Early alpha
Privacy information
How information is used to run XYRA's alpha.
Access and accounts
We collect the name, email address and role you provide to review access requests and manage accounts. Your account also records its approval status and account activity. Passwords are stored as password hashes. We use email to send account invitations and password-reset links.
Cookies and activity
A session cookie keeps you signed in. Your browser stores your light or dark theme preference locally. When you're signed in, the site records page visits with the page path, time, response status and a device category, along with your last activity. This helps the project understand alpha use and troubleshoot problems.
Access-request security
To help admins review requests and spot abuse, we record the request IP address, browser user agent, a short summary of pages visited before the form, form timing, and optional browser hints about form interaction and automation. We also keep hourly counts of failed sign-ins, repeated requests and gated admin-page attempts by IP, pruned after 30 days as security activity is recorded or maintenance runs. Signup evidence is kept with the account. We do not record keystroke contents, mouse history or a device fingerprint for this check.
Approximate IP location is looked up in a local database. Visitor IP addresses and email addresses are not sent to a third-party location API. Admins see advisory indicators and make approval decisions themselves; these checks do not prove identity, reliably identify every bot, or reveal when an email address was created.
Human verification
When enabled, the access request form uses Cloudflare Turnstile to help prevent automated submissions. Your browser connects to Cloudflare, which receives connection and browser information (including your IP address) to run the check. Our server sends the resulting verification token to Cloudflare; it does not send your name, email or role. See Cloudflare's privacy policy. If verification does not work, contact us using the email below.
Demo feedback
Feedback form responses are stored with your account and the time you submit them. XYRA admins can read your responses, name, email and role to improve the demos and follow up about your experience. Removing your account also removes its feedback responses.
Demo processing
The demos use remote processing to generate images from the included research datasets. Do not send patient data through feedback or support channels.
Questions or account removal
Email contact@xyra-app.com with questions about your information, corrections, or a request to remove your account. Please use the email associated with your request so we can verify it. Do not include your password.