never pass through Codexsteel or anyone else.
- No account, no adsNo sign-up and no usage tracking.
- You delete everythingUninstalling the extension deletes what it stored.
Who we are
ZapZen is made by Codexsteel, a brand of D.R. DO VALE LTDA, Brazilian company registration (CNPJ) 60.089.949/0001-31, Av. Paulista, 1106, 16th floor, room 01, Bela Vista, São Paulo/SP, 01310-914, Brazil.
Contact for any privacy matter: contact@codexsteel.com.
ZapZen is not a WhatsApp or Meta product. What happens inside WhatsApp (your chats, its servers) is governed by WhatsApp's own policy.
What the extension reads on the screen
It reads what WhatsApp Web already shows, as you do, and only for the features that are on. Some come on at install: colored messages, translate, the country and local time of unsaved numbers, labels in the chat header, the notice of who is typing and the "I can't listen to audio" button (which only offers; sending on its own, only if you turn it on).
Names and previews in the chat list: names, for labels, nicknames, locked chats, cleanup and the chat spreadsheet; previews, to tell you who is typing or recording and offer the "I can't listen to audio" reply, for the online notice, suggested replies and deleted messages. Previews stay only in the tab's memory.
The header of the open chat: the name or number, to show the country and local time, link a reminder or a scheduled message to the chat, and fill in the {name} of quick replies.
Messages in the open chat: to hide received voice messages; for the colors of colored messages; to remember the text of deleted messages you received, if you turn it on; in chats with cleanup, the date and star of each message; and, in every open chat (except with ZapZen paused), to find protected-chat messages by their invisible characters and decrypt them.
The text you select: when you release the mouse with text selected, to show the "Translate" button. Chrome itself translates it, on this computer.
What the extension stores, and where
In your Chrome account (the browser's synced storage): which features are on or off (except pause, which belongs to this computer), the blur strength and the "I can't listen to audio" text. With Chrome sync on, they follow you to your other computers, through Google; without it, they stay only on this one. Nothing from your chats goes there.
Only on this computer, with chat names: labels and labeled chats; nicknames and photos you chose; scheduled messages (the chat, the text and the time); locked chats; chats with cleanup (the period and how many were deleted); reminders linked to a chat; and, if turned on, deleted messages you received (for 7 days, at most 300) and who got the automatic "I can't listen to audio" reply (for 24 hours).
Only on this computer, without names: quick replies, suggestion rules, the background image, the times of automatic sends (24 hours, for the cap) and a digest of the chat password, made to check the password without keeping it. The password itself is never stored.
Only on this computer, if you choose to: the secret code of WhatsApp's own "Locked chats", when you turn on automatic sending of a scheduled message to one of them. It is not included in the backup, and "Esquecer" (Forget, in Password per chat) deletes it.
Only on this computer, for protected chats: per chat, the keys (without extra encryption: whoever uses this Chrome and opens the extension's developer tools can read them), the security codes, who asked to protect and which key-agreement messages were already read. They are not included in the backup; "Apagar as chaves deste computador" (Delete the keys on this computer) deletes them.
In colored messages: when you paint part of the text, ZapZen adds invisible marks to the message, which goes through WhatsApp like any message of yours. Anyone with ZapZen sees the color; everyone else sees plain text.
None of this leaves the computer. Uninstalling the extension deletes what is stored on it.
What stays on the WhatsApp page
To show on the screen, the decrypted text of protected chats, the "Dizia" (It said) of deleted messages, nicknames and label names stay on the WhatsApp Web page. WhatsApp Web itself, and other extensions you allowed on it, can read them.
The protected chat (experimental)
If you protect a chat, the extension creates encryption keys and keeps them only on this computer. Protected messages travel through WhatsApp itself, as your ordinary messages, to the chat you chose; Codexsteel receives neither the keys nor the messages.
Once you ask or accept to protect a chat, the key-agreement messages go out on their own in that chat. The request carries an invitation with the address of this ZapZen page, for whoever doesn't have it yet.
On the phone, in backups and in notifications, each message shows up only as "Protected message". What the other person replies from the phone, without ZapZen, goes out unprotected.
What runs on its own
Sending (only if you turn it on): the "I can't listen to audio" reply with "Enviar sozinho" (Send on its own) and scheduled messages go out through your WhatsApp, to the chats you chose. Each kind is capped at 10 per day and 4 per hour, and never goes out while you are typing or over a draft of yours. To a locked chat, only the scheduled message you allowed when scheduling (and, in automatic mode, WhatsApp's own "Locked chats", with your code). "Send on its own" opens the chat: it gets marked as read, and whoever recorded knows your WhatsApp Web is open.
Protected chat: the key-agreement messages, once you ask or accept to protect.
Cleanup (only if you turn it on): "Delete for me" on messages older than the period, once a day, in the chats you chose. Never "Delete for everyone".
The permissions the extension asks for
Access to web.whatsapp.com: that is where it works. It does not run on any other site.
Storage: to keep your choices, as described above.
Scripting: to load the panel only when you open it, from the extension's own files. No code comes from the internet.
What we never do
We do not send data over the internet: not to Codexsteel, not to anyone. There is no usage tracking, advertising, selling or sharing of data.
We do not tamper with WhatsApp's internals: the extension only reads and adjusts what appears on the screen.
The use of information received by the extension will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Your rights (LGPD and GDPR)
Since nothing reaches us, Codexsteel holds no data of yours to show, correct or delete. You control everything on your own computer: the extension's panel shows and deletes what is stored, "Backup" exports your preferences, and uninstalling deletes everything.
Questions or requests: contact@codexsteel.com.
Changes to this policy
If the extension starts doing something different, this page changes first, with the new date at the top. A change that would take data off your computer only happens with a notice inside the extension.