Effective September 11, 2026
We keep what the builder, hosting and billing need to work, and nothing we could not explain here. We do not sell personal information and we do not run advertising.
Using the builder without an account: nothing. It runs in your browser; your files stay on your machine unless you save to an account, pay for a download, or publish.
Account details: your email address and a sign-in identifier, held by Clerk, which handles authentication for us.
Your portfolios: the portfolio document and the compressed versions of your models, images and video, stored with Supabase. Original source files never leave your computer.
Hosted sites: when you publish, a copy of the assembled site is stored with Cloudflare (R2) and served by Cloudflare’s network. Cloudflare processes visitors’ IP addresses to deliver the site and to limit abusive traffic, under its own privacy terms; we keep a count of page loads per site per day for that purpose, not visitor identities. Hosted sites set no cookies.
Credit clicks: the “Built with XRfolio” credit on a free site links back to us through an address that identifies the portfolio it is on. When a visitor clicks it we record the portfolio’s id, the website the click came from, and the hour — no IP address, no cookie, no browser details. This is how a portfolio’s owner sees how many visitors their site sent us, and how we learn where downloaded sites end up. Nothing in a site contacts us until a person clicks that link.
Payments: Stripe processes every transaction. We receive confirmations and billing identifiers, never card numbers.
Messages to us: support requests, site reports and library flags are kept, with the email address you give, so we can follow up and show what was reported and what we did about it.
Signing you in, storing and serving your work, taking payment, answering you, and dealing with reports. Moderation decisions — suspending a site or an account — are recorded with who made them and why. We do not build marketing profiles.
Clerk for sign-in, Supabase for the database and your stored files, Stripe for billing, Cloudflare for hosted sites and custom domains, and Resend for the emails we send you. Each processes data only to provide its part of the service.
For as long as your account is open. Closing your account from the dashboard cancels billing, takes your hosted sites off the internet, deletes your portfolios and stored files, and deletes your sign-in. Stripe keeps the transaction records the law requires; our copy of them is anonymised. A closed account’s site name is held out of use for 180 days so nobody else can take over an address you once gave out; nothing but the name is kept. Reports and moderation records are kept as legal records.
To avoid storing anything with us at all, export a .xrfolio save file from the builder and work signed out.
Only what sign-in needs on the app: a session cookie set by Clerk. Hosted sites set no cookies at all, and never will — a cookie on a shared hosting domain would be readable by every site on it.
See, export or delete your data from the dashboard, or email cperos@xrtech.dev and we will handle it directly.
XRfolio is not directed at children under 16, and we do not knowingly collect their data.
If this changes in a way that matters, we update the date at the top of this page.