Privacy policy

Version 1.0 · Effective 27 September 2026

Xenro operates xenro.biz from Singapore. This policy explains how we handle personal data when you browse the forum, create an account, request support or obtain our products. Our data protection contact is xenro.bizz@gmail.com. You can also use the contact form.

This policy covers this website. A Xenro add-on installed on another person's forum is operated by that forum's owner; consult that site's policy and the add-on's specific disclosures.

Data we collect

• Accounts: username, email address, password verification data, registration and login records, account preferences, permissions and any optional profile information you provide. Password verification data is stored as a hash, not as your readable password.
• Community activity: posts, resource reviews, reactions, uploaded files, profile content, direct messages, reports and moderation records.
• Support and correspondence: your messages, contact details, order references and diagnostic material you choose to send.
• Purchases: the account and product involved, order and invoice references, price, currency, payment method, payment status, download entitlement and refund or dispute records. Cryptocurrency records can include the network, wallet address, amount, transaction identifier and confirmations.
• Technical records: IP addresses, request times, browser or device information, requested pages, session identifiers, cookie preferences, security events and diagnostic errors. Some logs can include the URL or information submitted with a request.

We obtain data from you and your browser, forum activity, anti-spam checks and the payment or blockchain records used to confirm an order. A username and email are needed for an account. Order and payment details are needed to supply a paid download. Optional profile fields can be left blank. Do not send wallet private keys, seed phrases or account passwords.

Why we use it

We use these records to operate accounts and discussions, deliver downloads, confirm payments, maintain license entitlements, answer support requests, send requested activity notifications, investigate abuse and payment problems, secure the site and meet applicable record-keeping duties. A confirmed purchase can add your account to the Customer group; the group can be removed if no qualifying purchase remains.

We process data for these notified purposes with consent where required, or where applicable law permits processing without consent. Where European or UK data protection law applies, the relevant grounds may be performance of your account or purchase agreement, legitimate interests in site security and administration, legal obligations, and consent for optional activities that require it. We do not treat reading this policy as blanket consent to unrelated uses.

Activity and optional email settings are available in your account. Essential account, security and purchase messages may still be sent when necessary to provide the service. We do not sell personal data.

Public content and access

Public posts, reviews, profile information and attachments may be visible to visitors and indexed by search engines. Account privacy settings control the visibility supported by the forum. Email addresses and security IP records are not displayed as public profile fields.

Direct messages are available to their participants and are stored on the server; they are not end-to-end encrypted. Authorized administrators may access data where necessary for support, security, reports or legal obligations. Participants can copy or forward content they receive. Share sensitive support material only through an appropriate private channel and redact information that is not needed.

Services that receive data

• Hosting and email: infrastructure providers process site data to store, protect and deliver the service. Messages sent to our published Gmail address are processed by Google's email service under its privacy policy.
• hCaptcha: forms protected by hCaptcha send challenge responses and technical information, including an IP address, to the service to distinguish legitimate use from automation. Its privacy policy describes its processing.
• Stop Forum Spam: registration checks send the proposed username, email address and IP address to this service and receive spam-match information. Email hashing is not enabled in the current configuration. Automatic reporting of rejected registrations is disabled. See its privacy policy.
• Cryptocurrency verification: current payment methods are USDT on TRON and TON. CryptoPay queries TronGrid or TonAPI using receiving addresses, network information, time ranges and transaction identifiers to verify transfers. Exchange-rate requests to Coinbase contain the requested currency. These verification requests do not include your forum username, email or message content. A provider still receives connection metadata from our server.
• Linked and embedded content: loading an external image, video or website can disclose your IP address, browser information and other request metadata to its provider. Those providers apply their own policies.

We may also disclose relevant records when legally required or when necessary to investigate abuse, protect rights or resolve a payment dispute. We limit access to what is needed for the purpose. Automated security checks can flag or reject a registration; contact us if you believe a decision is wrong and want a person to review it.

Hosting, email, security and network services can process data outside Singapore. We remain responsible for the protections required for transfers under applicable law, including Singapore's Personal Data Protection Act where it applies. Contact us for information about a particular transfer. Public blockchain transactions are independently visible worldwide and cannot be erased by deleting a Xenro account.

Cookies and similar storage

The forum uses cookies and browser storage for login sessions, security, preferences and related functions. Security or embedded services may use their own storage. See the cookie information and any choices offered by the site or your browser. Blocking essential cookies can prevent login or other features. Google Analytics and advertising placements are not enabled in the current forum settings.

How long we keep data

• Accounts and content: retained while needed to provide the account, discussions and support. When you request closure or removal, we assess what can be deleted or anonymized and what must remain for a specific legal or operational reason.
• Orders and entitlements: retained while needed to provide purchased access and updates, handle refunds or disputes, and satisfy applicable accounting or legal duties. Closing an account does not erase every transaction record.
• Security logs: the forum's IP log cleanup is configured for 365 days. Routine web-server and PHP logs use daily rotation with 14 retained rotations. Other security and moderation records are kept according to their purpose, configured cleanup and any unresolved investigation.
• Backups: scheduled backups use a 14-day rotation. Separately retained recovery or investigation copies may last longer while needed for that purpose. Removal from active systems may therefore take additional time to pass through backup rotation. Backups are restricted to recovery and related administration.

We review retention against the purpose for which data is held and any legal need to keep it. We cannot control copies already made by other people, search engines or independent blockchain networks.

Your choices and requests

You can update supported profile fields, privacy preferences and email choices in your account. To request access, correction, account closure or deletion, withdraw consent, or raise a privacy concern, email xenro.bizz@gmail.com. Tell us your username and the request; do not send a password. We may ask for proportionate verification before releasing or changing account data.

Rights and exceptions depend on applicable law. Where available, you may also request restriction or portability and object to processing, including processing based on legitimate interests. Withdrawing consent does not invalidate earlier lawful processing and may prevent us from providing a feature that needs the data. If we cannot carry out a request in full, we will explain the reason and any available review route.

You may raise a concern with Singapore's Personal Data Protection Commission or another competent data protection authority. We handle requests within applicable legal time limits and will explain if further information or time is needed.

Security, age and policy changes

We use measures such as HTTPS, access controls and restricted backups to protect data. No online service can promise absolute security. If you suspect unauthorized access or accidental disclosure, contact us promptly.

Registration is intended for people aged 13 or older, subject to a higher age where applicable law requires it. If you believe a child has provided data without the required authorization, contact us so we can review and take appropriate action.

We date revisions to this policy and will notify users of material changes through the site or an appropriate account notice. If a new purpose requires consent, we will request it separately. The terms and rules govern forum use, and the product license governs use of Xenro software.