Privacy Policy
Plain language about what data this site touches, why, and what your rights are. Short version: as little as possible, and nothing that tracks you.
Last updated: 2026-07-21
Who we are
Xo0 (xo0.io) is a small studio in Vilnius, Lithuania, building web applications and business automation. For everything in this policy, the data controller is Xo0. If you have any question about your data, write to [email protected] — a person will answer, not a form letter.
What we collect and why
Contact form
If you write through the contact form, we receive your name, e-mail, company (optional) and your message. The form is delivered to our inbox by e-mail using Resend, an e-mail delivery service. We use it for exactly one thing: replying to you. You are not added to any marketing list — there isn't one.
Website assistant (chatbot)
The assistant processes the conversation text you type. Your messages are sent to Anthropic's Claude API to generate replies. If you voluntarily leave an e-mail address or phone number in the chat, the assistant may send us your inquiry or send you a summary e-mail — only ever to the address you yourself provided.
Conversation history is stored only in your browser (localStorage, for 7 days). We do not keep chat logs on our server.
Call bookings via the assistant
If you book a call through the assistant, the booking — name, phone/e-mail, company, topic, chosen time and your IP address (spam protection) — is stored on our own server in Lithuania. Bookings are kept for up to 12 months, then deleted.
Analytics
We use our own privacy-friendly, cookie-free analytics: aggregated page counts only — page path, referrer domain, browser language and device class (phone or desktop). No cookies, no cross-site tracking, no data sold or shared with anyone. Your IP address is not stored.
localStorage (not cookies)
The site keeps a few things in your browser's localStorage: your theme choice (dark/light), a game score, and the chat history mentioned above. All of it stays in your browser and none of it tracks you — which is why there is no consent banner. You can clear it anytime via your browser settings.
Service providers (processors)
- Cloudflare — hosting, CDN and e-mail routing (EU/global infrastructure).
- Anthropic — AI replies for the assistant (USA; certified under the EU-US Data Privacy Framework).
- Resend — e-mail delivery.
That is the whole list. We share data with no one else.
Your rights (GDPR)
You can ask what data we hold about you, have it corrected or deleted, or object to its processing. Write to [email protected] — we will answer within a month, usually much faster. You also have the right to complain to the Lithuanian State Data Protection Inspectorate (VDAI, vdai.lrv.lt).
Updates
As the site changes, this policy may change too. The date of the last update is always shown at the top of this page. Last updated: 2026-07-21.