Skip to content

Privacy Policy

Last updated: March 21, 2026

This Privacy Policy explains how XBio ("we", "us", "our") collects, uses, and protects your information when you use our service at xbio.gg.

1. Information We Collect

Account data: Name, email address, and profile picture (via OAuth providers or direct signup).

Profile content: Username, bio, links, theme configuration, and any media you upload.

Usage analytics: Page views, link clicks, visitor IP addresses (for analytics and XP calculation), referrer URLs, and device type. This data is stored in our database and associated with your profile.

Payment data: Payment processing is handled by Stripe. We store a Stripe Customer ID but never see or store your raw card numbers.

Email subscribers: If you use the email capture feature on your profile, subscriber email addresses are stored in our database and are accessible only to you.

2. How We Use Your Information

  • Provide, operate, and improve the Service
  • Process payments and manage your subscription
  • Send transactional emails (verification, password reset, purchase receipts)
  • Send the welcome email on signup
  • Calculate profile analytics and XP for gamification
  • Enforce our Terms of Service and prevent abuse

3. Third-Party Services

We use the following third-party services that may process your data:

  • Neon (neon.tech) — Serverless PostgreSQL database provider. All user data is stored on Neon infrastructure.
  • Stripe (stripe.com)— Payment processing. Stripe's privacy policy governs payment data. We receive only a customer ID and payment status.
  • Resend (resend.com) — Transactional email delivery. Your email address is shared with Resend to deliver verification and notification emails.
  • Sentry (sentry.io) — Error tracking and performance monitoring. Sentry may capture anonymized error reports including browser type, URL, and partial stack traces. Personal data in error payloads is minimized.
  • Vercel (vercel.com) — Hosting and deployment. Vercel Analytics may collect aggregate page view statistics and Core Web Vitals data.
  • Google / GitHub OAuth — If you sign in via Google or GitHub, your name, email, and profile picture are provided to us by those services under their respective privacy policies.
  • Vercel Blob Storage— Uploaded files (avatars, banners) are stored on Vercel's blob storage service.

4. Cookies

We set the following cookies:

  • xbio.session_token — Authentication session cookie. Required for login. Expires with your session or after 30 days.
  • Theme preference — Stores your light/dark mode preference. No expiry.

Third-party cookies may be set by Stripe.js when you make a purchase. We do not use advertising cookies. For a full list, see our Cookie Policy.

5. Data Retention

We retain your account data for as long as your account is active. Analytics events (views, clicks) are retained indefinitely for your profile analytics. You can request deletion at any time.

6. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

  • Access — Request a copy of the personal data we hold about you
  • Portability — Receive your data in a structured, machine-readable format
  • Erasure — Request deletion of your account and all associated data
  • Rectification — Correct inaccurate personal data
  • Objection — Object to processing of your personal data

To exercise these rights, email privacy@xbio.ggwith subject "Data Request".

7. Data Security

We implement appropriate technical measures including HTTPS encryption, hashed passwords, and database access controls. No method of transmission is 100% secure; use the Service at your own risk.

8. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have, contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on the Service. Continued use after changes constitutes acceptance.

10. Contact

Questions about this policy? Contact us at privacy@xbio.gg or visit our Contact page.