Skip to main content
XOR

Privacy Policy

XOR Sciences ("XOR", "we", "us") is the data controller for this website. This policy explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable privacy laws.

Legal Basis for Processing

Where the GDPR applies, we process personal data on the following legal bases:

  • Consent (Art. 6(1)(a)) - optional analytics, session replay, advertising measurement, and subscriptions to updates
  • Legitimate interests (Art. 6(1)(f)) - responding to enquiries, coordinating security reports, and maintaining website security

Data We Collect

When you submit the contact form or subscribe, we collect your email address and any name or message you provide. If you email security@xor.tech, we receive your email address and the information you choose to include. Optional session replay, analytics, and advertising measurement run only after you grant analytics consent. When you submit an address while that consent is active, we associate a pseudonymous PostHog identifier derived from a hash of the address with prior page views. For business email addresses, we also record the email domain as an indication of possible organization affiliation. The domain does not verify your identity or employment. Pseudonymised data remains personal data. The full email address is not sent to PostHog for this association. If enabled, Microsoft Clarity also receives the identifier and email domain.

Service Providers

We use the following service providers to operate this website:

  • Vercel Inc. (hosting, edge network) - US, with EU edge nodes
  • PostHog Inc. (product analytics) - EU data region (eu.i.posthog.com)
  • Plausible Analytics (website analytics) - EU, cookie-free
  • Microsoft Clarity (heatmaps, session replay, rage click detection) - US, consent-required
  • Google Analytics (page view and event tracking) - US, Google LLC
  • Google Ads (advertising conversion measurement, googleads.g.doubleclick.net) - US, Google LLC
  • Resend Inc. (email delivery and subscription management) - US

Sub-processors that process customer-submitted data (e.g. Google Cloud, and LLM inference providers such as Anthropic, OpenAI, and Google Vertex AI) are governed by our Data Processing Agreement and listed in our Sub-processor Register.

How We Use Your Data

We use email addresses to answer enquiries, assess and coordinate security reports, and send product updates or benchmark reports when requested. With analytics consent, we use browsing data to measure website engagement and advertising conversions.

Data Retention

For information about data retention or to request deletion, contact privacy@xor.tech.

Your Rights

Where the GDPR applies, and subject to its conditions, you have the right to:

  • Access your personal data and receive a copy
  • Rectify inaccurate personal data
  • Request erasure of your personal data
  • Request restriction of processing
  • Object to processing based on legitimate interests or for direct marketing
  • Exercise your right to data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, email privacy@xor.tech.

Cookies and Similar Technologies

This site uses a cookie consent banner. You can accept or decline analytics cookies at any time. Your preference is stored in local storage and a first-party cookie.

These optional services may load after you grant analytics consent:

  • Vercel Analytics and Speed Insights - page views and website performance
  • Microsoft Clarity - heatmaps, session replay, rage/dead click detection
  • Google Analytics - page views, event tracking, audience insights
  • Google Ads - advertising conversion measurement
  • PostHog (eu.i.posthog.com) - product analytics, EU data region

Google Analytics, Google Ads and Microsoft Clarity are disabled by default. They load only when explicitly enabled and analytics consent is active. Global Privacy Control is treated as declining optional analytics.

Plausible Analytics is cookie-free and runs only after you grant analytics consent.

To withdraw consent, select "Manage cookies" in the footer. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Contact

General privacy questions: privacy@xor.tech