Privacy Policy

Your files

Every tool marked “Runs in your browser” reads your file locally using standard browser APIs. The file is never transmitted to us, never written to a server, and never stored. Closing the tab discards it.

If a tool ever requires server-side processing, its page will say so explicitly, and the file will be deleted automatically within one hour of processing. No tool on KIVO does this today.

Accounts

There are none. You do not create an account to use KIVO, and we do not collect email addresses, names or passwords.

What is stored on your device

• Theme preference — light or dark, in your browser's local storage.
• Language preference — a cookie named kivo-locale. This is the one item here that travels with each request, because the server has to know which language to serve before it builds the page.
• Saved recipes — the workflows you build on the Recipes page, in local storage.

Apart from the language cookie, none of this leaves your device. All of it is functional: it exists because you chose something and expect the choice to stick. Clearing your browser data removes it.

Analytics

Usage is measured with Umami, self-hosted on our own subdomain. It is not Google Analytics, and no third party receives a copy.

It sets no cookies and writes nothing to your device. Visitors are counted using a hash our server computes from the IP address and browser, with a salt that is rotated every day — the address itself is never stored, and yesterday's hash cannot be lined up with today's.

The events record which tool was used and whether the operation succeeded or failed. They never contain file contents, filenames or pasted text. There is no advertising network, no third-party tracker and no profile that follows you between sites.

You can switch it off below, on this page.

Why there is no cookie banner

Because there is nothing to ask you about. KIVO sets no advertising or tracking cookies, and everything listed above is functional — the kind of storage that is exempt from consent precisely because you asked for it.

The analytics script reads a single key from your browser, umami.disabled, and only to check whether you have opted out. It writes nothing.

If that ever changes — advertising is the obvious case — you will get a real choice before anything loads, rather than a banner that assumes the answer is yes.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection. In practice we hold no personal data about you to act on — but if you believe otherwise, get in touch and we will investigate.

Changes

If this policy changes materially — in particular if any tool starts processing files on a server — the change will be reflected on the affected tool pages, not buried here.