Privacy Policy
Plain language about what data this site touches, why, and what your rights are. Short version: as little as possible, and nothing that tracks you.
Last updated: 2026-07-21
Who we are
Xo0 (xo0.io) is a small studio in Vilnius, Lithuania, building web applications and business automation. For everything in this policy, the data controller is Xo0. If you have any question about your data, write to [email protected] — a person will answer, not a form letter.
What we collect and why
Contact form
If you write through the contact form, we receive your name, e-mail, company (optional) and your message. The form is delivered to our inbox by e-mail using Resend, an e-mail delivery service. We use it for exactly one thing: replying to you. You are not added to any marketing list — there isn't one.
Website assistant (chatbot)
The assistant processes the conversation text you type. Your messages are sent to Anthropic's Claude API to generate replies. If you voluntarily leave an e-mail address or phone number in the chat, the assistant may send us your inquiry or send you a summary e-mail — only ever to the address you yourself provided.
Conversation history is stored only in your browser (localStorage, for 7 days). We do not keep chat logs on our server.
Call bookings via the assistant
If you book a call through the assistant, the booking — name, phone/e-mail, company, topic, chosen time and your IP address (spam protection) — is stored on our own server in Lithuania. Bookings are kept for up to 12 months, then deleted.
Analytics
We use our own privacy-friendly, cookie-free analytics: aggregated page counts only — page path, referrer domain, browser language and device class (phone or desktop). No cookies, no cross-site tracking, no data sold or shared with anyone. Your IP address is not stored.
What we leave in your browser
We set no cookies at all. Your browser storage keeps five things, each of them created only after something you did yourself: your theme choice, your accent colour, your chat history with the assistant (7 days), a game score, and a flag that you have already seen the privacy notice. You can clear all of it anytime via your browser settings.
There is no consent banner here, and the reason is not that these are "not cookies". What matters legally is purpose, not technology: EU rules allow storing, without separate consent, whatever is strictly necessary for a service you asked for yourself. Your theme is saved only when you flip the switch; the chat is stored only when you start it. Should tracking or advertising tools ever appear here, we would ask for consent up front and let you decline.
Service providers (processors)
- Cloudflare — hosting, CDN and e-mail routing (EU/global infrastructure).
- Anthropic — AI replies for the assistant (USA; certified under the EU-US Data Privacy Framework).
- Resend — e-mail delivery.
That is the whole list. We share data with no one else.
Your rights (GDPR)
You can ask what data we hold about you, have it corrected or deleted, or object to its processing. Write to [email protected] — we will answer within a month, usually much faster. You also have the right to complain to the Lithuanian State Data Protection Inspectorate (VDAI, vdai.lrv.lt).
Updates
As the site changes, this policy may change too. The date of the last update is always shown at the top of this page. Last updated: 2026-07-21.