Legal
Privacy policy
Effective October 6, 2026
The short version: we collect very little, we don't track you with cookies or third-party analytics, we don't advertise, and we never sell your information.
eOctavo ("we", "us") runs this website and makes the eOctavo firmware for the Xteink X3. This page explains what information the website and the firmware handle, why, and what you can do about it. Questions go to support@eoctavo.com.
When you buy eOctavo
Payments are processed by Stripe. You enter your card details on Stripe's checkout page, not on this site, so we never see or store your card number.
Stripe shares with us your name, your email address and the purchase details (what you bought, the price, the date, and whether it was refunded). We use them to:
- deliver your download, and check that a download link belongs to a paid purchase that hasn't been refunded;
- email you when a new version of eOctavo comes out (updates are free);
- help you with support and refunds, and keep the records we need for accounting and tax.
Stripe emails your receipt and handles your payment under its own privacy policy.
When you visit this website
Visit statistics. We count visits on our own server, without cookies and without any third-party analytics or tracking scripts. For each page view we store only daily totals: how many pages were viewed, which pages (their paths, like /apps), which sites linked here (or the ?ref= tag in the link), and whether the visit came from a phone or a computer. We also count how many times the Buy button was pressed and the download was started.
To count how many different people visited in a day, the server turns your IP address and browser name into a scrambled code using a secret key that exists only in the server's memory and is replaced every day. The codes are kept in memory for that day only and are never written down, so the totals can't be traced back to you.
Server logs. Our hosting provider, Render, keeps server logs that can include your IP address, your browser name and the pages you asked for. They're kept for a short time, for security and to fix problems.
Protecting the site. To stop abuse, the server briefly keeps IP addresses in its memory, for example to limit how many apps one address can submit in a day or how often one address can try to sign in to the admin pages. This is never stored and is gone when the server restarts.
Cookies. The only cookie this site sets is a sign-in cookie for the store owner on the admin pages. Visitors never get one.
Fonts and other content. The site's fonts and pictures are served from this site, so loading a page doesn't contact Google or any other outside service.
The app simulator. Apps you run in the simulator on the developer pages run in your browser, and what they save stays in your browser's local storage. If an app fetches something from the web, our server fetches it for you, so the other site sees our server rather than you.
When you submit an app
The submit form collects the app's files (the script, and the art pack, icon and screenshots if you add them), its listing (name, category, author name or handle, version, tagline, description and what's new), your email address, any notes for the reviewer, and your agreement to the submission terms. We also keep the report from the automatic check and a scrambled code made from your IP address with a secret key, used only to spot repeated abuse.
Submissions are stored in the store's private GitHub repository, apart from the public site. We use them to review your app, to contact you about it, and to publish it if it's approved. If it is, the app and its listing (including the author name) appear in the store for everyone. Your email address is never published. You can ask us to delete your submission at any time.
On your X3
eOctavo has no account and sends no analytics or usage data. Your books, notes, reminders, calendar, contacts, drafts and messages stay on the X3 and its SD card.
The X3 goes online only when you've set up Wi-Fi and use a feature that needs the internet:
- Store. The list of apps, and the apps you install, come from this website.
- Weather. The X3 sends the coordinates of the weather location you've set to this website, which asks MET Norway (the Norwegian Meteorological Institute) for the forecast. We round the coordinates to about 1 km before passing them on, and don't pass on your X3's IP address. Each forecast is kept in the server's memory for a short while, filed under its rounded location, so nearby requests don't have to ask again; we don't keep a log of locations or link them to you. Like any request, it can appear briefly in our hosting provider's logs.
- Clock. To set the time, the X3 asks public time servers (time.cloudflare.com and time.nist.gov), which see its IP address, as any internet service does.
- Browser. Pages you open in the Browser app come straight from the websites you type in.
- Store apps. Some apps you install fetch information from their own online services: a quotes app, for example, gets its quotes from zenquotes.io. Those services are run by other people and see your X3's IP address. Each app's page in the store says whether it uses the internet.
Your weather location is up to you: pick a city in Personalize on the X3, type a place into the companion page, or tap "Use where I am" there, which asks your phone for its location (and time zone) and sends it to the X3 over Bluetooth. It stays between your phone and your X3 until the X3 asks for a forecast as described above.
The phone companion. The companion page is served by this website, but once it's open it talks to your X3 directly over Bluetooth. Notes, events, files, locations and anything else you send go from your phone to the X3 without passing through our server. iPhone texts and notifications shown in Messages also arrive over Bluetooth and stay on the X3.
Who else handles your information
We use a few services to run the store: Stripe (payments), Render (hosting), GitHub (storing app submissions, the site's content and the daily visit totals) and MET Norway (forecasts, which only get rounded coordinates). Some of them process data in the United States. We don't sell or rent personal information, we don't share it with advertisers, and there are no ads on this site.
We may disclose information if the law requires it.
Your choices and rights
Email support@eoctavo.com to ask what we hold about you, to correct it, or to have it deleted. We'll reply within 30 days. We may need to keep purchase records where accounting or tax law requires it.
We use purchase details to provide what you bought, and visit totals, logs and abuse protection because we have a legitimate interest in running a working, secure website. If you're in the EU or the UK you can also complain to your data protection authority.
Children
This site isn't directed at children under 13, and we don't knowingly collect information from them. If you think a child has sent us personal information, email us and we'll delete it.
Changes
If we change this policy we'll update this page and the date at the top.
eOctavo