Privacy & Telemetry Policy
Last updated: August 2026 • Transparent disclosure of all platform analytics, telemetry, and data practices.
1. Information We Collect
To provide high-speed content delivery, security monitoring, and prevent fraud, Xclub automatically processes both anonymous telemetry and authenticated account data.
Visitor Telemetry & Network Logs
- IP Address and derived geo-location (Country, City)
- Device category (Desktop, Mobile, Tablet)
- Browser family, version, and Operating System
- Page routes visited, time spent, and search queries
- Resource downloads initiated and referrers
User Account Information
- Display name and email address
- Cryptographically salted password hashes (bcrypt)
- Uploaded file metadata and vault associations
- Account preferences and saved bookmarks
2. How We Use Collected Data
- Edge Routing & CDN Optimization: Telemetry allows BunnyCDN to route download requests to the nearest edge point-of-presence (PoP).
- Fraud & Threat Mitigation: Network telemetry prevents automated abuse, scraping bots, and brute-force authentication attacks.
- Service Analytics: We compute platform statistics (active files, total downloads, global traffic) to improve infrastructure capacity.
- Communication: Transactional emails (such as welcome onboardings and security alerts) delivered via encrypted Brevo SMTP relays.
3. Data Storage & Security
All account data and telemetry records are stored in secure Supabase PostgreSQL database clusters protected by SSL/TLS encryption in transit and AES-256 at rest. Passwords are never stored in plaintext and are hashed using bcrypt with multiple salt rounds.
4. Third-Party Infrastructure Subprocessors
We partner with high-reliability infrastructure providers to operate the service:
- Supabase: High-performance managed PostgreSQL cloud database.
- Backblaze B2: Scalable enterprise object storage for uploaded vault assets.
- BunnyCDN: Tier-1 global Content Delivery Network for ultra-low latency file delivery.
- Brevo: Secure transactional email relay for account notifications.
5. Your Data Rights & Deletion
You may request a copy of your personal data or request permanent deletion of your account and uploaded files at any time by contacting privacy@xclub.com.