legal
Privacy Policy
xyn.wtf lets people build a public bio page. This policy explains what we store, why we store it, and who else touches it. It is written to be read, so it is short.
Who can use the site
You must be at least 13 years old to create an account. We ask for your date of birth at sign up to enforce this.
What we collect
- Account details. Your username and a password. The password is stored only as a salted hash, never in plain text.
- Email address. We ask for your email at sign up. We use it to send you a one-time verification code, to let you reset your password, and to contact you about your account. It is stored in a private table that only the service can read, it is never shown on your page or to other users, and we do not use it for marketing. Temporary and disposable email addresses are not accepted. Accounts made before email verification existed are asked to add and verify one.
- Date of birth. Used once to check your age, then kept in a private table that only your own account can read. It is never shown on your page or to other users.
- Profile content. Everything you add to your page: display name, bio, location, links, colours, badges, and any avatar, background video or image, and music you upload. This is public by design.
- Comments. Signed in members can leave short public comments on other members' pages. A comment shows the author's name and the time. Authors, the page owner and staff can delete it.
- Page views. A count of unique visitors to your page. To count each visitor once, we keep the time of the view, the visitor's country (read from the connection, so the profile owner can see which countries visit) and a salted one-way hash of the visitor's IP address, different for every page. It cannot be turned back into the address, and the address itself is not stored with it.
- Technical logs. Our hosts record standard request data such as IP address, browser type and timestamps for security and troubleshooting.
What we do not do
- We do not sell your data.
- We do not run advertising or third party analytics trackers.
- We do not read your private data except to operate the service, enforce the rules, or comply with the law.
Who else handles your data
- Hosting providers. We use third party services to run the site and store accounts and uploads. Uploaded files are public links, so anyone with the link can open them.
- Email delivery. Verification and password reset emails are sent through our email provider, which sees your email address and the message it delivers.
- Cloudflare Turnstile. The sign up form includes a Cloudflare human check, which receives your IP address and browser details to decide whether you are a bot.
- Icon service. Link icons are loaded from cdn.simpleicons.org when your page is viewed, so that service can see the visitor's IP address.
- Lanyard. If you add a Discord user ID, visitors' browsers request your live Discord status from api.lanyard.rest.
Cookies and local storage
We use your browser's storage to keep you signed in and to remember your light or dark theme. We do not use advertising cookies.
How long we keep it
We keep your data for as long as your account exists. If your account is deleted, your profile, links, email address and date of birth are removed from the database. Uploaded files and routine logs may remain for a short time in backups and hosting systems before they are purged.
Bans
If an account is banned for breaking the rules, its page is hidden and sign in is blocked. We may keep the account record and the reason so the ban can be enforced.
Your choices
You can edit or remove anything on your page from the dashboard at any time, and you can change your password there. To ask for a copy of your data or to have your account deleted, contact us through an administrator of the site. Copyright and other legal matters go to legal@xyn.wtf; see our Terms and Copyright Policy.
Children
xyn.wtf is not for anyone under 13. If we learn that an account belongs to someone under 13, we will delete it.
Changes
If we change this policy we will update the date at the top. Continuing to use the site after a change means you accept the updated policy.