Privacy Policy

Last updated: September 15, 2026

XCX is a solo-developed, open-source programming language project. This policy explains what data the xcxlang.com website handles, what it deliberately does not collect, and what rights you have. The short version: this site runs without accounts, without cookies, without analytics, and without tracking.

1. Who is responsible

The website xcxlang.com and the XCX language project are maintained by the XCX maintainer (xcxlang-org). For any privacy question or request, write to contact@xcxlang.com or xcx.contact@proton.me.

2. What data is processed

Server access logs

Like virtually every website, the hosting provider records technical access logs (IP address, browser user-agent, timestamp, requested path). These logs exist for technical operation, security, and abuse prevention. They are not used for profiling or marketing, and their retention period follows the hosting provider's configuration.

Email correspondence

The contact page links email addresses instead of a web form. If you write to us, we process your email address and the content of your message for the sole purpose of replying. Correspondence is kept for as long as needed to handle the topic and is not shared with anyone.

Local browser storage

The site stores one small value in your browser's local storage: a marker of the latest news item you have seen, used only to highlight new entries on your next visit. It stays on your device and is never sent anywhere. The maintainer-only admin area uses browser session storage for an access key; this does not concern visitors.

3. What this site does not do

• No analytics, no tracking pixels, no fingerprinting.
• No advertising and no cookie banners, because there are no cookies.
• No user accounts, no registration, no profiling.
• No selling, renting, or sharing of personal data.
• No third-party CDNs or embeds: fonts and assets are served from this domain.

4. The Playground

The web playground at playground.xcxlang.com runs an interpreter inside your browser. Code you write and run there never leaves your device: there is no server-side execution and no upload. Sharing a session encodes it into the link itself.

5. Third parties

The only parties involved in operating this website are the hosting provider (technical access logs) and the email provider used for correspondence. If you visit our GitHub repository, GitHub's own privacy terms apply there. The PAX package registry at pax.xcxlang.com is a separate service with its own rules.

6. Your rights

Under the GDPR you have the right to access, rectify, or erase your personal data, restrict or object to its processing, and lodge a complaint with a supervisory authority (in Poland: the President of the Personal Data Protection Office, PUODO). Since this site stores almost no data about you, in most cases there is simply nothing to request. To exercise any right, email us.

7. Security

The site is served exclusively over HTTPS, contains no executable third-party code, and has no user-facing attack surface beyond the static files themselves. If you believe you have found a security issue, please report it by email rather than publicly.

8. Changes to this policy

If this policy changes, the "last updated" date above will change with it. Material changes will be reflected on this page before they take effect.