1. Information you provide
- XFG Account information: email address, display name, email-verification status, identity-provider account identifier, and optional communication choices.
- Forum information: forum username, email address, password hash, profile preferences, avatar, and other forum profile details you choose to add.
- Connected services and creator profiles: when you choose to connect Discord, XFG receives your Discord user ID, username, display name, and avatar reference. XFG also stores creator-profile links, visibility choices, and whether you enabled streaming-profile synchronization. XFG never receives your Discord password, and the short-lived Discord authorization token used to verify the connection is not retained.
- Optional TikTok profile connection: when enabled and you choose Connect TikTok in your XFG Account, XFG uses TikTok's basic profile permission to verify your account and saves your app-scoped account identifier (
open_id), display name, a local snapshot of your profile picture when available, and connection timestamps. This connection supports your private XFG profile and avatar selection. Basic profile linking alone does not retain access or refresh tokens. - Optional TikTok video library: if you separately enable video access in Creator hub, XFG requests your profile username and public videos. XFG stores encrypted access and refresh tokens on its private server to update your library, together with video IDs, titles, descriptions, dates, duration, thumbnails, links, view counts when available, and the clips you select. These selections remain in your private Creator hub. This feature does not request video upload or publishing permission. Tokens and cached video details are removed when you stop video syncing or disconnect TikTok from XFG.
- TikTok playback: opening a clip loads TikTok's embedded player. TikTok then receives your browser's request and handles playback under its own privacy and cookie policies. The player is not loaded before you choose a clip.
- Community content: posts, topics, reactions, reports, attachments, private messages, and communications with administrators or moderators.
- Support information: details you submit when asking for help, reporting content, appealing moderation, or contacting XFG.
Never post sensitive personal information publicly. Forum posts and profile details may be visible to other members or the public depending on forum settings.
2. Information collected automatically
When you access XFG, the website, forum, hosting provider, and security network may process IP address, date and time, requested page, referring page, browser and device information, session identifiers, login activity, error data, and security events. This technical information is used to deliver pages, maintain sessions, prevent abuse, troubleshoot problems, and protect accounts.
3. How XFG uses information
- Operate the website, XFG Account, forum, member accounts, and community features.
- Authenticate users and remember requested preferences.
- Verify a connected Discord identity, prevent one Discord account from being connected to multiple XFG Accounts, and show the connected-service status you requested.
- When you enable streaming-profile synchronization, check XFG Discord membership and creator eligibility, deliver selected creator links to the XFG streaming bot, monitor supported public streaming profiles, and support Discord live alerts, dashboards, and temporary streaming roles.
- Moderate content, investigate reports, prevent spam, and enforce community rules.
- Secure systems, diagnose errors, maintain backups, and prevent fraud or unauthorized access.
- Respond to support requests and service-related messages.
- Comply with valid legal obligations and protect the rights and safety of XFG and its community.
4. When information is shared
XFG does not sell personal information. Information may be shared with hosting, content-delivery, security, email, backup, and technical service providers that help operate XFG; with moderators who need it to manage the community; when you intentionally post content publicly; or when disclosure is reasonably necessary to comply with law, address fraud or security threats, or protect people and rights.
When you deliberately connect Discord, XFG exchanges an authorization code with Discord and requests basic identity information under Discord's policies. When streaming-profile synchronization is enabled, XFG may check public status information from the creator platforms you selected. Third-party destinations linked from XFG receive information under their own policies after you choose to visit or connect them.
5. Retention
Account data is generally kept while an account remains active. Disconnecting Discord disables the connection and queues removal of synchronized profiles from the streaming bot. Removing a creator link stops future synchronization of that link. Limited revoked-link, delivery, and audit records may remain as reasonably needed to prevent duplicate linking, prove user-requested changes, troubleshoot delivery, secure the service, and maintain backups. Alerts or other content already posted to Discord are not automatically erased when a connection is removed. Posts and topics may remain after an account closes so conversations retain context, but the account may be deactivated or identifying profile details reduced where appropriate. Security records, moderation records, service logs, and backups are kept only as long as reasonably needed for operations, dispute handling, safety, recovery, and legal obligations. Retention periods vary by record type and backup cycle.
6. Your choices and privacy requests
You can stop video syncing in Creator hub while keeping your TikTok name and avatar connected. Disconnecting TikTok in your XFG Account removes the local profile connection, saved picture, video-access tokens, cached video library, and selected clips. A nonsecret deletion marker prevents an earlier authorization response from restoring removed access. These local controls do not revoke the shared TikTok app authorization or directly disconnect the streaming bot; you can review the app's permissions separately in TikTok.
XFG Account members can add, edit, hide, or remove creator links; turn streaming-profile synchronization off; and disconnect Discord from Connected Services. Forum members can review or change many forum details through the forum User Control Panel. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, or a copy of personal information. Submit a request through the XFG administrator contact page. XFG may need to verify that the request belongs to you before acting.
7. Children’s privacy
XFG is a general gaming community for users age 13 and older and is not directed to children under 13. Do not create an account or submit personal information if you are under 13. If XFG learns that it holds personal information submitted by a child under 13 without appropriate authorization, XFG will take reasonable steps to remove it. A parent or guardian may contact XFG using the administrator contact page.
8. Security and international access
XFG uses reasonable technical and administrative safeguards, including HTTPS, access controls, password hashing provided by the forum software, and security monitoring. No online system is completely risk-free. XFG is operated from the United States, and information may be processed in the United States or other locations used by service providers.
9. Policy updates
This policy may be updated when the services or information practices change. Material changes will be identified by a new effective date and may also be announced through the website or forum when appropriate.
hCaptcha bot protection
When you submit a Gear Shop newsletter signup, hCaptcha checks for automated abuse. It may process your IP address, browser and device information, and interactions with its verification challenge. XFG sends the verification token to hCaptcha before saving your signup; your newsletter email address is not included in that verification request.