Privacy Notice

1. Who we are

XMC runs the sites thexmc.org and thexmc.com. You can contact us through our Discord community.

2. What we collect

When you register, we collect your name, your email address and a password, which we store only as a salted hash. We also record whether your account has been approved, and the technical data needed to keep you signed in. We also keep anything you choose to send us.

3. Why we use it

We use your details to create your account, decide whether to approve it, keep it secure and contact you about it. We do not send marketing unless you agree to it. Our legal bases are providing the account you asked for and our legitimate interest in keeping the site secure.

4. Who we share it with

We use Cloudflare to host the site and to store account data. They process data for us under their own terms. Your data may be processed outside the UK and Hong Kong, with appropriate safeguards.

5. How long we keep it

We keep your account data while your account exists. Ask us to delete it and we will.

6. Your rights

Under UK data protection law you can ask to see, correct or delete your data, restrict or object to its use, and ask for a copy. You can also complain to the Information Commissioner's Office (ICO). Similar rights apply under Hong Kong law where relevant.

7. Children

You must be 13 or older to create an account.

8. Cookies and storage

We only use browser storage that is needed to keep you signed in and to remember your language choice.

9. Changes

We may update this notice. The date at the top shows when it last changed.