Privacy Policy

Last updated: June 30, 2026

This Privacy Policy explains how Compitpros.com LLC, an Ohio limited liability company doing business as xlokk.com (“xlokk,” “we,” “us,” or “our”), collects, uses, and protects personal information when you use xlokk.com (the “Service”). We are the controller of your personal information.

We have written this policy to meet our obligations internationally, including under the laws of the United States (including the California Consumer Privacy Act, as amended by the CPRA), Canada (PIPEDA), and the European Union and United Kingdom (the EU and UK General Data Protection Regulation, “GDPR”).

By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

1. Information We Collect

Account information. If you create an account, we collect your email address and a password. We never store your password in plain text; it is protected using strong, one-way hashing (Argon2id), so we cannot see or recover it.

Authentication data. To keep you signed in, we use strictly necessary cookies and tokens (including a secure, httpOnly session cookie and a refresh token). These are required for the login feature to work.

Technical and log data. Like most websites, our servers automatically record limited technical information when you visit — such as your IP address, browser type and user agent, device and operating-system information, referring pages, and timestamps. We use this for security, abuse prevention, troubleshooting, and operating the Service.

Information you choose to give us. If you email us, we receive your message and contact details so we can respond.

Optional features (current and planned). Some features are optional and rely on information you choose to provide — for example, saving favorite locations, or setting a home port using your device’s location. We process this information only to provide the feature you requested. Location-based features are planned; when available, they will operate only with your choice or device permission.

Sign-in with third parties (if and when offered). If you choose to sign in using a third-party provider such as Google or Apple, that provider may share limited profile information with us (such as your name and email) to create or access your account, subject to that provider’s own privacy policy.

We do not knowingly collect more personal information than we need, and we do not collect sensitive categories of personal information.

2. Cookies and Analytics

We use only strictly necessary cookies, which are required for core functionality such as keeping you signed in. We do not use advertising cookies, and we do not sell or share your information for cross-context behavioral advertising.

We may use privacy-respecting, aggregate analytics to understand general usage (for example, which pages are popular) in a way that does not identify you individually. If we ever introduce analytics or other technologies that are not strictly necessary, we will update this Policy and, where the law requires it (for example, in the EU and UK), request your consent first.

3. How We Use Your Information

We use personal information to:

• operate, maintain, and secure the Service;
• create and manage your account and keep you signed in;
• provide features you request, such as saved favorites or a home port;
• respond to your messages and support requests;
• detect, prevent, and investigate fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our Terms.

4. Legal Bases (EU / UK Users)

Where the GDPR applies, we process personal information on these bases: performance of a contract (to provide your account and requested features); our legitimate interests (to secure, operate, and improve the Service), balanced against your rights; your consent (for optional features and any non-essential cookies, which you may withdraw at any time); and compliance with legal obligations.

5. How We Share Information

We do not sell your personal information, and we do not share it for targeted advertising. We share personal information only as follows:

• Service providers. With vendors that perform services on our behalf (such as hosting/infrastructure, email delivery, and, if you use it, third-party sign-in), bound to use it only to provide those services.
• Legal and safety. When we believe disclosure is necessary to comply with the law, enforce our Terms, or protect the rights, safety, or property of xlokk, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy.

6. International Data Transfers

We operate from the United States, and the information we collect is stored and processed in the United States. If you access the Service from outside the U.S. (including the EU, the UK, or Canada), you understand that your information will be transferred to and processed in the U.S., where data-protection laws may differ from those where you live. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) or your consent for such transfers.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this Policy — for example, for the life of your account and a reasonable period afterward — or as required by law. Technical logs are kept for a limited period for security and operational purposes and then deleted or anonymized. You may ask us to delete your account at any time (see Your Rights).

8. Security

We take reasonable technical and organizational measures to protect your information, including hashing passwords with Argon2id, using secure httpOnly cookies, and encrypting data in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Your Rights

Depending on where you live, you may have some or all of the following rights:

• to access the personal information we hold about you and to receive a copy;
• to correct inaccurate information;
• to delete your information (“right to be forgotten”);
• to restrict or object to certain processing;
• to data portability;
• to withdraw consent at any time, without affecting prior processing; and
• to opt out of the “sale” or “sharing” of personal information (we do not sell or share it) and to be free from discrimination for exercising your rights.

EU and UK users may lodge a complaint with their local data-protection supervisory authority (in the UK, the Information Commissioner’s Office). Canadian users may contact the Office of the Privacy Commissioner of Canada. California users have the rights described above under the CCPA/CPRA.

To exercise any right, email us at helm@xlokk.com. We will respond within the time required by applicable law. We may need to verify your identity before acting on your request.

10. Children’s Privacy

The Service is not directed to children, and we do not knowingly collect personal information from children under 13 (or under 16 where required in the EU/UK). If you believe a child has provided us personal information, contact us at helm@xlokk.com and we will delete it.

11. Do Not Track

Some browsers offer a “Do Not Track” signal. Because there is no common industry standard for responding to it, the Service does not currently respond to Do Not Track signals. We do not track you across third-party sites for advertising in any event.

12. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

Compitpros.com LLC (xlokk.com)
Ohio, United States
helm@xlokk.com