Privacy Policy

Last updated October 26, 2026

Who we are

Xinsto Extension is run by NodeSpace Technologies, LLC (“we”, “us”), who is responsible for your information. Questions or requests: [email protected].

What we collect

When you sign up and use your account

• Your first name, last name, email address and access name.
• Your password, stored only as a one-way hash. We can't see or recover it; we can only reset it.
• An activation code, until you activate your account.
• When you signed up and when you last logged in.
• Everything you put in Studio X: your profile content (HTML, CSS and JavaScript), title, colours, display settings and away message, plus when you last changed them.

When people visit your profile

• We add one to your profile's view count. We don't record who the visitor was.

When someone reports a profile

• The reason and details they give, and their email address if they choose to include it.
• If they're logged in, which account sent the report.
• A scrambled, one-way code made from their IP address, used only to stop anyone sending more than a handful of reports an hour. We don't store the IP address itself.

When admins manage the site

• Admins can add private notes to an account, and can suspend an account with a reason.
• We keep a log of admin actions (for example “suspended” or “reset password”), recording which admin did it, to which access name, and when. When an admin edits someone's account details, the log notes what changed.

Automatically, when anyone uses the site

• Like nearly every website, the server our site is hosted on may keep standard logs of requests: IP address, browser type, the page requested and the time. These are kept according to our hosting provider's settings and used for security and fixing problems.

Cookies

We use a single cookie, named xinsto. It holds a random session ID that keeps you logged in and protects our forms against forgery. It's set for everyone who visits, because the forms need it even before you log in. It's deleted when you close your browser, and the matching session data on our server is cleared automatically after a while.

We don't use analytics, advertising or tracking cookies, and our own pages don't load scripts from other companies.

What's public

Unless you set your profile to private in Studio X, anyone can see:

• your profile content, title and away message;
• your first name, your access name, and the month and year you joined;
• your view count, if you leave the visitor counter on;
• your title and access name in the “Recently updated profiles” list on the home page, with the date you last updated.

Your email address, last name and password are never shown publicly. Anything you put in your profile content is public, so think twice before adding your address, phone number or anything else you'd want to keep private. Search engines and other people can copy public pages, and we can't pull back copies made elsewhere.

Other websites inside profiles

Members can add images, videos, fonts and scripts that load from other websites. When you visit a profile, your browser may connect to those websites, which can see your IP address and may set their own cookies under their own policies. Profile scripts run in a sandbox that keeps them away from your Xinsto login and the rest of the site, but they can still see what you do on that profile. If you'd rather not, don't visit profiles you don't trust.

How we use your information

• To run the service: create your account, show your profile, let you log in, and save your changes.
• To email you about your account, like your activation link or a reply to something you asked us.
• To keep the service safe: stopping abuse, reviewing reports, and enforcing the Terms of Service.
• To follow the law when we have to.

We don't use your information for advertising, and we don't sell it or share it with anyone for their own marketing.

If you're in the European Economic Area or the UK, our legal bases are: providing the service you signed up for (contract); keeping the service safe and secure (our legitimate interests); and meeting legal obligations.

Who we share it with

• Our hosting provider, which stores the site and its database on its servers.
• Our email provider, to deliver account emails.
• The authorities, when the law requires it, or when we believe in good faith it's needed to protect someone's safety or to report content that exploits children.
• A new owner, if the service is ever handed over to someone else. They'd have to follow this policy, and we'd tell you first.

Those providers may store information in a different country from yours.

How long we keep it

• Your account and profile: until you delete them, or we delete them under the Terms of Service.
• When an account is deleted, its account details, profile and reports about it are removed from our database straight away. Reports the person filed about others are kept, but with their account, email and IP code removed. Entries in the admin action log keep the access name, as a record of moderation decisions.
• Backups may hold deleted information for up to 30 days before they're overwritten.
• Server logs are kept according to our hosting provider's settings.

Your choices and rights

• See and change your information: in Studio X under Your Information and the profile pages.
• Download it: Studio X > Your Information > Download your data gives you a copy of your account and profile.
• Make your profile private: Studio X > Display Properties.
• Delete your account: Studio X > Your Information. It's immediate.
• Anything else, like a question about your information or an objection to how we use it, email [email protected]. We'll answer within 30 days.

Depending on where you live (for example the EEA, the UK, or US states like California), you may have legal rights to access, correct, delete or get a copy of your personal information, and to object to or limit how it's used. You can use any of these by emailing us; we won't treat you differently for doing so. If you're in the EEA or UK, you can also complain to your local data protection authority.

Children

Xinsto Extension isn't for anyone under 13, and we don't knowingly collect information from them. If we find out an account belongs to someone under 13, we'll delete it. If you're a parent or guardian and think your child has an account, email [email protected].

Security

Passwords are stored as one-way hashes. Member scripts run in a sandbox that's separate from logins and from Studio X. Connections to the site are encrypted with HTTPS. Admin pages are only open to admins, and every admin action is logged. No system is perfectly secure, though, so use a password you don't use anywhere else.

Changes to this policy

If we change this policy, we'll update the date at the top. If the change matters, we'll tell members with a Service Announcement in Studio X or a notice on the site before it takes effect.

Contact

Email [email protected].