<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Rashar</title>
    <description>The latest articles on DEV Community by Rashar (@rashar).</description>
    <link>https://dev.to/rashar</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4054035%2Fbd350123-ba19-48f9-a086-688f37d70fd7.jpeg</url>
      <title>DEV Community: Rashar</title>
      <link>https://dev.to/rashar</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/rashar"/>
    <language>en</language>
    <item>
      <title>Everything Wrong With Zenovay, In Order</title>
      <dc:creator>Rashar</dc:creator>
      <pubDate>Thu, 30 Jul 2026 00:51:10 +0000</pubDate>
      <link>https://dev.to/rashar/everything-wrong-with-zenovay-in-order-4n0c</link>
      <guid>https://dev.to/rashar/everything-wrong-with-zenovay-in-order-4n0c</guid>
      <description>&lt;p&gt;Zenovay is a complete fraud. Here's every piece of it.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The founding story doesn't add up.&lt;/strong&gt; The &lt;a href="https://zenovay.com/en/about/" rel="noopener noreferrer"&gt;About page&lt;/a&gt; claims the platform launched in 2023. The domain zenovay.com wasn't &lt;a href="https://zenovay.com.whoswho/" rel="noopener noreferrer"&gt;registered&lt;/a&gt; until 2025-07-28.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The team doesn't exist.&lt;/strong&gt; All blog author profile pictures are AI-generated, flagged by SynthID, and the posts themselves are AI-generated. This includes "Engineering Lead Martin Hale."&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;There is no real company.&lt;/strong&gt; Every legal page, including the &lt;a href="https://zenovay.com/en/legal/impressum/" rel="noopener noreferrer"&gt;Impressum&lt;/a&gt;, lists the address as "Zenovay, Switzerland" with nothing else. Terms, Privacy, Cookies, and the DPA all use the same fake placeholder.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;The privacy claim is false.&lt;/strong&gt; Zenovay's blog claims cookieless tracking is the default with no cookies or similar. The &lt;a href="https://api.zenovay.com/z.js" rel="noopener noreferrer"&gt;script&lt;/a&gt; does the opposite of everything it claims:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Off by default&lt;/li&gt;
&lt;li&gt;Sets a 30-day tracking cookie&lt;/li&gt;
&lt;li&gt;Writes to localStorage and IndexedDB&lt;/li&gt;
&lt;li&gt;Sends a client-generated UUID as the visitor ID, contradicting the claim that "the tracker itself sends no identifier because it does not have one"&lt;/li&gt;
&lt;li&gt;Stores "returning visitor" history
&lt;strong&gt;The script does more than tracking.&lt;/strong&gt; It includes cross-domain tracking, session replays, heatmaps, error tracking, and adblock evasion through a randomized tracking endpoint.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;The people behind it are unverifiable at best.&lt;/strong&gt; The creator is &lt;a href="https://www.producthunt.com/@jasko_ctrl" rel="noopener noreferrer"&gt;Jasin Banovi&lt;/a&gt;, if that's even his real name. He claims to have launched it with a friend, &lt;a href="https://www.producthunt.com/@ranky" rel="noopener noreferrer"&gt;Rainer Rankwiler&lt;/a&gt;, whose profile picture is a GAN-generated face.&lt;/p&gt;

</description>
      <category>zenovay</category>
      <category>analytics</category>
      <category>fraud</category>
      <category>journalism</category>
    </item>
  </channel>
</rss>
