Legal
Privacy policy
Last updated 28 September 2026
This policy explains what information xtended (“we”, “us”) collects when you use xtended.in, including the studio website and the xtended showcase, and how we use it. We collect as little as we can, we don't sell personal information, and we don't use advertising trackers.
What this policy covers
This policy covers xtended.in. Extensions, add-ons and apps that we build for clients are published by those clients and have their own privacy policies. Client engagements are also governed by separate written agreements.
Information we collect
Account information. If you sign in to the showcase with GitHub or Google, we receive your name, email address, profile picture and an account identifier from that provider. We generate a username from this. We don't receive or store your GitHub or Google password.
Content you submit. Extensions you launch (name, tagline, description, store link, platform and categories), the upvotes you cast, and anything else you choose to post.
Messages. If you email us about a project, we keep that correspondence.
Technical data. Like most websites, our hosting and network providers process standard request data such as IP address, browser type and the pages requested, for security and to keep the service running.
How we use it
- To sign you in and keep you signed in.
- To display your launches and your maker profile, and to count votes on the showcase leaderboard.
- To prevent abuse, such as vote manipulation or spam.
- To reply to enquiries and deliver projects you ask us about.
- To comply with legal obligations.
Google user data
When you sign in with Google, we request only basic profile access (your name, email address and profile picture) and use it solely to create and maintain your showcase account. xtended's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Cookies
We use only essential cookies: a session cookie that keeps you signed in, and security cookies that protect sign-in against cross-site request forgery. We don't use analytics, advertising or tracking cookies.
Who we share it with
We don't sell or rent personal information. We share it only with service providers that help us run the site:
- Our hosting provider, which runs the servers and database.
- Cloudflare, which provides DNS, content delivery and security.
- GitHub and Google, when you choose to sign in with them.
Public showcase content (your launches, your username and profile picture) is visible to anyone. We may also disclose information if the law requires it.
How long we keep it
We keep account information for as long as your account exists. If you delete your account, we remove your personal information within 30 days, except where we need to keep it for legal reasons.
Your choices and rights
You can ask us to access, correct, export or delete your personal information, or to close your account, by emailing [email protected]. You can also revoke xtended's access in your GitHub or Google account settings at any time.
Security
We use HTTPS everywhere, keep credentials out of our source code, and limit access to production systems. No system is perfectly secure, but we work to protect your information and will notify affected users of any breach as the law requires.
Children
xtended.in is not directed at children under 16, and we don't knowingly collect their personal information.
Changes to this policy
If we make material changes, we'll update the date above and, where appropriate, notify signed-in users.
Contact
Questions about privacy? Email [email protected].