Privacy Statement

1. What this statement covers

This statement explains what information this website — Xatoxi's public site — processes when you visit it, and what we do with it. The data controller is Xatoxi LTD, a company incorporated in the Commonwealth of The Bahamas.

It does not cover the Xatoxi network or the applications. The network is a decentralized system: the data travelling across it is end-to-end encrypted and does not pass through servers of ours. Their terms are described in each application's documentation.

Nor does it cover third-party sites we may link to, or the social networks where we have a presence. Each has its own policy and we encourage you to read it.

2. What we do not collect

It is worth starting here, because it is what sets us apart from most of the sites you have visited today.

This site uses no cookies. None, neither our own nor third parties'. That is why you will see no cookie banner: there is nothing to consent to.

We use no analytics or measurement tools. There is no Google Analytics, no tracking pixels, no third-party scripts of any kind. We do not know how many pages you saw, how long you stayed or which site you came from.

We build no advertising profiles or marketing segments, we do not buy information about you from third parties, and we do not combine anything you do here with any other source.

3. What is stored on your device

This site stores a single item in your browser's local storage: the brand colour you pick in the selector in the corner. It is stored under the name `xatoxi-brand` and its only possible value is the name of one of the available colours.

That item never travels to any server, does not identify you and is not shared with anyone. It exists so the page looks the way you left it next time you come back. You can delete it at any moment by clearing your browser's site data, and you will lose nothing but that preference.

4. Technical connection information

Like any web server, ours records the technical data needed to deliver the page and keep the service running: IP address, date and time, resource requested, response code and the browser details your own device sends with the request.

These logs are used exclusively to operate the service, diagnose faults and protect it against abuse or attack. They are not used to profile visitors and are not cross-referenced with any other information.

They are kept for as long as those purposes require and deleted afterwards.

5. If you write to us

The site offers a contact form and a newsletter subscription. The data you enter in them is what you choose to give us.

In the contact form: reason, first name, last name, email address, phone, country and your message. Only the reason, the first name, the email and the message are required; the rest is asked for so we can answer you better, and you may leave it blank. The purpose is to handle your enquiry, and nothing else.

In the newsletter: only your email address, and only to send you the communications you asked for. You can unsubscribe at any time by following the instructions included in every message.

We do not use that data for advertising, we do not sell it, and we do not pass it to third parties except where legally required.

We keep the messages we receive for as long as handling your enquiry requires, and the newsletter data for as long as you remain subscribed.

6. Images and content delivery

The images on this site are served from our own content delivery network. Loading them makes your browser issue a request to that server, which records the same technical data described in section 4.

We embed no typefaces, maps, videos or any other resource hosted by third parties, precisely so that visiting this page does not mean connecting to servers we do not control.

7. Your rights

You may ask us for access to the personal information we hold about you, for its correction if it is inaccurate, or for its deletion. You may also object to certain processing or ask that it be restricted.

As a Bahamian company, we process personal information under the Bahamas Data Protection (Privacy of Personal Information) Act. If you write to us from the European Economic Area or the United Kingdom, the rights granted by their data protection law may also assist you.

To exercise any of these rights, write to us through the contact form on this site, stating the reason for your request.

8. Minors

This site is not directed at minors under the law applicable in your jurisdiction, and we do not knowingly collect information from people below that age.

9. Changes to this statement

We may revise this statement from time to time. The date shown at the top indicates when it was last modified, so you can tell at a glance whether anything has changed since your last visit.

Where a change is material, we will announce it visibly on the site before it takes effect.