Last updated: April 2026
1. Who we are
XDRIP Digital Management LLC ("XDRIP", "we", "us") operates Xdripia Waves (xdripiawaves.com). This Privacy Policy explains what personal data we collect, how we use it, and the choices you have.
2. Information we collect
We collect the minimum information needed to operate the platform.
- Technical data: IP address, browser type, device type, page views and referrer. Used for security, abuse prevention, and aggregate operational metrics.
- Wallet addresses and transaction data (where blockchain features are exposed): publicly visible on-chain data such as transaction hashes, smart-contract interactions, and metadata. Stored on the public blockchain and not under our exclusive control.
- Account data (only if you sign in or contact us): name, email, message content, and authentication metadata.
- Cookies and similar technologies: see our Cookie Policy.
- Consent records: timestamp, IP address, user agent and your category choices, stored as proof of consent under GDPR Art. 7.
3. How we use your information
- To deliver and maintain the platform and its features.
- To respond to inquiries you submit through contact forms or email.
- To improve performance, accessibility and user experience.
- To meet legal obligations (tax, accounting, lawful requests).
- To enforce our Terms and prevent abuse.
We do not currently use third-party advertising or analytics services on this site. Should that change, this policy will be updated and you will be asked for renewed consent through the cookie banner.
4. Legal basis (GDPR / UK GDPR)
- Contract (Art. 6(1)(b)) — to provide services you request.
- Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, basic operations.
- Consent (Art. 6(1)(a)) — for non-essential cookies, marketing, newsletter signup.
- Legal obligation (Art. 6(1)(c)) — tax, accounting, lawful requests.
5. Data retention
Off-chain logs are retained for no more than 12 months unless legal obligations require otherwise. Consent records are retained for the consent validity period (12 months) plus 24 months as audit trail. On-chain data is, by design, immutable and cannot be deleted by us.
6. Sharing
We do not sell your personal information. We may share data with:
- Hosting and infrastructure providers operating our platform.
- Legal authorities when required by lawful order.
- Successors in the event of a corporate restructuring.
7. International transfers
The platform is hosted on infrastructure located in the European Union. If we transfer data outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards.
8. Your rights
Depending on your jurisdiction (GDPR, UK GDPR, Swiss FADP, CCPA/CPRA, VCDPA, CPA, etc.) you may have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent at any time.
- EU/UK/CH — exercise rights via contact@xdrip.ioor our privacy request form. You may also lodge a complaint with your data protection authority.
- California (CCPA/CPRA) — see our Do Not Sell or Share My Personal Information page. We honor Global Privacy Control (GPC) signals automatically.
- Colorado (CPA) — opt-out of sale, sharing and targeted advertising via the same privacy request form. GPC is honored as a Universal Opt-Out Mechanism.
- Other US states (VA/CT/UT/...) — same access and deletion rights apply, use the form or email.
9. Children
Our services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.
10. Cookies and similar technologies
See our Cookie Policy for the complete list.
11. Changes to this policy
We may update this Privacy Policy. The "Last updated" date will reflect the latest revision. Material changes will be highlighted on the site and, where consent is required, a fresh banner prompt will appear.
12. Contact
XDRIP Digital Management LLC
Colorado, United States
Email: contact@xdrip.io