Privacy policy
Last updated: 22 October 2026
Xpandity.com SRL (Tax ID BE0473523118, Rue Ruy 41, 4400 Flémalle, Belgium) runs this website and the apps below and is responsible for the personal data they process. For questions or requests, email dpo@xpandity.com.
Where we store data
We store data in the EU: on AWS in Ireland (eu-west-1) and on our own servers at Akamai (Linode) in Amsterdam and Frankfurt. Crash reports go to an error tracker we host ourselves. They do not include names, email addresses or phone numbers, and we delete them after a short time. We do not sell data, show ads or use third-party trackers.
Some services we use, such as Apple, carriers and payment providers, can process data outside the EU under their own privacy policies.
xpandity.com
This website sets no cookies and has no analytics. Our web server logs IP addresses, pages visited and browser details for security, and keeps these logs for up to 3 months.
Videos and 360° tours are embedded from Vimeo, YouTube and Little Planet. Videos load when you press play. The 360° tour on the home page loads when you scroll to it. Once loaded, these services apply their own privacy policies.
CueHero
CueHero runs digital queues for businesses.
- Visitors. If you join a queue, you can leave a phone number or email address so we can tell you when it is your turn. We delete both 7 days after your visit and keep the ticket without them for statistics. Text messages are sent through SMSAPI, in the EU.
- Business users. We keep the name and email address of people who manage a queue, and a password if they set one, for as long as the account exists.
- Displays and sensors. We receive device identifiers and readings from CueHero displays and counters. We delete the raw readings after 2 days and keep only the counts.
Push notifications to the app are sent through Apple.
Xpandly
Xpandly is digital signage for Apple TV. We keep the name and email address of account holders, the images and videos they upload, and the identifiers of their Apple TVs. Content is deleted when its owner removes it, and the rest when the account is closed. Push notifications are sent through Apple.
OneLink.page
OneLink.page hosts personal link pages. We keep each account holder's email address and username, and the links they publish. We count clicks on those links, but the counts contain nothing about the visitor. Account holders can reset them at any time.
Shipping
Our shipping platform (track.xpa.be) handles orders for merchants. For each order, the merchant's web shop sends us the recipient's name, address, email address and phone number. We pass these to the carrier delivering the parcel. Payments go through Stripe or PayPal. Tracking pages are public for 4 months, and we delete the shipment after 1 year. The Shipping privacy policy has the details.
Sticker apps
Our iMessage sticker packs, SportsCarToons and the P-Collection, collect no data. If you allow it in your device settings, Apple shares anonymous usage and crash data with us.
Your rights
Under the GDPR, you can ask for a copy of your data, have it corrected or deleted, limit or object to how we use it, or receive it in a format you can move elsewhere. Email dpo@xpandity.com and we will reply within one month. You can also complain to the Belgian Data Protection Authority at dataprotectionauthority.be.
Changes
When we change this policy, we update the date at the top.