What PairXO stores, and why

Who is responsible

PairXO, the service at pairxo.com. For any question about this notice or your data, use the contact form.

Your account

• Your username.
• Your password, stored only as a salted one-way hash. Nobody at PairXO can read it.
• Your email address, if you choose to add one. It is optional and is not shown to the people you share with.
• When you joined and when you last signed in, which the sign-in system records by itself.

Your page

Everything you add: the page title and intro, date options with their descriptions and estimated costs, gifts with their prices and notes, and asks for gift cards or cash with their amounts. Costs, prices, amounts and budgets are shown to you only.

Who you shared with

• For each username you share with: which sections they may see and the budget, if you set one.
• For each guest password: the name you gave it, its sections and budget, when it was created, roughly when it was last used and whether it was revoked. The password itself is stored only as a hash, so it can be shown once and never again.
• Failed guest password attempts, counted per internet address for fifteen minutes so a run of wrong guesses gets locked out. The address is stored as a keyed hash, not as the address itself.

What happens on a page

Date plans (the day and time, the picks, the note, who sent it and your accept or decline), gift reservations and promises to cover an ask, with who made them and when. The owner of the page sees these; the people a page is shared with see only their own.

Contact messages

When you use the contact form: your name, the email you give, the topic, the message, the time it arrived and, if you were signed in, your username. They are kept so we can answer and follow up, and are read only by the people who run the site.

Cookies

PairXO sets four cookies, all for the site to work. There are no advertising or analytics cookies.

• pxo_theme: your choice of the pink, blue or plain look, kept for a year.
• sessionid: keeps you signed in, or remembers a guest password you entered, for up to two weeks or until you sign out.
• csrftoken: protects forms against being sent from other sites, kept for a year.
• messages: carries a one-time notice such as Saved to the next page, then is removed.

Server logs and Cloudflare

Every request reaches the site through Cloudflare, which sees your internet address and the request in order to deliver and protect the site. Cloudflare's own privacy policy covers that processing.

The web server keeps an access log of requests: internet address, time, the address requested, and the browser's description of itself. Guest share links (the addresses that start with /g/) are left out of that log, because the link itself works as a password. Logs are used to find errors and abuse, never for advertising or profiles.

Who can see what

• You see everything on your own page.
• People you share with see the sections you switched on for them, without prices, and never see each other.
• The people who run PairXO can reach the database to keep the site running, answer messages and block accounts that break the terms. They do not browse pages for any other reason.
• PairXO does not sell or rent personal data and does not send it to advertisers.

Email

PairXO does not send email at the moment, so there are no newsletters and no notifications. If password reset by email is switched on later, the email address on your account will be used for that and nothing else.

Your choices

• Edit or remove anything on your page, and change your password or email, from your account at any time.
• Revoke any username or guest password under Who can see my page; it stops working on the next click.
• To delete your whole account, or to ask what we hold about you, use the contact form. There is no delete button yet, so we do it by hand.