Privacy Policy
We don't use cookies or advertising trackers on this website, we don't sell your data, and we collect the minimum we need to run the site, fulfil purchases, and understand which content brings people to us.
Xascada ("we," "us") operates xascada.com and the Xascada application. Questions about this policy: support@xascada.com.
What we collect
Website analytics — cookieless, and no visitor tracking
We run our own privacy-preserving analytics. We do not set cookies or use
localStorage for visitors, and we use no third-party trackers. For each visit we
record the pages viewed, the referring link, any UTM parameters on the link you arrived through,
an approximate location (country, region, city), and your device, browser, and OS.
Approximate location is derived from your IP address. Your raw IP is processed in memory only, used to look up a coarse location, and then discarded — we do not store it. We group visits using a daily-rotating, salted, anonymous value, which is not a cookie and does not track you across sites or across days. Because nothing persistent identifies you, no consent banner is required for this.
Purchase information
Purchases are processed by Polar, our merchant of record. You provide your name, email, and payment details to Polar; we do not see or store full payment-card numbers. We receive the order confirmation and limited details (such as email, country, and order ID) needed to deliver and support your licence. To attribute a sale to the visit that led to it, we pass a single, random, per-checkout identifier to Polar at checkout; it is ephemeral, is not a cookie, and is not used to follow you across days or sites.
Email — only if you opt in
If you subscribe to updates, we store your email address to send the messages you asked for. You can unsubscribe at any time via the link in every email.
Licence and entitlement data
Your licence key and its activation status.
Account session
When you sign in at /account, we set a single functional session cookie so
you stay logged in. It is strictly necessary for that feature and is not used for
analytics or advertising.
Support messages
If you email us, we keep that correspondence so we can help you.
How we use it
To operate and improve the site; to fulfil purchases and deliver and validate licences; to send opted-in updates; to understand which content and channels bring people in (via UTM parameters); and to prevent fraud and abuse.
Legal bases (GDPR / UK GDPR)
Legitimate interests (privacy-preserving analytics and security); performance of a contract (fulfilling your purchase and licence); and consent (marketing email, which you may withdraw at any time).
Who we share it with
Only service providers acting on our behalf: Polar (payments / merchant of record), our hosting and infrastructure provider (Railway), and, if you opt into email, our email provider. We do not sell personal information.
Retention
Raw analytics events are retained for up to 24 months, after which they are aggregated into anonymous summaries and the detail is deleted. Purchase and licence records are kept as long as needed for support, warranty, tax, and legal obligations.
Your rights
Depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal data. To exercise them, contact support@xascada.com. California residents: we do not sell or "share" personal information as those terms are defined under California law. EU / UK residents: you may also lodge a complaint with your supervisory authority.
International transfers
We and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers. [Counsel to confirm the specific transfer mechanism — e.g. EU Standard Contractual Clauses / UK Addendum — for the final hosting and email vendors.]
Children
Xascada is not directed to children, and we do not knowingly collect their personal data. [Counsel to set the minimum age — typically 13, or 16 in parts of the EU — for the jurisdictions you serve.]
Security
We use reasonable technical and organisational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Changes
We may update this policy; we'll post the new version here with a revised effective date.
Contact: support@xascada.com
This policy describes our practices in good faith and reflects how the site and app actually work. It is not legal advice. [A qualified lawyer in your jurisdiction should review before publication.]