Privacy Policy

Effective Date: October 1, 2025

At XCombo.com, protecting your privacy is our priority. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable laws, including the General Data Protection Regulation (GDPR) for EU users and U.S. state privacy laws including the California Consumer Privacy Act (CCPA/CPRA).

1. Who We Are

2. SSL / Data Security

We use SSL/TLS encryption (HTTPS) to protect your personal data during transmission. This ensures that all information you submit on our website, including login details, comments, and contact forms, is secure from unauthorized access.

3. Information We Collect

Comments

When you leave comments on our site, we collect:

  • The data you provide in the comment form (name, email, website)

  • Your IP address and browser user agent string

  • An anonymized string (hash) of your email may be sent to Gravatar to check your profile image.

Gravatar Privacy Policy: https://automattic.com/privacy/

Once your comment is approved, your profile picture may be visible publicly alongside your comment.

Media

If you upload images to our website, please avoid embedding location data (EXIF GPS). Visitors may download and extract location data from images.

Cookies

  • Comments: Optionally save your name, email, and website in cookies for one year.

  • Login: Temporary cookies verify if your browser accepts cookies. Login cookies last two days (or two weeks if “Remember Me” is selected).

  • Article Editing: Cookies for editing or publishing articles expire after one day.

Embedded Content

Embedded content (e.g., videos, images) from other websites behaves as if you visited the external site directly. These third-party websites may collect data and use cookies.

4. How We Use Your Data

We use your data solely to provide and improve our website, including:

  • Comment management and spam detection

  • User account authentication and management

  • Article editing and publishing

  • Responding to inquiries and service requests

We do NOT sell your personal information to third parties. Any data sharing is only for operational purposes, legal requirements, or service providers necessary to operate the site.

5. Who We Share Your Data With

  • Password Resets: Your IP address is included in password reset emails.

  • Automated Spam Detection: Comments may be checked through automated services to maintain site integrity.

  • Third-Party Services: Only service providers essential for website operations (e.g., hosting, analytics).

We never sell or trade your personal contact information.

6. How Long We Retain Your Data

  • Comments: Retained indefinitely for the purpose of automatic approval of follow-up comments.

  • User Accounts: Personal information is stored in user profiles. You can view, edit, or delete your data at any time (except usernames). Administrators have access to this information for operational purposes.

7. Your Data Rights

EU Users (GDPR)

If you are located in the EU, you have the right to:

  • Access your personal data

  • Request correction or deletion of your data

  • Restrict processing

  • Object to processing

  • Receive your data in a portable format

  • Withdraw consent at any time

U.S. Users

  • California Residents: See “CCPA Rights” below.

  • Residents of Other U.S. States: Your privacy rights are protected under applicable state laws. We implement reasonable security measures to safeguard your personal information.

CCPA Rights (California Residents)

If you are a California resident, you have the right to:

  • Request disclosure of the personal information we collect and share

  • Opt-out of the sale of personal information (our site does not sell personal information)

  • Request deletion of personal information, subject to legal exceptions

  • Non-discrimination for exercising privacy rights

To exercise any of these rights, please contact us at: info@xcombo.com

8. International Data Transfers

Your data may be processed in the United States or other countries where we operate. When transferring data internationally, we ensure compliance with applicable data protection laws.

9. Children’s Privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children under this age.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

11. Contact

For any questions regarding this Privacy Policy or your personal data:
Email: info@xcombo.com

✅ Highlights of Compliance

  • SSL / HTTPS usage ✅

  • Clear “no sale of personal info” statement ✅

  • Explicit statement that data collection is for functional purposes, not primary goal ✅

  • GDPR rights for EU users ✅

  • CCPA / California rights for U.S. users ✅

  • Privacy protections for other U.S. residents ✅

  • Children’s privacy and international transfers included ✅