✦ Private Passage
XO.BOXData Care / Founding PreviewPassage Index ↗

Data should carry meaning—not surveillance

What XO knows.
What XO cannot know.

This page describes the current founding preview in plain language. It is an operational transparency note, not yet the final legal privacy notice required before a wider public campaign.

Kept on your device

The quiet trail
belongs to you.

Your North Star Trail and Return Message live in this browser only. They are not submitted to XO.

North Star Trail
Visited core passages
Return Message
Your words, sealing time and opening time
Calendar reminder
Created locally; never contains your words
Clearing browser data may also clear these private records.

Sent intentionally to XO

What you choose
to contribute.

World Box launch list

Email address, consent text and consent time in a private consent receipt

Only World Box progress and launch updates. Managed by XO. Contact foundry@xo.box for withdrawal, correction, access or deletion. See the World Box page for the list-specific notice.

XO Collection trial

A hash of your sign-in identifier, your verified public wallet address, wallet-link challenge data, stable card identifiers, the assigned Lumen route and its reveal commitment, and any NFC link you create

To restore your own cards, verify wallet control, keep a reveal unchanged and replace an NFC link without replacing the card. Card details require the owning account. QR and NFC links contain a locator, not a wallet key or access grant. Unlinking the wallet keeps your cards; replacing an NFC link makes the previous link inactive.

XO GAME guest visit

A random guest identity hash, game progress and a seven-day expiry

To resume your Harbor visit and shared tabletop game

Community tasks

A hash of your site sign-in identifier, chosen public credit name, task claims, submissions, evidence links, review decisions and task history

To keep responsibility recoverable, review contributions and publish accepted results. Emails are not stored in task records. Unreviewed submissions are visible only to the current contributor and the XO reviewer; earlier task history remains with the reviewer.

Early Access

Email address and consent time

To hold and answer an early-access request

Partner Passage

Name, email, optional organization, chosen role, reason and consent time

To consider and answer a potential collaboration

North Star Nomination

Nominee name, optional public link, reason, nominator email and consent time

To review a curated signal and contact the nominator if context is needed

Foundry Response

Name, email, optional studio, location, craft seat, public work link, response and consent time

To assess a potential paid sample passage

Current boundaries

XO does not need
to know everything.

Required before campaign activation

Trust needs
a named keeper.

Before XO actively drives public traffic, the final notice must name the responsible legal entity and contact, exact retention periods, service providers, data locations, request procedure and applicable rights. Until those decisions are canonical, XO should not pretend they are.

Founding transparencyPublished in this candidateFinal legal noticeRequired before campaign
Open the Proof Ledger →
Data care