Privacy Notice
Who we are
X&X Tap is founded by Jestony P. Alipda. For any privacy question or request, write to support@xandxtap.com.
What we collect, and why
| Information | Why |
|---|---|
| Email address, username and password. The password is stored only as a salted one-way hash; we cannot read it. | To create and secure your X&X Hub account, send you a verification link and password-reset messages, and contact you about your account. |
| TapScene content you enter: name, role, bio, links, contact details, colours and images you upload. | To build your TapScene. Once you press Publish, that content is public at xandxtap.com/x/your-username, and anyone with the link can see it. Drafts stay private to you. |
| Uploaded images. They are checked and re-encoded, and location and camera data embedded in them is removed. | To show your photo, logo or hero image on your TapScene. |
| A sign-in cookie, set only for the Hub. It keeps you signed in for up to 24 hours. | To keep your session secure. We do not use advertising or analytics cookies. |
| Short-lived request counters tied to a one-way hash of your network address. | To slow down abuse such as repeated password guesses. |
| Card or Ring identifiers and, once you activate one, the link between that device and your account. | So a tap on your Card or Ring opens your TapScene. |
We do not sell your information, and we do not run advertising or third-party analytics on this site. Ordering, payments and referral rewards are not available yet; when they are, this notice will be updated before any payment or payout information is collected.
Who handles it for us
X&X Tap runs on Cloudflare (hosting, database, file storage and the email we send). Emails such as verification and password-reset links are sent through Cloudflare Email Sending. These providers process data on our behalf to run the service.
How long we keep it
We keep your account and published TapScene while your account exists. Verification and reset links expire shortly after they are issued, and request counters expire within a day. Backups and logs kept by our providers may hold data for a limited time after deletion.
Your choices
- Edit or unpublish your TapScene at any time in TapScene Studio.
- Ask us for a copy of your information, a correction, or deletion of your account by writing to support@xandxtap.com from the email on the account.
- Philippine residents have rights under the Data Privacy Act of 2012 (Republic Act No. 10173), including to access, correct and object to processing of their personal data, and to complain to the National Privacy Commission.
Children
X&X Tap is not directed to children under 13. Do not create an account if you are under 13.
Changes
If we change this notice we will update the date above, and tell account holders by email when a change is significant.
See also the Terms of Use.