XANDR Watchdog v 1.7.0

What is XANDR?

XANDR Watchdog is the security system of Dia's Awesome Website. It runs on this website’s own server — not on an outside service — and its only job is to keep your account and the site safe.

How it protects you

  • Password guessing is stopped. After 10 wrong tries from the same connection, that connection is paused for 15 minutes, even if it later guesses right.
  • Bots are kept out. Invisible traps on the log-in, sign-up and comment forms catch automated programs, and new accounts per connection are limited.
  • Account names stay private. The site never reveals whether a username exists, so attackers can’t collect them.
  • Important changes are watched. If someone tried to change critical settings or give themselves extra powers, it would be stopped and recorded.

What is recorded

  • When you log in and out, and failed attempts to log in to an account (including the username typed).
  • The IP address and the browser type of each of these events.
  • Changes to your account: email address, password changed (never the password itself), profile picture, role.
  • The pages you open while logged in, so unusual activity on an account can be noticed.
  • Attempts to attack the site, such as password guessing or bots probing the site.

What is never recorded

  • Your password — it is never stored, seen or sent by XANDR Watchdog.
  • Payment details.
  • What you do while browsing as a visitor without logging in (only log-in, sign-up and password-reset attempts are noted).

XANDR Watchdog sets no cookies and uses no trackers or advertising.

Who can see it, and for how long

Only the site’s administrators can see the security log. It is never sold, shared or used for marketing. Security alerts go only to the site’s administrators.

Everything is deleted automatically after 90 days; the list of pages you opened after 30 days.

Your choices

You can ask us what is recorded about your account or ask for it to be deleted (a record may be kept for as long as it is needed to deal with an attack). More details are in our privacy policy.