Last updated: August 28, 2026
Who we are
XLSonic (“we”, “us”) is an independent AI-focused publication operated by Cameron Cainsh, based in Italy. Contact: mcainsh.cameron@gmail.com.
What we collect
- Comments — currently disabled on this site. If re-enabled in the future, we would collect the data shown in the comment form, your IP address, and browser user-agent string for spam detection.
- Embedded videos — Articles may embed YouTube videos. We load all embeds from youtube-nocookie.com, the privacy-enhanced mode, which does not set tracking cookies when you do not interact with the video. If you click play, YouTube may collect data per its own policies (see “Third-party services” below).
- Server logs — Our hosting provider (Hostinger) automatically logs standard technical data (IP address, browser type, pages visited, timestamps) for security and operational purposes. This is a legitimate interest under GDPR Art. 6(1)(f). See Hostinger’s privacy policy for retention details.
- Cookies — This site sets no tracking or advertising cookies. The only cookies are strictly functional WordPress cookies, set only when you log in as a contributor.
Third-party services
We embed content from YouTube (Google). When a video is played, data (including your IP address) may be transmitted to Google. We use the privacy-enhanced youtube-nocookie.com mode to minimize this. Google’s own privacy policy governs that data: policies.google.com/privacy.
We do not use Google Analytics, advertising networks, social media pixels, or any third-party trackers.
Your rights (GDPR)
Under the EU General Data Protection Regulation you have the right to: access your personal data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and lodge a complaint with your national supervisory authority (in Italy: Garante per la Protezione dei Dati Personali).
To exercise any right, email mcainsh.cameron@gmail.com. We respond within 30 days.
Legal basis & retention
Processing of server logs rests on legitimate interest (site security and operation). Comment data, if ever collected, would rest on your consent. We retain personal data only as long as necessary for the purposes above.
Security
The site is served exclusively over HTTPS. Access to the content management system is restricted to the site owner via strong authentication.
Changes to this policy
We will update this page as our data practices evolve (e.g., if a newsletter launches) and revise the “last updated” date above.