1. Introduction
Welcome to xosend.com. This Privacy Policy explains how we collect, use, and protect information when you access our website, which is designed to allow two peers to connect using WebRTC and a signaling server, or a TURN relay server as an alternative when a peer-to-peer connection is unsuccessful. We are committed to ensuring that your privacy is respected and protected. By using our site, you agree to the practices described in this Policy.
2. Data Collection and Retention
To ensure the ongoing safety and integrity of our service and to protect all users from malicious or abusive activity, we process and retain limited metadata, specifically your IP address, ICE candidates, total bandwidth used per session, and session times. This data is essential for the functionality of our real-time communication service and for the effective detection and prevention of patterns of abuse, such as spamming, harassment, or denial-of-service attempts.
Given the evolving nature of online threats and the need for adaptive security measures, we determine the retention period for this data based on criteria directly related to the active monitoring and investigation of suspicious patterns. This means that while data is typically purged after a relatively short period, we reserve the right to retain specific data points for a longer duration when they are directly implicated in ongoing investigations into potential abuse or are necessary to implement abuse prevention measures. We commit to retaining this data for no longer than is strictly necessary to fulfill these security and operational purposes, and it is subject to regular review and automated deletion where possible, ensuring data minimization remains a core principle.
3. Use of Data
The data we collect is used solely for the purposes of:
- Facilitating the operation of our WebRTC peer-to-peer and TURN connections.
- Enhancing the security and reliability of our site.
- Monitoring and managing network traffic and performance.
- Providing the site's services through the use of cookies and similar technologies.
- Using cookies for analytics, security, and service improvement.
We do not use, share, or sell your information for any marketing or third-party advertising purposes.
This site uses cookies and similar technologies to provide its services. Some cookies are essential for the site to function, while others may be used to improve performance, enhance security, and analyze usage. Where required by law, you will be asked to consent to non-essential cookies, and you may manage or withdraw your consent at any time through your browser settings or our cookie management tool. Details of the types of cookies used, their purposes, and retention periods are provided in our Cookie Policy. This Privacy Policy and Cookie Policy will be updated to reflect any changes in cookie usage.
We use Google Analytics 4 (GA4) to understand how visitors engage with our site. This service uses cookies to collect and process data such as page views, scroll depth, and basic device information. We have configured GA4 to use IP anonymization (default in GA4) so that your full IP address is never stored by Google. The information generated by the cookie about your use of the website is typically transmitted to and stored by Google on servers in the United States.
Google acts as our Data Processor for this analytics data. We have entered into a Data Processing Amendment with Google to ensure your data is handled in accordance with GDPR standards.
To provide visitors with more choice on how their data is collected by Google Analytics, you can use the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout. This prevents Google Analytics JavaScript from sharing information with Google about visit activity.
4. Use of reCaptcha v3
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
We use reCAPTCHA v3 to protect against spam and abuse. reCAPTCHA analyzes interactions on our site to distinguish between humans and automated bots. This involves the collection of information such as IP address, device and browser details, and user interaction data, which is transmitted to Google for this purpose. We rely on our legitimate interest in securing our website and preventing fraudulent activity as the legal basis for this processing.
5. Data Storage and Security
We take the security of your data seriously. We have implemented standard technical and organizational measures to safeguard that data from unauthorized access, disclosure, or loss.
6. International Considerations
If you are accessing our website from outside the European Union (EU), please note that your data may be processed in accordance with this Privacy Policy once you use our site. We strive to comply with applicable data protection laws and to ensure that your data is handled with care and respect.
This Privacy Policy is governed by the laws of the European Union and Finland, where our site is hosted. Our Terms of Service are governed by the laws of England and Wales.
7. Future Changes
This Privacy Policy may be updated from time to time. When we make changes, we will update the "Effective Date" at the top of this page. The Privacy Policy is an integral part of our Terms of Service, and your acceptance of any new version is confirmed when you agree to the updated Terms of Service via the checkbox on our main page. If you do not agree with the changes, you should not use the site.
8. Your Rights
While we do not process personal data beyond the storage of IP address, ICE candidates, total bandwidth used per session, and session times described above, if you have any questions regarding your privacy or wish to learn more about our data handling practices, please contact us using the information provided below. We are committed to addressing any concerns you may have about your personal privacy.
9. Contact Information
For any questions, concerns, or further information regarding this Privacy Policy or our data practices, please contact us at:
- Email: contact@xosend.com