Privacy policy for xeveapp.com
Effective date: 15 October 2026
What this site is
xeveapp.com is an information page for xeve.ai, a service for adults in which you chat in text and video with AI-generated, fictional characters. On this site you can look at the characters, take a short quiz or try a scripted preview. You cannot create an account here, and no conversation takes place here. Every “Start chatting” or “Continue” button takes you to xeve.ai, where the privacy policy of xeve.ai applies.
Who is responsible (controller)
Jay Web Development & Services, Daxerstraße, 82140 Olching, Germany. Email: support [at] xeve.ai. Further details are in the imprint. We are the controller within the meaning of Art. 4(7) GDPR for the processing described here.
Hosting and delivery
This site consists of static pages delivered by Firebase Hosting, a service of Google Ireland Limited (Ireland) and Google LLC (USA). To deliver a page, Google necessarily processes your IP address, the address you requested, the time and information about your browser. We run no server of our own for this site and keep no visitor logs. The legal basis is our legitimate interest in delivering the site securely and reliably (Art. 6(1)(f) GDPR).
The short character videos are loaded from this site and from our content delivery network bunny.net (EU, at cdn.xeve.ai); when a video plays, your browser sends its IP address to that network. Fonts are hosted on this site; no external font service is used.
What is stored in your browser
We store your choice in the cookie bar in your browser's local storage (entry xa_consent). Nothing else is stored by this site. Once measurement is running (see below), Meta stores its identifiers in the cookies _fbp and _fbc and Google Analytics stores its identifiers in cookies beginning with _ga.
Measurement: when it starts
This site makes no location lookup. It uses the time zone your device is set to instead. If that time zone is in Europe, nothing starts until you choose “Allow measurement” in the cookie bar: no Meta pixel, no Google Analytics, no cookie of theirs. The legal basis is then your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). If your device is set to a time zone outside Europe, measurement starts when the page loads; the legal basis is our legitimate interest in measuring our own advertising and understanding how this site is used (Art. 6(1)(f) GDPR), and you can object at any time with the button at the end of this page. If your browser sends the Global Privacy Control signal, measurement never starts.
Advertising measurement (Meta Pixel)
We advertise xeve.ai on Facebook and Instagram. To see which advertisements lead people to xeve.ai and to an account there, this site uses the Meta Pixel of Meta Platforms Ireland Ltd. (Ireland) and Meta Platforms, Inc. (USA). It is the same pixel that runs on xeve.ai.
- What your browser sends: that a page was viewed, on the quiz and preview pages that the quiz or preview was completed, and that you clicked a button to continue to xeve.ai (reported to Meta as “ViewContent”). Your answers and the character you picked in the quiz are not sent. Every event carries the address of the page you are on, the Meta identifiers stored in your browser, your IP address and your browser's user agent. The addresses of the character pages of this site contain the name of the AI character the page shows (for example /chat/ followed by her name); that name is therefore part of the events sent from those pages.
- Purpose: measuring which advertisements work, so that we do not keep paying for advertising that does not. Meta also uses these signals to decide who is shown our advertisements, which can include showing them to you again.
- Roles: for the collection of this data in your browser and its transmission to Meta, we and Meta Platforms Ireland Ltd. are joint controllers (Art. 26 GDPR). Meta publishes the essential terms in its Controller Addendum. For everything Meta does with the data afterwards, Meta alone is responsible; see Meta's Privacy Policy.
- Transfers: Meta processes this data in the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework; we rely on the adequacy decision of the European Commission and additionally on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
- Retention: the Meta cookies stay in your browser for up to 90 days after your last visit unless you clear your browser data.
Web analytics (Google Analytics)
We use Google Analytics 4 of Google Ireland Limited (Ireland) and Google LLC (USA) to understand how this site is used: which pages are viewed, how far people get in the quiz or preview, and which button or character card they click. Google Analytics 4 does not store IP addresses. It follows the same rule as the Meta Pixel: in a European time zone only after “Allow measurement”, elsewhere from page load with the right to object. Google may process this data in the USA; Google LLC is certified under the EU-US Data Privacy Framework, and we additionally rely on the EU Standard Contractual Clauses. The Google Analytics cookies stay in your browser for up to two years unless you clear them. You can also block Google Analytics with Google's browser add-on; see Google's privacy policy.
When you continue to xeve.ai
The button you click carries the campaign details from the advertisement link you arrived with (for example the utm parameters and Meta's click identifier) and a note which page of this site you came from. xeve.ai stores them as described in its privacy policy under “Affiliate and Campaign Attribution” and “Advertising Measurement”, so that it can tell which advertisements lead to accounts and purchases. Nothing you did on this site beyond that note is passed on.
Turn measurement off
You can switch the Meta Pixel and Google Analytics off for this site at any time, with effect for the future. Your choice is stored in your browser; once it is off, nothing starts them again on this site. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on our legitimate interest (Art. 15 to 21 GDPR). Where processing is based on your consent, you can withdraw it at any time. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work; the authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA). To exercise your rights, write to support [at] xeve.ai.
We make no automated decisions about you on this site, and we do not sell personal data.