Privacy Policy
Effective date: 7 May 2026
Last updated: 7 May 2026
This Privacy Policy describes how vscxml (“we”, “us”) processes personal data in connection with the website vscxml.com (the “Site”). It applies to visitors who access documentation, download information, or otherwise use the Site.
We process personal data only as described here and in line with applicable data protection law, including the EU General Data Protection Regulation (“GDPR”) where it applies.
1. Controller
The controller responsible for processing personal data in connection with this Site is:
[Legal entity name]
[Street, number]
[Postal code, city]
[Country]
Email: [privacy contact email]
(Replace the bracketed placeholders with your legal entity and contact details before publication.)
2. Scope
This policy covers processing through the public marketing and documentation website. It does not replace privacy terms that may apply to desktop applications, CLI tools, commercial contracts, or beta / preview programmes, which may be described in separate notices or agreements.
3. Categories of personal data
Depending on how you use the Site, we may process:
| Category | Examples |
|---|---|
| Technical / usage data | IP address, approximate location derived from IP, date and time of access, requested URL, HTTP referrer, user agent, device/browser type |
| Communication data | Email address and message content if you contact us |
| Optional analytics data | If you consent to analytics cookies or similar technologies, pseudonymous identifiers and interaction data as described in our Cookie Policy |
We do not aim to identify natural persons beyond what is necessary to operate and secure the Site. Where analytics are used, we configure them to reduce identifiability where feasible (e.g. IP anonymisation if supported by the product).
4. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Delivering the Site, TLS, load balancing, abuse prevention | Art. 6(1)(f) GDPR — legitimate interests in secure, stable operation |
| Responding to enquiries | Art. 6(1)(b) or (f) GDPR — pre-contractual / legitimate interests |
| Non-essential analytics or similar tools | Art. 6(1)(a) GDPR — consent, where required |
Where we rely on legitimate interests, you may object under Art. 21 GDPR; see section 8.
5. Hosting, CDN, and subprocessors
The Site is served through infrastructure providers (e.g. hosting, DNS, TLS certificates, content delivery). Those providers necessarily receive technical data (including IP addresses) to deliver pages. We select providers with appropriate safeguards and, where required, data processing agreements under Art. 28 GDPR.
A current list of main subprocessors is available on request at the contact address above.
6. Third-party content
Some pages may load resources from third-party domains (for example fonts or syntax-highlighting assets). Those providers may receive technical data (such as IP address) as part of the HTTP request. We minimise third-party calls where practical and document optional analytics separately in the Cookie Policy.
7. Storage duration
- Server and security logs: typically retained for a limited period necessary for security and troubleshooting, unless longer retention is required by law.
- Consent records (if applicable): stored as required to demonstrate valid consent.
- Analytics (if enabled with consent): according to the analytics provider’s settings and this policy.
8. Your rights
Where the GDPR applies, you may have the right to: access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. You may also lodge a complaint with a supervisory authority.
To exercise your rights, contact us at [privacy contact email].
9. International transfers
If personal data is transferred outside the European Economic Area, we ensure appropriate safeguards (e.g. Standard Contractual Clauses) where required.
10. Children
The Site is directed at professionals and developers. It is not intended for children under 16.
11. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change accordingly. Material changes will be highlighted where appropriate.
12. Contact
For privacy-related questions: [privacy contact email]