Privacy Policy

This policy explains the principal processing carried out by XDolls24.com. It is intended to describe the current V3 storefront and checkout rather than legacy systems.

1. Controller

XDolls24.com
Eichendorffstr 2a
57518 Betzdorf, Germany
Email: [email protected]

2. Order and support data

We process information required to operate the store, including contact details, billing and shipping information, ordered products, order status, payment-route references, support messages and fulfillment data.

3. Payments

Payment is handled through EcomTrade24 Pay hosted checkout and the payment route made available for the order. XDolls24 receives payment status and reference information needed to reconcile the order but does not store full card credentials.

4. Essential sessions and cart

The storefront uses essential first-party session data for cart, checkout, security, CSRF protection, age-gate state and other features necessary to operate the site.

5. First-party analytics

The store uses server-side first-party analytics to count visits and commerce-funnel events such as product view, add to cart, checkout start, payment handoff and purchase. The V3 analytics implementation does not create a persistent advertising identifier. Raw IP addresses are not stored in the analytics hit table; a short-lived one-way daily pseudonym is stored instead. Known scanners and common automated clients are excluded where detected.

6. Security and infrastructure

Technical logs can be processed for security, abuse prevention, debugging and service reliability. The site can also use infrastructure services such as Cloudflare for network security, performance and related technical functions. Those providers can process connection data according to their own applicable terms and privacy information.

7. Fulfillment and communications

Order data can be shared with suppliers, logistics providers and email infrastructure only to the extent required to fulfill the order, provide tracking, send transactional messages or handle support.

8. Legal bases and retention

Processing can be based on contract performance, legal obligations, consent where requested, and legitimate interests such as service security and reliable operation. Data is retained only as long as necessary for the applicable purpose and legal retention obligations.

9. Your rights

Depending on the applicable law, you may have rights of access, rectification, deletion, restriction, portability, objection and the right to lodge a complaint with a competent supervisory authority. Contact [email protected] for privacy requests.

10. International processing

Some service providers or payment/fulfillment routes may process data outside the country in which the customer lives. Where required, the relevant safeguards and provider terms apply. We do not claim that every service involved in an international order is physically hosted only inside the EU.

Last updated: 24 August 2026.