Privacy Policy

Across all VEXNILX products, we do not collect: your browsing history; the pages you visit in Orvaixon; your search queries; your keystrokes or form entries; advertising identifiers; cross-site behavioral profiles; or your precise location. We do not run third-party analytics or advertising trackers on our websites, and Orvaixon contains no telemetry that reports your activity to us.

Website server logs.Like nearly all web infrastructure, our hosting provider (Cloudflare) processes standard connection data — IP address, user agent, requested URL, timestamp — to serve pages, defend against abuse, and keep the lights on. These logs are used for security and operations only and are retained for a short period consistent with our provider's defaults.

Font downloads. When you download a typeface, the request appears in the same server logs. We may count aggregate download totals. We do not tie downloads to an identity.

Update checks (Orvaixon). The browser periodically asks our update endpoint whether a newer version exists. That request carries the version number and platform — enough to answer the question, nothing more.

Email you send us. If you email legal@vexnilx.com or otherwise contact us, we receive what you send and use it to respond.

If you enable sync in Orvaixon, your synced data (bookmarks, settings, history where enabled) is encrypted on your device with keys derived from a secret only you hold. What our servers store is ciphertext. We cannot read it, decrypt it on request, or recover it if you lose your key — that inability is the feature.

Where GDPR or UK GDPR applies, we process the limited data above on the bases of legitimate interests (operating and securing the Services), performance of a contract (delivering software and updates you request), and legal obligation where applicable. We do not process special-category data.

We do not sell or rent personal information — not to advertisers, not to data brokers, not to anyone, not under a euphemism. We share data only with infrastructure providers acting on our instructions (e.g., Cloudflare), when required by valid legal process (in which case we disclose the minimum required and push back on overbroad demands), or to protect the security of the Services.

We keep data only as long as needed for the purpose it was processed for. Operational logs expire on short rolling windows. Encrypted sync data persists until you delete it or disable sync, at which point it is scheduled for deletion from our systems.

Depending on where you live, you may have rights to access, correct, delete, or port personal data, to object to or restrict processing, and to complain to a supervisory authority. Given how little we hold, most requests are short conversations — but they are your rights, and we honor them. Contact privacy@vexnilx.com to exercise them; we will respond within the timelines required by applicable law.

The Services are not directed to children, and per our Terms of Service you must be at least 16 to use them. We do not knowingly collect personal information from anyone under 16; if we learn we have, we will delete it.

We use encryption in transit (TLS) for all Services, end-to-end encryption for sync, and least-privilege access internally. No system is perfectly secure; our mitigation strategy is to hold as little as possible, so a worst day for us is a boring day for you.

Our infrastructure provider operates a global network, so the limited operational data described above may be processed in multiple countries under appropriate safeguards, such as standard contractual clauses where required.

If we change this policy, we will post the update here with a new effective date, and give prominent notice for material changes. We will never retroactively weaken protections on data collected under an earlier version.

Privacy questions and requests: privacy@vexnilx.com.