Privacy Policy

Effective date: August 19, 2026

SCP, Corp. (“us”, “we”, or “our”) operates the xns.tech website and the services offered through it, including XNS Relayer object storage, the XNS Console, and the Xa-Miner storage provider programme (together, the “Services”). It also covers the client software we publish for use with those services, including the XNS command-line tools and the XNS Relayer MCP server and desktop extension.

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use the Services, and the choices you have associated with that data. We use your data to provide and improve the Services. By using the Services, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined here, terms used in this Privacy Policy have the same meanings as in our Terms of Service.

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Services to you.

Types of Data Collected

Personal Data

While using our Services, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Cookies and Usage Data

Usage Data

We may also collect information how the Services are accessed and used (“Usage Data”). This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Services that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our Services and hold certain information.

Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Services.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Services.

Examples of Cookies we use:

• Session Cookies. We use Session Cookies to operate our Services.
• Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
• Security Cookies. We use Security Cookies for security purposes.

Software We Distribute

Some XNS software runs entirely on your own computer rather than on our servers. This includes the XNS command-line tools and the XNS Relayer MCP server and its Claude Desktop extension.

This software contains no analytics, telemetry, crash reporting, or usage counters. It does not report your activity to us. When you use it, we receive only what the task you asked for requires — for example, signing in sends your credentials to our identity service, and claiming a Relayer installation registers that installation against your account. Your conversations with an AI assistant, and the commands you run, are not transmitted to us.

Credentials that this software holds stay on your machine. Sign-in tokens are held in memory for the life of the process and are never written to disk. Storage keys generated for the command-line tools are written to a private file in your home directory, readable only by you.

Objects you store in a Relayer you host do not pass through us. Your Relayer handles that data directly, on infrastructure you control.

If you install this software through a third-party marketplace or extension directory, that marketplace’s own privacy policy governs your use of the marketplace itself. It does not give the marketplace operator access to your XNS data.

Use of Data

SCP, Corp. uses the collected data for various purposes:

• To provide and maintain the Services
• To notify you about changes to our Services
• To allow you to participate in interactive features of our Services when you choose to do so
• To provide customer care and support
• To provide analysis or valuable information so that we can improve the Services
• To monitor the usage of the Services
• To detect, prevent and address technical issues

Transfer Of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

SCP, Corp. will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure Of Data

Legal Requirements

SCP, Corp. may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of SCP, Corp.
• To prevent or investigate possible wrongdoing in connection with the Services
• To protect the personal safety of users of the Services or the public
• To protect against legal liability

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Data Retention

We keep personal data only for as long as we need it for the purposes described in this policy, or for as long as the law requires. Each period below runs from a defined event — account closure, installation release, ticket resolution, the end of a fiscal year, or a deletion request.

• Account data — your name, email address, and the account record itself — is retained for as long as your account is open, and for 30 days after you close it. We then delete it or irreversibly anonymise it.
• Service configuration — the settings and host-selection choices recorded for a Relayer claimed to your account — is retained for as long as that installation is claimed, and for 30 days after it is released or the account is closed. That window exists so a change can be rolled back and so support can help you; we do not keep configuration history beyond it.
• Billing and transaction records — invoices, payments, refunds, and the supporting tax evidence — are retained for seven years after the end of the relevant fiscal year, or longer where the law of a jurisdiction we operate in requires it. This applies even after an account is closed.
• Server and access logs, including IP addresses, are retained for 30 days in the systems we search day to day. Security-relevant events — sign-ins, administrative actions, and abuse we detect — are kept for up to 12 months in a restricted archive that only security staff can reach. We then delete them or aggregate them so they no longer identify you.
• Support correspondence is retained for 24 months after the matter is resolved, so that a recurring problem can be traced to what happened last time.
• Objects you store in a Relayer you host are not retained by us at any point. We never hold them. Deleting them is a matter between you and your own installation.

Deleted data may remain in encrypted backups for up to 35 days before it is overwritten. Those backups are not available for ordinary product use and are restored only for disaster recovery or a security investigation — never to recreate data you asked us to delete.

We suspend deletion only under a documented legal hold, an active dispute, or a fraud or security investigation, and only for the data that matter actually requires.

You may ask us to delete the personal data we hold about you at any time, using the contact details below. Where we are legally required to keep a record — billing history, for example — we will tell you which data we must retain and why.

Service Providers

We may employ third party companies and individuals to facilitate our Services (“Service Providers”), to provide the Services on our behalf, to perform Service-related services or to assist us in analyzing how our Services are used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Services.

• Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Services. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Services available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

Links To Other Sites

Our Services may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

Our Services do not address anyone under the age of 18 (“Children”).

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Services, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, or want to ask what personal data we hold about you, email us at support@xns.tech with “Privacy” in the subject line, or use the form at xns.tech/contact.

SCP, Corp.