Privacy Policy
Effective Date: June 13, 2026
Welcome to XANITAX ("we," "our," "us"). We are committed to protecting your privacy and handling your personal data transparently and securely. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data when you visit our website or use our services.
1. Information We Collect
1.1 Information You Provide Directly
- Account Registration: When you create an account, we collect your chosen username, email address, and a securely hashed password. We do not store your plain‑text password.
- Contact Form: If you send us a message via the contact page, we collect your name, email address, subject, and message content. This information is used solely to respond to your inquiry and is never shared.
- Newsletter Subscription: If you opt into our newsletter, we store your email address. You can unsubscribe at any time by contacting us.
1.2 Information Collected Automatically
- Log Data: Like most websites, our servers automatically record certain information when you visit XANITAX. This may include your IP address, browser type, referring/exit pages, operating system, date/time stamps, and clickstream data. This data is stored in temporary server logs and is used only for security analysis and traffic monitoring. It is deleted after a maximum of 30 days.
- Age Verification: We set a strictly necessary session cookie to remember that you have confirmed you are 18+. This cookie contains no personal data and expires after 30 days.
- Authentication & Security: We use session cookies and, if you choose "Remember Me," a persistent token cookie to keep you logged in. These cookies contain a random identifier, not your personal details. You can delete them at any time via your browser settings.
- PIN Attempts & Rate Limiting: We store a count of failed PIN entries linked to your IP address (or user account if logged in) to prevent abuse. This data is retained for a maximum of 24 hours after the last failed attempt.
2. How We Use Your Information
We use the collected data exclusively for the following purposes:
- To create and maintain your account.
- To provide you with access to the content sets you have unlocked.
- To respond to your inquiries and support requests.
- To send you important account‑related notices (e.g., password reset emails).
- To enforce our Terms of Service, including rate limiting and abuse prevention.
- To analyze aggregated, anonymized traffic data to improve our site performance.
We never sell, rent, or trade your personal information to third parties.
3. Third‑Party Services
XANITAX relies on a few trusted external services to function. These services may process limited data on our behalf:
- ImgBB – We upload preview images to ImgBB so they can be served from a fast CDN. ImgBB’s privacy policy applies to those images, but we never upload any personal data alongside them.
- Catbox.moe / GoFile.io – Our password‑protected ZIP files are hosted on these services. No user data is transmitted; only encrypted content files are stored.
- GoogieHost – Our web hosting provider. Standard server logs (IP addresses, access times) are kept by GoogieHost for operational purposes. Their privacy practices are available on their website.
- Google Fonts – We load fonts from Google Fonts via a CDN. Google may log your IP address and browser details as part of the font request. Google’s privacy policy applies.
We do not use any advertising networks, tracking pixels, or analytics services that build user profiles.
4. Cookies
We use only essential cookies to operate the site:
- Session Cookie (PHPSESSID): Maintains your login state and CSRF protection. Expires when you close your browser.
- Age Verified Cookie: Remembers your age confirmation for 30 days so you don’t have to re‑verify on every visit.
- Remember Me Token: Stored for 30 days if you choose to stay logged in. Contains a random string, not your password.
You can disable cookies in your browser settings, but doing so may prevent you from logging in or unlocking content.
5. Age Verification
Access to XANITAX is strictly limited to individuals aged 18 years or older. When you first visit our site, you must actively confirm that you are at least 18. This confirmation is stored in a cookie (and session) for 30 days. We do not collect any government‑issued identification or perform any background checks. By entering the site, you represent that you are of legal age in your jurisdiction to view adult‑oriented content.
6. Data Retention
- Account Information: Retained as long as your account is active. You may request deletion at any time (see Section 7).
- Contact Messages: Stored for up to 12 months after resolution, then deleted.
- Server Logs: Automatically rotated and deleted within 30 days.
- PIN Attempt Records: Kept for a maximum of 24 hours after the last failed attempt to prevent brute‑force attacks.
- Newsletter Emails: Stored until you unsubscribe.
7. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: You can request a copy of the personal data we hold about you.
- Rectification: You can ask us to correct any inaccurate data.
- Erasure: You can request that we delete your account and all associated data. Send an email to anita909wilson@gmail.com with "Data Deletion Request" in the subject line.
- Restriction: You can ask us to limit how we process your data.
- Objection: You have the right to object to processing based on legitimate interests.
- Data Portability: You can request a machine‑readable export of your data.
To exercise any of these rights, please contact us via our contact page or directly at anita909wilson@gmail.com. We will respond within 30 days.
8. Security
We implement industry‑standard security measures to protect your data:
- All connections are forced over HTTPS (SSL/TLS encryption).
- Passwords are hashed using bcrypt with a cost factor of 12 and are never stored in plain text.
- CSRF tokens protect all forms.
- Rate limiting is applied to login and PIN verification attempts.
- Our database uses prepared statements to prevent SQL injection.
However, no method of transmission over the Internet is 100% secure. We encourage you to use a strong, unique password and to log out after using shared devices.
9. International Data Transfers
XANITAX is hosted on GoogieHost, whose servers may be located in various countries. By using our site, you consent to the transfer of your data to these servers. We take appropriate safeguards to ensure your data remains protected regardless of location.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Effective Date" at the top will be updated accordingly. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please reach out:
- Email: anita909wilson@gmail.com
- Telegram: @bad_b_anita
- Signal: xANNITAx on Signal
- Contact Form: /contact.php
Last updated: June 13, 2026