Privacy Policy
Effective date: 2026-10-01
This Privacy Policy explains how xronogram collects, uses, discloses, and stores personal data when you use our services. It applies to our website, legal pages, account flows, content tools, credits, transfers, social features, and support interactions.
XRONOGRAM LTD, a company registered in the Republic of Cyprus under registration number HE 496915, operates xronogram and is the controller responsible for the personal data described in this Policy. In this Policy, "we", "us", and "our" mean XRONOGRAM LTD.
If you use xronogram, you also agree to our Terms of Service. For browser-storage and optional-service details, see our Cookie Policy.
1. Data we collect
We collect the following categories of data depending on how you use the service.
Account and identity data
Examples: email address, authentication identifiers, sign-in method, and session information.
Profile, social, and content data
Examples: username, full name, bio, avatar, profile settings, claimed seconds, captions, media, links, hashtags, visibility settings, tags, comments, reactions, follows, blocks, reports, transfers, and ownership history.
Credits and transaction data
Examples: credit balance, ledger entries, purchase history, checkout metadata, refund records, and tax-related payment information.
Support and communications data
Examples: contact-form submissions, email correspondence, issue details, and feedback.
Technical and usage data
Examples: IP address, country or approximate location derived from IP, device or browser information, operational logs, timestamps, page routes, performance measurements, view state, and error diagnostics.
We may also receive data from providers you choose or interact with, such as identity providers for sign-in and payment providers when a transaction is processed.
2. Why we process data
We process data to:
- create, maintain, and secure accounts;
- provide claimed seconds, content, visibility, social, transfer, and payment features;
- provide recommendations and fresh content;
- detect, investigate, and prevent fraud, abuse, moderation violations, and security incidents;
- respond to support requests and send transactional communications;
- operate optional analytics and performance measurement where you permit them;
- diagnose errors, maintain reliability, and protect the platform; and
- comply with legal obligations, enforce our Terms, and protect rights, property, and safety.
3. Analytics, performance, and error monitoring
Optional browser services are disabled until you make a choice for the current Cookie Policy. You can change that choice at any time through Cookie settings on the Legal page.
| Service | Purpose and data | Choice | Retention |
|---|---|---|---|
| Web analytics | Aggregated page visits and usage, including redacted routes, referrer, country, browser, operating system, and device type. xronogram does not send account identifiers or custom events. | Analytics | Up to 12 months |
| Speed insights | Real-user Web Vitals and related redacted route, country, network, browser, operating system, and device information. | Performance | Up to 30 days |
| Browser error monitoring | Privacy-minimized error events and diagnostics. Browser events exclude account profiles, request bodies, cookies, authorization headers, and query strings. | Performance | Up to 30 days |
Server and Edge error monitoring remains active as necessary operational processing. It is used to detect failures, protect the service, and restore reliability. The same 30-day error-event retention and privacy-minimization controls apply.
Web analytics and speed insights report aggregated or anonymous measurements and are not used by xronogram to build an advertising profile. Browser diagnostics are used only for error monitoring and service reliability.
4. Legal bases for EEA, UK, and similar regimes
Where law requires a legal basis, we rely on one or more of the following:
- Contract: to provide the service you request, including accounts, content, transfers, and payments.
- Legitimate interests: to secure and improve the platform, provide recommendations, prevent abuse, diagnose server-side failures, enforce our rules, and protect users, provided those interests are not overridden by your rights.
- Legal obligation: to keep required records, respond to lawful requests, and meet tax, accounting, or compliance duties.
- Consent: for optional browser Analytics and Performance services and any other processing for which we expressly request consent.
You may withdraw browser consent at any time without affecting processing that occurred before withdrawal.
5. How we disclose data
We disclose data only as reasonably necessary to operate xronogram, comply with law, or protect users and the service. Recipients may include:
- authentication, session, database, hosting, delivery, storage, caching, and security providers;
- payment, tax, refund, and fraud-prevention providers;
- email-delivery, support, analytics, performance, and reliability providers; and
- professional advisers, auditors, insurers, and authorities where required by law or necessary to defend legal claims.
These providers process data for contracted services and are not permitted by xronogram to use it for their own cross-context behavioural advertising.
If you use social features, profile and content data may be visible to other users according to your visibility settings and actions.
6. Sale and sharing
xronogram does not sell personal information. xronogram does not share personal information for cross-context behavioural advertising. We do not use advertising or retargeting cookies.
7. International data transfers
Providers may process data in countries other than where you live. When required, we use appropriate safeguards such as contractual protections, provider commitments, or another lawful transfer mechanism.
8. Data retention
We keep data only for as long as needed for the purposes described in this Policy, including operating the service, maintaining security, and complying with legal obligations.
Examples:
- account and profile data are generally kept while an account is active;
- claimed-second, ownership, transfer, recommendation, and moderation records may be retained to provide the product, preserve platform integrity, and prevent abuse;
- anonymous Second-view session state is retained for up to 90 days;
- web analytics is retained for up to 12 months;
- speed insights is retained for up to 30 days;
- error events are retained for up to 30 days;
- payment and tax records may be kept for periods required by finance, tax, accounting, chargeback, or fraud rules; and
- support records are retained as needed to resolve the matter and then handled under the support-mailbox cleanup process.
If you deactivate your account, your data and service records remain in our systems, but your profile and account are not shown in the normal product experience. If you permanently terminate your account, we delete or anonymize data where reasonably possible while retaining limited records needed for security, fraud prevention, legal compliance, tax, accounting, financial reporting, and audit purposes.
9. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate information;
- delete data or request account termination;
- object to or restrict certain processing;
- receive personal data you provided in a structured, commonly used, machine-readable format where applicable law provides a right to data portability;
- withdraw consent where processing depends on consent; and
- complain to a supervisory authority, such as the Commissioner for Personal Data Protection in Cyprus or the data protection authority where you live or work.
You can manage browser Analytics and Performance choices through Cookie settings on the Legal page. You can manage other product information through the available profile, visibility, and account settings.
To submit a privacy request, contact support@xronogram.com and state that your request concerns privacy. If your request concerns an account, use the email tied to that account when possible.
10. Security
We use administrative, technical, and organizational measures intended to protect personal data, including authentication controls, server-side authorization, data minimization, redaction, logging controls, and provider security features. No system is perfectly secure, so we cannot guarantee absolute security.
11. Children's data
xronogram is not intended for children under 13. If we learn that we collected personal data from a child who is not allowed to use the service under applicable law, we will take appropriate steps to delete or restrict it.
12. Changes to this Policy
We may update this Privacy Policy from time to time. We will publish the updated version, update the effective date, and provide additional notice or request a new choice where required.
13. Contact
For privacy questions or requests, contact XRONOGRAM LTD at support@xronogram.com. Signed-in users may also use the product contact form.