LEGAL - PRIVACY

Privacy Policy

How Xeralis handles account, checkout, project, product-key, support, and site usage information.

Last updated: August 28, 2026Contact: [email protected]

Who this covers

This policy covers Xeralis, the Xeralis customer portal, the public shop, product-key sales, support requests, and connected products such as Xarion and Kaelis when they validate access through Xeralis.

Xeralis is operated by xPralak from a Michigan, United States home base. For privacy requests, contact the operator at [email protected].

Information collected

Account and identity information may include name, email address, profile image from a sign-in provider, account role, and linked authentication provider identifiers.

Commerce information may include cart selections, coupons, payment status, PayPal transaction identifiers, product keys, purchased tiers, download access, refunds, and support history.

Project and support information may include submitted contact details, project descriptions, messages, showcase submissions, uploaded files, and any details you choose to provide.

Security and operations information may include audit logs, validation logs, IP-derived request metadata, user agent, timestamps, rate-limit events, and failed authentication or payment events.

Optional analytics information may include page views, selected click events, referrer, campaign parameters, device/browser basics, and a privacy-conscious session identifier only after analytics consent is granted.

Optional Kaelis leaderboard submissions may include benchmark profile and version, score and performance metrics, application version, completion time, and allowlisted display hardware such as CPU model, GPU model, driver version, memory capacity, and operating-system build. Public rankings use a pseudonymous runner label and do not publish account, product-key, or installation identifiers.

How information is used

Xeralis uses information to provide accounts, product keys, downloads, checkout, project communication, support, fraud prevention, application entitlement validation, analytics, service improvement, and legal or security recordkeeping.

Product-key validation may share a compact entitlement response with trusted connected applications. That response is limited to access status, product, tier, permitted features, relevant limits, expiration, and account metadata needed for activation or support.

Legal bases and choices

Depending on your location, processing may rely on contract necessity, legitimate interests, consent, legal obligations, or another lawful basis available under applicable privacy law.

Non-essential analytics storage is consent-based. You can accept, reject, or change analytics preferences through Privacy Choices in the site footer.

Xeralis does not intend to sell personal information. If that changes, Xeralis will update this policy and provide required opt-out choices before doing so.

Sharing

Xeralis may share information with service providers used for hosting, authentication, payment processing, email delivery, analytics, security, storage, and connected-product entitlement checks.

Xeralis may disclose information if required to comply with law, enforce terms, protect users, investigate abuse, or complete a business transfer.

Retention

Account, purchase, license, audit, and support records are kept as long as needed to provide services, support downloads and keys, resolve disputes, satisfy tax/accounting obligations, and protect the platform.

Optional analytics is kept only as long as useful for product and site improvement and should not collect more personal data than needed.

Private Kaelis submission records and moderation history are retained as needed to operate rankings, prevent replay or abuse, investigate disputed scores, and honor deletion or privacy requests. Rejected or hidden scores are not published.

Your rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, object to, or opt out of certain uses of personal information.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit sensitive personal information use, and non-discrimination. Xeralis honors browser-based Global Privacy Control signals by treating them as an analytics opt-out.

Submit requests to [email protected]. Xeralis may need to verify your account or request before taking action.

International users

Xeralis may be accessed globally. The operating home base is Michigan, United States, and information may be processed in the United States or wherever Xeralis service providers operate.

Where required, Xeralis will use appropriate safeguards for international transfers and will update this policy as providers and deployment regions mature.

Children

Xeralis is not directed to children under 13, or under the minimum age required by local law. Do not use Xeralis if you are not old enough to form a valid account or purchase contract.