Last updated: October 12, 2026

This policy explains what personal information Xtreme Software Solutions (“we”, “us”) collects when you use XSSIT, our store and our software, why we collect it, who we share it with and what you can do about it. We collect what we need to run the service and nothing more, and we do not sell personal information.

Information we collect

Information you give us

Account details: your name, the username you choose, your email address and your password. Passwords are stored only as a one-way hash; nobody here can read them. If you turn on two-factor sign-in we store what is needed to check your codes. We also keep the date on which you agreed to the Terms, this policy and the Community rules.
Phone number: only if you add a mobile number to receive text alerts. We keep the number, the date you confirmed it and the date you asked for alerts. It is used for those alerts and for nothing else: never to sign you in and never to find your account.
Orders: what you bought, when, the amount, and for shipped products the delivery address and phone number you enter.
Messages: what you write in the contact form, with the name and email address you provide so that we can answer.
Reviews: the rating and text you publish on a product, shown with your display name.
Comments and reactions: what you post under a blog article, shown with your display name and picture, and the likes, votes and reports you give. Likes and votes are shown to readers as totals; a report goes to our moderators. If a moderator pauses your part in the conversation, that decision and its reason are kept with your account.
Saved for later: the products you keep for later and the posts you liked, kept in your account. Without an account the list of products stays in your own browser, on your device, and is added to your account if you sign in.
Support requests and bug reports: what you write to our support desk, the files you attach, and for a bug report the product, its version and the system you say it runs on.
Sign-in with another service: if you choose to sign in with Google, Facebook, GitHub or Microsoft, that service tells us your name, your email address, your profile picture and an identifier for your account there. We never receive your password for that service, and you can disconnect it from your profile at any time.

Information collected when you use the service

Licence activations: when one of our apps activates or checks a licence it sends the licence key, a device identifier generated by the app, the app version and the device clock. We use this to enforce the number of devices a licence covers and to deliver updates.
Technical data: your IP address, browser type and the pages requested, kept in server and security logs to keep the service secure, to limit abuse and to diagnose problems. Sign-in attempts are recorded for the same reason. To stop attacks we may block an address for a time, and where that protection is switched on we may look up the country and the kind of network an address belongs to.
Downloads: which release files an account downloaded and when.
Crash reports: if one of our apps stops working and you agree to send a report, it contains the error, the app version, your operating system, the device identifier and your licence key, so that we can find the fault and contact you about it.

Payments

Payments are processed by Stripe or PayPal on their own secure pages. Your card or bank details go directly to them and never reach our servers. We receive only what is needed to match the payment to your order: its status, amount and a reference number. Their handling of your data is described in their own privacy policies.

How we use information

To create and secure your account and sign you in.
To process orders, issue licences, ship products and provide downloads and updates.
To send the emails the service depends on: email verification, password reset, order confirmations, shipping updates and licence notices.
To answer your questions and requests for support.
To send the text alerts you asked for.
To moderate reviews and comments and keep the conversation within the Community rules.
To prevent fraud, abuse and unauthorised use of licences.
To meet legal, tax and accounting obligations.
To understand how the site is used and improve it, with analytics cookies only where you have agreed to them.

We do not build advertising profiles. News and offers by email are sent only where the law allows it and never after you have said no; each one carries a link to stop them, and you can change the choice in your profile at any time. Messages about your account, your orders and the service itself are not marketing: they are sent because the service needs them.

Why we are allowed to use it

Where the law asks for a legal basis, ours are:

the contract with you: your account, your orders, your licences and the support you ask for;
our legitimate interests: keeping the service secure, preventing fraud and abuse, and improving it;
your consent: analytics cookies, text alerts, and news and offers where consent is required. You can withdraw it at any time;
our legal obligations: the tax and accounting records the law tells us to keep.

Cookies and storage on your device

The site sets a small number of cookies that it needs in order to work. They do not track you across other websites:

the sign-in session, so you stay signed in;
the shopping cart;
your language and your light or dark theme;
your accessibility preferences;
your cookie choice and the notices you have dismissed;
a short-lived cookie while you sign in through another service.

The products you save for later without an account are kept in your browser’s own storage, because you asked the site to remember them on that device. Nothing else is stored there.

Analytics cookies (Google Analytics) are optional. Where analytics are in use, their cookies are set only after you accept them in the cookie banner; until then Google Analytics receives only anonymous signals without cookies. You can change your choice at any time from the cookie settings link in the footer. If your browser sends a Global Privacy Control signal, we treat it as a no until you tell us otherwise.

Text messages

Text alerts are optional. You add a mobile number in your profile, confirm it with a code we text to it, and ask for alerts. We then text you about things such as an order, a shipment or an answer to a support request. A text never contains a sign-in link, a licence key, your address or what you wrote to us. Reply STOP to any text to end them, or remove the number from your profile. The messages are delivered by Twilio, which receives the number and the text in order to send it.

Services we rely on

We share personal information only with providers that help us run the service, and only what each one needs:

Payment processors (Stripe, PayPal) to take payments and handle refunds.
Carriers to deliver shipped orders: your name, address and phone number.
Email delivery to send the messages listed above.
Text message delivery (Twilio) to send the alerts you asked for.
Sign-in services (Google, Facebook, GitHub, Microsoft), only if you choose to sign in with one of them.
Google reCAPTCHA, where enabled on the contact form, to tell people from automated abuse. It sends Google technical data about your browser and device under Google’s privacy policy and terms.
Google Analytics, with cookies only with your consent and anonymous signals without them otherwise.
An address lookup service, where our attack protection uses one: it receives an IP address and answers with its country and kind of network.
Writing assistance, where our team uses an AI service (Anthropic, OpenAI or Google) to help draft an answer to a support request: the text of that request is sent to it for that purpose. Email addresses, licence keys and payment details are not sent.
Hosting and infrastructure providers that store the data on our behalf.

We may also disclose information when the law requires it, or to protect our rights, our customers or the security of the service. If the business is sold or merged, your information may pass to the new owner under this policy.

Affiliate links and sponsored places

Some products in our shop are sold by other stores and are marked as affiliate products. When you select the button on one of them we count the click, without recording who you are, and send you to that store. From there the store’s own privacy policy applies: it may use cookies to recognise that you arrived from us, and we may earn a commission at no extra cost to you.

A card marked “Sponsored” beside an article is drawn by this site itself, with no script and no cookie from the sponsor. We count how often it is shown and opened, as totals only.

How long we keep information

We keep account information for as long as your account is open. Order, invoice and licence records are kept for as long as we need them to support your purchase and for the period tax and accounting law requires. Server logs and contact messages are kept only for as long as they are useful for the purposes above. When information is no longer needed we delete it or make it anonymous. A phone number is removed as soon as you remove it or your account is closed.

Security

We protect your information with encrypted connections, hashed passwords, encrypted storage of sensitive settings, optional two-factor sign-in and access limited to staff who need it. No system is perfectly secure; if a breach affects your personal information we will tell you and the authorities as the law requires.

Your choices and rights

You can see and correct your details, addresses, orders and licences in your account at any time. Depending on where you live, you may also have the right to:

ask for a copy of the personal information we hold about you;
ask us to correct or delete it;
object to or restrict certain uses of it;
receive it in a portable format;
withdraw a consent you have given, such as the one for analytics;
complain to your local data protection authority.

Where the site offers it, your profile has "Download my data" for a copy of what we hold about you and "Close my account" to close your account yourself. To use any other of these rights, contact us. We may need to confirm your identity first, and we will answer within the time the law allows. Some records, such as invoices, must be kept even after an account is closed.

In your profile you can also change your email address, turn two-factor sign-in on, disconnect a sign-in service, remove your phone number and choose whether to receive news and offers. We do not sell personal information, and we do not share it for advertising on other sites and services. Using any of these rights never changes the price you pay or the service you get.

International transfers

We and our providers may process information in countries other than yours. Where the law requires it, we rely on appropriate safeguards for those transfers.

Children

This site and our products are not directed to children, and we do not knowingly collect personal information from anyone below the age at which they can consent to it in their country. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the service changes. The date at the top shows the latest version, and we will give notice on the site or by email when a change is significant.

Contact

Questions about this policy or about your information? Write to us through the contact form and we will reply.

Privacy Policy