Privacy policy
We collect little, and we say exactly what.
Effective 2026-10-15. Draft prepared for licensed legal review before paid launch; the practices described are already in force on this site.
Who we are
XXXLR8 is a business of iDesign4Solutions (ID4S), California, USA. This policy covers xxxlr8.com and the inquiries you send through it.
What we collect, and why
| Data | When | Why | Kept |
|---|---|---|---|
| Name or brand, email, public profile or site URL, platforms, your goal, your message, the inquiry type | When you submit the apply/contact form | To reply and, if you ask, to prepare an audit or proposal | Until resolved plus 12 months, or on request |
| Your self-serve audit score and band (not your answers) | Only if you click "Request the reviewed audit" | Context for the review | With the inquiry |
| Your audit answers | Stored in your own browser only if you tick "keep on this device" | So you can return to them | On your device until you clear it; never sent to us |
| Country (from your network), a hashed network identifier, browser type, referring page | With each inquiry | Spam and abuse prevention (rate limiting) | Rate-limit counters expire in 10 minutes; the hash is kept with the inquiry |
| Analytics events (pages viewed, tool used, form submitted) | Only after you allow analytics in the banner; nothing loads before that | To see which pages help people | Per Google Analytics retention settings (shortest available) |
| Consent choice | When you choose in the banner | To remember your choice | In your browser until you change it in the footer |
Discovery search and creator listings
- Search text is never stored. When you describe what you are looking for, the words are matched to tags in your browser session and on our server, and only the matched tag identifiers are counted per day. Prohibited queries are refused and counted, not recorded.
- Age declaration is stored in your browser only.
- Outbound clicks to creators' platforms are counted per listing and per day with no identifier about you.
- Creator listings contain what the creator submitted: public name, headline, bio, self-chosen tags, languages, coarse region, public platform URLs, a private contact email (never displayed), a verification code and a private manage token. Listings expire after 90 days unless renewed; creators can edit or remove them at any time; removed listings are deleted within 30 days except for a minimal audit entry.
- Safety reports store the reason, details and an optional reporter email until resolved.
What we never collect
- Explicit media of any kind, or links to it as a requirement
- Identity documents or scans
- Sexual orientation, sex life, health or other sensitive personal traits. Where a creator publicly describes their content market, we record that business label only when they share it for a business conversation
- Passwords, private messages or account access
- Data about your supporters or viewers
Where data lives
Inquiries are stored in a Cloudflare key-value store in the United States and are readable only by the ID4S owner with a secret key. If an email forwarding service is enabled later, a copy of the inquiry would also pass through that provider; this page will name it before it is turned on. We do not sell or share personal data, and we do not use advertising cookies.
Your rights
You can ask what we hold about you, ask us to correct or delete it, or withdraw consent for updates at any time by replying to any email from us or using the contact form. We honour deletion requests within 30 days and keep a minimal record that the deletion happened. California residents have additional rights under the CCPA/CPRA; we do not sell or share personal information as those laws define it.
Children
This site and service are for adults aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it.
Changes
We will post changes here with a new effective date. Material changes affecting stored inquiries will be emailed to the people concerned.