Skip to content
XyloTwin.
← Back to the project

XYLOTWIN TECH · Updated 14 October 2026

Privacy Policy

How the website handles enquiries, security information and browser storage.

Who we are

XyloTwin Tech operates the XyloTwin website. For questions about this notice or your personal information, contact research@xylotwin.com.

When you contact us

When you contact us through the form or by email, we use the information you provide to review your enquiry, respond and contact you about your request. The form requires an email address so that we can reply. Name, phone number and message are optional. If you provide a phone number, we may use it to discuss your enquiry. Please do not send sensitive personal information, passwords or confidential materials.

What is sent and who receives it

The contact form sends your email address and any optional name, phone number and message to research@xylotwin.com. Your email address is used as the reply-to address. The application does not include your IP address in that email and does not store message bodies in a database or application log.

Website hosting and email service providers process information needed to operate the website and deliver correspondence. Their infrastructure may also process technical connection data and maintain service logs. We do not use enquiries for advertising or add you to a marketing mailing list.

Site security

The contact form uses a same-site session and automatic checks to limit spam and prevent forged submissions. The server processes the connecting IP address to create a keyed, pseudonymous identifier for sending limits. This identifier and request timestamps are stored in a rate-limit record. Pseudonymisation is a safeguard; it does not make this record anonymous.

Old rate-limit entries are removed during eligible requests or maintenance. This is not a guarantee that all records are deleted at a fixed time. These checks support site security; they are not advertising profiles.

Browser storage

The site stores your language choice under xylotwin-language in your browser’s local storage. It has no automatic expiry and remains until you clear site data or your browser removes it. You can change the language using EN / ES. Blocking local storage does not prevent you from reading the site, but your choice may not be remembered.

On the contact form, the XYLOTWIN_CONTACT session cookie is used for security. It is restricted to HTTPS, inaccessible to JavaScript and marked SameSite=Strict. The associated server session holds anti-forgery information and timing data. Security information expires or is cleared according to the hosting server’s session settings. This does not determine how long correspondence is retained. Browser session restoration can affect how long a session cookie remains.

The site does not save form fields to browser storage. Your browser may offer its own autofill. You can clear cookies and site data in your browser settings; doing so may require reopening the contact form.

Analytics and external resources

The website does not use analytics, advertising trackers, external CAPTCHA services or third-party hosted fonts or scripts. Its visual assets and scripts are served with the site. Language storage and form security serve the functions described above.

How long information is kept

Correspondence is kept for handling the enquiry and any resulting follow-up, and as needed for applicable obligations. The period depends on the nature of the enquiry and those obligations. Hosting logs, email delivery records, mailbox copies and backups may have separate retention periods. The form’s token and session timers do not determine how long correspondence or provider records are kept.

Contact us if you have a question about retained information or wish to request deletion.

Your choices and requests

You can choose not to contact us, omit optional fields, or contact us directly by email. Where applicable law provides these rights, you may request access, correction, deletion, restriction of processing or object to processing; other rights may also apply. Where processing relies on consent, you may withdraw it for that processing. Some information may need to be retained under applicable obligations.

Send your request to research@xylotwin.com. We may ask for information reasonably needed to verify the request. You may also have the right to contact the relevant data protection authority.

Changes to this notice

We may update this notice when the website or its information-handling practices change. The date above identifies the current version.