Privacy Policy
This page explains what personal data XCopp collects, how it is used, and what rights visitors have in relation to that data.
Who we are
XCopp.com ("XCopp", "we", "us", or "our") is operated by Lee Copp (XCopp), based in Cornwall, United Kingdom.
Email: hello@xcopp.com
Location: Cornwall, United Kingdom
What this policy covers
This Privacy Policy explains what personal data we collect, how we use it, the legal bases we rely on, who we may share it with, how long we keep it, and the rights available to you.
What personal data we collect
Information you provide directly
- Name
- Email address
- Messages or information sent through contact forms, newsletter forms, or direct email
Information collected automatically
- IP address
- Browser type
- Device information
- Pages visited
- Referring website
- Date and time of visits
- General usage and interaction data
Cookies and similar technologies
XCopp may use cookies and similar technologies to make the site work properly, understand site usage, improve performance, remember preferences, and support analytics.
More detail is available in the separate Cookie Policy.
How we use your data
- To operate and maintain the website
- To respond to messages or enquiries
- To send emails you have asked to receive
- To improve website performance and user experience
- To analyse how content is used
- To protect the site against misuse, fraud, or security issues
- To comply with legal obligations
Our legal bases for processing
Consent
Where you opt into emails or accept non-essential cookies.
Legitimate interests
For site operation, analytics, security, and improving content, where those interests are not overridden by your rights.
Contract
Where processing is necessary to provide something you requested.
Legal obligation
Where processing is necessary to comply with applicable law.
Email communications
If you subscribe to updates, newsletters, or similar communications, we will use your email address to send the content you requested.
You can unsubscribe at any time using the link in the email or by contacting hello@xcopp.com.
Analytics and third-party services
XCopp may use third-party providers to help operate the site. These may include hosting, analytics, email tools, security services, and content delivery systems.
- Krystal.io — hosting
- Google Analytics — analytics and usage measurement
- Cookie consent tool — to manage non-essential cookie choices
These providers may process personal data on our behalf or as independent controllers depending on the service involved.
XCopp ScreenHelp
ScreenHelp lets you submit a screenshot and, if you wish, a question to receive an AI-generated explanation. Your browser reduces the image size before sending it. XCopp sends the submitted screenshot and question to Cloudflare Workers AI to generate the answer. Before uploading, crop or cover names, account details, private messages, financial or health information and other sensitive details. Do not submit passwords or personal information about someone else. Check the AI answer before acting on it.
XCopp relies on its legitimate interests in providing the screenshot help you request, protecting the service from abuse and keeping it secure. This covers the submitted screenshot and question, Turnstile checks, rate limiting and proportionate security logging. You may object to processing based on legitimate interests by contacting us.
Cloudflare Turnstile checks browser and network signals, including IP address, user agent, TLS fingerprint and site origin, to distinguish people from bots. Cloudflare processes these signals for XCopp's bot checks and says it also uses them for its own bot-detection improvements as an independent controller. See Cloudflare's Turnstile privacy notice. XCopp sends the connecting IP address to Turnstile verification and uses a SHA-256 hash of that IP address as a pseudonymous rate-limit key. A daily aggregate usage count in Cloudflare Workers KV expires after 48 hours. The rate limiter uses a 60-second window; a separate retention period for its key has not been verified.
The ScreenHelp Worker does not deliberately write screenshots, questions or answers to Workers KV or application logs. Cloudflare may process submitted content and technical request information to provide its services. For personal data Cloudflare processes for XCopp, its data processing addendum uses the earlier of the service agreement ending or processing no longer being needed to perform contractual obligations as its retention criterion. Cloudflare does not specify a fixed period for Workers AI submissions or Turnstile signals, so XCopp cannot give a verified fixed period for them. For Turnstile signals Cloudflare uses for its own purposes, see the retention criteria in Cloudflare's privacy policy. XCopp samples 10% of ScreenHelp Worker invocation logs during a 14-day launch observation period; Workers Free retains captured logs for three days. The sampling level will be reviewed after that period.
Cloudflare may process data outside the UK. Its data processing addendum describes safeguards for restricted transfers, including the UK Addendum to EU standard contractual clauses where applicable. To ask about your personal data or exercise your data-protection rights, contact hello@xcopp.com. You can complain to the UK Information Commissioner's Office.
Data sharing
XCopp does not sell personal data.
Personal data may be shared only where reasonably necessary with:
- Service providers helping operate the site
- Professional advisers where necessary
- Regulators, courts, law enforcement, or public authorities where required by law
- A buyer or successor in the event of a sale, merger, or business transfer
International transfers
Some service providers may process personal data outside your home country. Where required, appropriate safeguards are intended to be used for international data transfers.
Data retention
Personal data is kept only as long as reasonably necessary for the purpose it was collected, including to respond to enquiries, maintain subscription records, meet legal obligations, resolve disputes, and enforce agreements.
Your rights
Depending on your location, you may have rights to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict processing
- Object to processing
- Withdraw consent
- Request data portability
- Complain to a supervisory authority
To exercise any of these rights, contact hello@xcopp.com.
Children’s privacy
XCopp.com is not intended for children under the age required by applicable law to provide valid consent. Personal data is not knowingly collected from children without proper legal basis.
Security
Reasonable technical and organisational measures are used to protect personal data. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.
Changes to this policy
This Privacy Policy may be updated from time to time. Any revised version will be posted on this page with the updated date shown at the top.
Contact
If you have questions about this Privacy Policy or how personal data is handled on XCopp.com, contact: