Privacy Policy
Last updated: April 20, 2026
This Privacy Policy describes how xbawx.com collects, uses, and retains information when you use the Site. We are committed to minimal data collection and do not sell or share your data with third parties for marketing purposes.
1. Information We Collect
Automatically Collected
- IP addresses: Your IP address is logged for security and abuse prevention purposes when you access the Site. Logs are stored internally and retained for a limited period.
- Server request logs: Standard web server logs (request path, timestamp, response code, referrer) are retained temporarily for operational purposes.
Information You Provide
- Radio player credentials: If you use the Radio feature, your username is stored in our database. Passwords are stored as salted SHA-256 hashes — we cannot recover your plaintext password.
- Uploaded files: Files you upload via the IMG (image compression) tool are stored temporarily on our servers. All image files are automatically deleted after 24 hours.
- SXFT transfers: Files you upload via SXFT are encrypted with AES-256-CBC before storage. The encryption password is never stored. Files are purged at the expiry time you set, or sooner.
- YT downloads: URLs you submit to the YT Converter are processed to retrieve media. The resulting files are cached for up to 24 hours and then deleted automatically.
What We Do Not Collect
- We do not collect your name, email address, or any account information outside of the Radio feature.
- We do not use analytics platforms, advertising networks, or tracking pixels.
- We do not fingerprint your browser or track you across sessions.
2. Cookies and Session Data
The Site uses server-side session cookies to maintain your session state (for example, to keep you logged into the Radio player). These are functional session cookies only — they are not used for tracking or advertising. Session cookies expire when you close your browser or after a 12-hour inactivity period. No third-party cookies are set by this Site.
3. How We Use Your Information
- To operate and deliver the services you request (file processing, media retrieval, session management).
- To detect and prevent abuse, unauthorized access, or illegal activity.
- To comply with legal obligations, including valid court orders or law enforcement requests.
We do not use your information for profiling, behavioral advertising, or sale to third parties.
4. Data Retention
| Data Type | Retention Period |
|---|
| YT downloaded files | 24 hours (auto-purged) |
| Compressed image files | 24 hours (auto-purged) |
| SXFT encrypted files | Until specified expiry (max configurable) |
| Server / IP access logs | Rolling 30-day period |
| Radio user credentials | Until account is manually removed |
5. Data Sharing and Disclosure
We do not sell, rent, or share your personal information with third parties except:
- Legal compliance: We may disclose information if required to do so by law, court order, or lawful government request.
- Safety: We may disclose information if we believe in good faith that disclosure is necessary to prevent imminent harm to a person or to protect the rights or safety of the Site or its users.
6. Security
We implement reasonable technical measures to protect data, including AES-256-CBC encryption for SXFT transfers and hashed password storage for Radio accounts. However, no internet transmission or storage system is 100% secure. You use the Site at your own risk.
7. Children
The Site is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us and we will take steps to delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Site after changes are posted constitutes acceptance of the revised policy.
9. Contact
For privacy-related questions or to request deletion of your data, contact: contact@mccsoft.io