Privacy policy
We designed Kitofy so that we need as little data as possible. Your files are processed on your device and never uploaded to our servers. This policy explains what data is still processed and why.
Data controller
The controller of personal data is John Snob (United States). For questions about data processing, use the Contact page or write to support@kitofy.com.
Your files
Files are read and processed by your browser. Their contents are not sent to us or to third parties, and we have no access to them.
Data stored in your browser
Some data is stored only on your device, in the storage of your browser:
- the last settings for each format (local storage) - so you do not have to choose them again;
- the number of completed operations and the date when to ask you to rate the service again (local storage);
- temporary results (Origin Private File System) - they are deleted when you remove a file from the list, and data from old sessions is cleared automatically after 24 hours.
Anonymous statistics
After a successful operation the site sends us only the pair of formats - for example, HEIC → JPG. The server stores the number of operations for each pair per day: without IP addresses, cookies, file names or file contents. These numbers make up the counter in the site footer.
Rating the service
If you leave a rating, we store the pair of formats, the rating and a SHA-256 hash of your IP address with a secret salt - so that one rating per pair is counted from one address: a repeated rating replaces the previous one. The IP address itself is not stored, and without the secret salt it can't be recovered from the hash.
Contact form
When you send a message, we receive the topic, the text, your email (if you entered it), the site language and, if you chose to attach them, technical details: the site version, the page address, the browser and the screen size. The message is saved in our database and forwarded to the team in Telegram.
To protect against spam, the form uses Cloudflare Turnstile: it checks the browser and receives your IP address. We do not store this address.
Hosting
The site is hosted on Cloudflare. Like any hosting, Cloudflare processes technical request data - IP address, browser, page address - to deliver the site and protect it from attacks. The site does not use advertising or analytics cookies.
Error reports
The site does not send error reports at the moment. If we enable them, they will never include the contents of your files, and this policy will be updated.
Changes to this policy
We will update this policy when the way we process data changes. The date of the last update is shown at the top of the page.