Privacy Policy

We process personal data on the basis of Art. 6 (1) (a) GDPR (consent, where you give it), Art. 6 (1) (b) GDPR (performance of a contract or pre-contractual measures) and Art. 6 (1) (f) GDPR (our legitimate interest in operating a secure, functioning website).

When you visit xbaddie.com, our server automatically records technical information that your browser transmits. We store:

• the requested page and HTTP status
• the date and time of the request
• the amount of data transferred
• your IP address in anonymised form (the final octet is removed before the entry is written)

These entries are used solely to operate and secure the service. They are deleted after 30 days at the latest and are not merged with any other data source. The legal basis is Art. 6 (1) (f) GDPR.

This website sets no cookies, uses no analytics or tracking, and loads no content from third-party servers. Fonts are served from our own domain. Because nothing is stored on your device and no third party receives your data by visiting this site, no consent banner is required.

The contact address on this site is a plain email link. Clicking it opens your own email client; nothing is transmitted to our servers by clicking. If you do write to us, we process the data in your message solely to handle your enquiry (Art. 6 (1) (b) or (f) GDPR) and retain it for as long as required to do so and to meet statutory retention obligations.

Our roster links to profiles on third-party creator platforms such as Instagram and Fanvue. Following such a link takes you to a service operated independently of us, and that operator’s own privacy policy applies from that point. We do not import fan data from those platforms into this website, and no personal data about you is transmitted to them merely by this page being displayed.

Under the GDPR you have the right to:

• information about the data we hold about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)

To exercise any of these rights, write to privacy@xbaddie.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

This site is served exclusively over TLS (HTTPS). We apply appropriate technical and organisational measures to protect the limited data we process against loss, manipulation and unauthorised access.

We update this policy whenever the site’s actual behaviour changes - for example if we were ever to add analytics or a contact form. The date at the top of this page always reflects the version in force.