A small service with a small data footprint.

1. Controller and contact

The controller responsible for XR Signal is:

2. Hosting and technical request data

XR Signal is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel provides the hosting infrastructure and processes technical request data on behalf of the operator where it acts as a processor. Vercel states that it acts as a controller for certain service-generated data under its own Privacy Notice.

When the site is requested, Vercel may process the IP address, user agent, requested URL or path, timestamp, approximate request region, request identifiers, and related firewall, cache, or function metadata. XR Signal does not add custom visitor logging.

This processing is necessary to deliver, operate, protect, and diagnose the website. Its legal basis is Article 6(1)(f) GDPR: the operator's legitimate interest in providing a reliable and secure information service.

Vercel's current documentation states that runtime logs on the Hobby plan are retained for one hour. Vercel may separately process data required to secure and operate its platform under its own documented terms.

XR Signal's server functions are currently configured to run in Vercel's iad1 region in the United States. Technical request data may therefore be processed in the United States.

Vercel states in its Privacy Notice that it participates in the EU-U.S. Data Privacy Framework and uses standard contractual clauses or other appropriate mechanisms where required. Its published Data Processing Addendum applies to Pro and Enterprise customers.

Further information is available in Vercel's Privacy Notice, Runtime Logs documentation, and Data Processing Addendum.

3. Browser-local bookmarks and search

If a visitor bookmarks a signal, XR Signal stores only the signal's identifier in the browser's local storage under xr-signal-bookmarks. This information remains on the visitor's device and is not transmitted to XR Signal. It can be removed by unbookmarking signals or clearing the browser's site data.

Search queries exist temporarily in browser memory while the page is open. They are not persisted and are not sent to the XR Signal server.

4. Analytics, cookies, and tracking

XR Signal does not currently use analytics or tracking. It does not set advertising or tracking cookies, and it does not use a consent-management platform.

5. News, RSS, and YouTube sources

News RSS feeds and direct YouTube channel feeds are fetched by XR Signal's server. Ordinary page loading therefore does not disclose the visitor's IP address to those publishers or to YouTube.

YouTube videos are not embedded. XR Signal loads no YouTube scripts, players, or YouTube cookies. When a visitor follows a publisher, YouTube, GitHub, quiz, or other external link, the destination is an independent third-party service and processes data under its own privacy terms.

6. Functions that do not exist

XR Signal currently has no accounts, contact forms, newsletter, comments, user uploads, personalization profiles, production user database, advertising, third-party embeds, or AI summarization.

7. Your GDPR rights

Where the legal requirements are met, data subjects may request access, rectification, erasure, restriction, or portability of their personal data. They may object to processing based on legitimate interests and lodge a complaint with a competent data-protection supervisory authority.

Because bookmarks and search terms are not transmitted to XR Signal, the operator cannot retrieve or identify them. Browser-local bookmarks must be managed on the visitor's device.

8. Privacy contact

Questions or requests concerning this notice can be sent to: ivan.stefanov@gmx.de.