Labs privacy-policy reference

This Privacy Policy explains how the XDC Innovation Labs website (the “Site”) handles information when you visit it. The Site is an informational website about our infrastructure and post-quantum security work. It is not a product, exchange, wallet, or financial service, and it is designed to collect as little information as possible.

1. Scope

This policy applies only to this Site. It does not apply to the public XDC Network blockchain, to third-party block explorers, wallets, exchanges, or to any external website we link to. Activity recorded on a public blockchain is outside the control of this Site and is not governed by this policy.

2. Information we collect

We aim to collect no personal data through ordinary use of the Site. Specifically:

• No account system. The Site has no login, registration, or user profiles.
• No tracking or advertising cookies. See our Cookie Policy.
• Privacy-respecting analytics. We use Cloudflare Web Analytics to count visits and measure broad usage patterns. This service uses no cookies, collects no personal identifiers, and honors the Do-Not-Track header — see Section 5a below.
• No sale of data. We do not sell, rent, or trade personal information.

Your browser and any hosting provider may automatically process technical data (such as your IP address and request headers) to deliver the page, as is standard for any website. We do not use that data to build a profile of you.

3. Local storage & theme preference

The Site stores small values locally in your own browser using the localStorage API. These never leave your device and are not transmitted to us:

• xdc-theme — remembers your light/dark theme choice.
• xdc-cookie-ack — records that you dismissed the cookie notice, so it is not shown again.

You can clear these at any time through your browser settings. See the Cookie Policy for step-by-step instructions.

4. When you contact us

If you voluntarily email us (for example, at pq@xdcindia.com), we receive the information you choose to send — typically your email address and the contents of your message. We use it solely to read and respond to your enquiry. Please do not send sensitive personal data by email.

5. Third-party services

To render typography, the Site loads web fonts from the Google Fonts CDN. When your browser fetches a font file, Google may receive your IP address and request metadata as part of serving that request. We do not control Google’s processing; see Google’s privacy documentation for details.

Analytics

We use Cloudflare Web Analytics to count visits and measure broad usage patterns. This service:

• Does not use cookies
• Does not track individuals across sites
• Does not collect IP addresses or fingerprint your browser
• Honors the Do-Not-Track header

If your browser has Do-Not-Track enabled, no analytics request is sent.

6. How we use information

• To display the Site correctly and remember your theme preference.
• To respond to enquiries you send us voluntarily.
• To maintain the security and integrity of the Site.

7. Legal bases (GDPR / UK GDPR)

Where the EU or UK General Data Protection Regulation applies, our processing relies on:

• Legitimate interests — operating and securing an informational website, and remembering a theme preference you set.
• Consent — where you choose to contact us, and for any non-essential storage you accept.

8. Your rights

Subject to applicable law, you may have the right to access, correct, or erase personal data we hold about you, to object to or restrict processing, and to data portability. Because we hold little to no personal data beyond emails you send us, these requests are usually quick to fulfil. To exercise a request, contact pq@xdcindia.com. You also have the right to complain to your local data-protection authority.

9. Retention

Locally stored values remain in your browser until you clear them. Emails you send us are kept only as long as needed to handle your enquiry and to meet any legal or record-keeping obligation, after which they are deleted.

10. External links

The Site links to external resources (for example, documentation, GitHub repositories, and research articles). We are not responsible for the privacy practices or content of those external sites. Review their policies separately.

11. Children

The Site is intended for a general, professional audience and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy as the Site evolves. Material changes will be reflected by updating the “Last updated” date above.

13. Contact

Questions or data requests: pq@xdcindia.com. See also our Cookie Policy and Terms of Use.

This template describes the privacy posture of an informational site that minimises data collection. It must be reviewed and adapted by legal counsel before being relied upon in production.