Legal
Privacy Policy
What we collect, why we collect it, and how long we keep it. Written to be read, not to be skipped.
XMatrix collects as little as it can while still functioning. This page describes exactly what is stored, on our own server, under our own control. We do not sell data, we do not run advertising, and no third-party analytics or advertising scripts run on this site.
What we collect
When you read
Each page view is recorded as a daily counter: the path, and whether the visit was the first from your browser that day. To tell repeat visits apart without identifying you, an irreversible hash is computed from your IP address, browser user-agent and a secret salt unique to this installation. Your IP address is not stored. These hashes are deleted after 48 hours; only the anonymous daily totals remain.
When you subscribe
Your email address, optional name, the date, and the IP address the request came from (retained for abuse prevention). Used only to send what you subscribed to. Every email carries an unsubscribe link, and unsubscribing is immediate.
When you comment
Your name, email address, optional website, the comment itself, your IP address and user-agent. Your name and comment are published; your email address is never displayed and is used only to contact you about the comment if necessary.
When you use the contact form
Your name, email address, subject, message, IP address and user-agent — kept so we can reply and so we can identify abuse.
If you have an account
Staff accounts store a name, email address, a hashed password (bcrypt — the original is never stored or recoverable), a profile, and a log of administrative actions taken. Signed-in sessions record the IP address and browser used, so a session can be reviewed and revoked.
Cookies
Only one cookie is set, and only for signed-in staff: a session identifier (xm_session), which is HTTP-only, restricted to this site, and expires when the session does. Readers are set no cookies at all. Your reading-mode preference is kept in your browser’s local storage and never leaves your device. See the Cookie Policy for detail.
How long we keep things
- Visitor hashes — 48 hours.
- Aggregate view counts — indefinitely; they identify no one.
- Subscribers — until you unsubscribe, then a suppression record only.
- Comments — until you ask for removal.
- Contact messages — up to 24 months.
- Administrative audit logs — up to 24 months.
Who else sees it
Our hosting provider processes data on our behalf in order to run the server and database. Beyond that, nobody — no advertisers, no analytics vendors, no data brokers. We will disclose data only where a valid legal obligation requires it.
Your rights
You may ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to Admin@rajivkr.com and we will act within 30 days. You do not need to give a reason.
Children
This site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has submitted information, write to us and it will be removed.
Changes
If this policy changes materially, the date at the top of this page changes with it. We do not make quiet edits.
Contact
Questions about any of this: Admin@rajivkr.com.