Privacy Notice

Last updated 24 October 2026.

This document is a draft. Please have it reviewed by a qualified person before relying on it. A Chinese version is in preparation.

1. Who we are

XMC Headquarters runs this site. You can contact us through our Discord community.

2. What we collect

When you sign up or sign in, we collect your email address and the technical data needed to sign you in, such as sign-in codes and session information. We also keep anything you choose to send us.

3. Why we use it

We use your email address to create your account, keep it secure and contact you about it. We do not send marketing unless you agree to it. Our legal bases are providing the account you asked for and our legitimate interest in keeping the site secure.

4. Who we share it with

We use service providers to run the site: Cloudflare for hosting and Supabase for sign-in and account data. They process data for us under their own terms. Your data may be processed outside the UK and Hong Kong, with appropriate safeguards.

5. How long we keep it

We keep your account data while your account exists. Ask us to delete it and we will.

6. Your rights

Under UK data protection law you can ask to see, correct or delete your data, restrict or object to its use, and ask for a copy. You can also complain to the Information Commissioner's Office (ICO). Similar rights apply under Hong Kong law where relevant.

7. Children

You must be 13 or older to create an account.

8. Cookies and storage

We only use browser storage that is needed to keep you signed in and to remember your language choice.

9. Changes

We may update this notice. The date at the top shows when it last changed.