Privacy Policy
Last updated: September 2026
Overview
X1Y1 ("we", "us", or "our") operates x1y1.co. This Privacy Policy explains what information we collect when you visit our website or contact us, how we use it, and your rights regarding that information.
We keep this simple: we collect only what we need, we do not sell your data, and we do not use it for advertising.
Information We Collect
Contact Form Submissions
When you use the contact form on our website, we collect:
- Your name
- Your email address
- Your company name (optional)
- The service you are interested in (optional)
- The message you submit
This information is used solely to respond to your inquiry. We do not add you to any marketing lists without your explicit consent.
Technical Data
Our website is served through Cloudflare's network. Cloudflare may process your IP address and request metadata as part of its infrastructure and security services. This is governed by Cloudflare's Privacy Policy.
We do not operate our own analytics or tracking systems. We do not use cookies, and we do not run third-party advertising trackers on this website.
How We Use Your Information
Information submitted through our contact form is used to:
- Respond to your inquiry
- Assess whether we are a good fit for your project
- Follow up on our conversation, if relevant
We do not use your contact information for automated marketing, profiling, or any purpose beyond responding to your inquiry.
Third-Party Services
Our website uses the following third-party services in connection with form submissions:
- Cloudflare Turnstile: A privacy-preserving bot detection service. Turnstile does not use tracking cookies. See Cloudflare's Privacy Policy.
- Resend: An email delivery service used to route contact form submissions to our inbox. See Resend's Privacy Policy.
Data Retention
Contact form submissions are retained in our inbox for as long as necessary to evaluate or fulfill a potential engagement. If no engagement results, we typically delete submissions within 12 months.
Your Rights
You have the right to:
- Request access to any personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
To exercise any of these rights, email us at hello@x1y1.co. We will respond within 30 days.
Security
All data transmitted to x1y1.co is encrypted in transit via TLS. Contact form submissions are transmitted over HTTPS and processed through infrastructure with appropriate access controls. For details on our security practices, see our Security page.
Changes to This Policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. We will not materially reduce your rights without notice.
Contact
If you have questions about this Privacy Policy, contact us at hello@x1y1.co.