Privacy Policy

This Privacy Policy explains how this website (xca.sh) and the official cloud-hosted service (dash.xca.sh) collect and handle information. Note that when you self-host the open-source Xcash software, it runs on your own servers, you are the controller of that data, and it is never sent to us — see the "Self-hosted software" section below.

Self-hosted software

Xcash is open-source under the MIT license, intended to be deployed on infrastructure you control. In that setup, invoices, addresses, callbacks, and your customers' payment data all stay within your own systems and never pass through or get uploaded to Xcash's servers. You act as the data controller and assume the corresponding compliance responsibilities for that data. The remaining sections apply only to the website and cloud service that we operate.

This website (xca.sh)

This website is purely informational, and we aim to collect as little data as possible:

• The site includes no third-party analytics, advertising, or behavioral tracking scripts, and sets no cookies for tracking purposes.
• Page fonts are loaded via Google Fonts, so your browser makes a request to Google, which may receive information such as your IP address.
• The pricing section fetches public plan data from our own API (dash.xca.sh); that request does not include any personal information about you.
• As with most websites, the server or CDN hosting this site may retain basic access logs (such as IP, timestamp, and user agent) for security and operational purposes.

Official cloud-hosted service (dash.xca.sh)

If you sign up for and use the official cloud-hosted edition, we collect the information necessary to provide the service — such as your account email, sign-in and usage records, and the configuration you set in the dashboard. We use this only to provide and maintain the service, keep it secure, communicate with you, and handle necessary billing. We do not sell your personal information. To run the service we may rely on a limited set of third-party processors (such as cloud hosting and email delivery).

Cookies

This website does not use tracking cookies. The cloud-hosted service may use essential cookies, for example to keep you signed in. You can manage or clear cookies in your browser, though doing so may affect the cloud service.

Your rights and data requests

To the extent applicable law allows, you may access, correct, or delete personal information relating to you. To make a request or learn more about how we handle your data, contact [email protected].

Children's privacy

This service is intended for businesses and developers, not for children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, provide notice by reasonable means.

Contact

If you have any questions about this Privacy Policy, contact [email protected].