Privacy, in plain language.

This is the long version of the promise on the homepage. Same rules, more detail, still no legalese. If anything here ever stops being true, the version number at the top changes and the changelog says why.

What we collect: nothing by default.

This site runs no analytics today. No cookies. No third-party requests. Open your browser's network tab and check. There is no ad pixel, no data broker, no "partners." Your data isn't inventory here. The only thing stored on your device is a single localStorage entry named khaivo-theme: it remembers your light or dark choice and never leaves your browser.

One honest caveat: the host that serves these pages (Cloudflare) keeps standard server logs, which can include your IP address and a timestamp. That's ordinary hosting, it isn't ours to sell, and we don't use it for anything. If your connection to this site ever fails, your browser may also send Cloudflare a short error report about that failure. It goes to Cloudflare, never to us.

If analytics ever arrive, you'll read about it here first.

We may eventually want to know how many people visit. If that day comes, the analytics will be self-hosted, cookieless, and aggregate-only: a tool like Plausible or Umami that counts visits without identifying visitors. This page will say so before it happens, with a version bump at the top. No silent changes.

Tools tell you what they send. Most send nothing.

Every tool that can run entirely in your browser, does, and says so right in its UI: "Runs in your browser, nothing is uploaded." What you paste stays on your machine.

Some tools genuinely need a server to work. Those say exactly what is sent, on the tool's own page, before you use it. If a tool's page doesn't mention a server, it doesn't use one.

The newsletter, when it opens: double opt-in, one tap out.

When the newsletter launches, you'll confirm your address before receiving anything (double opt-in), and every email will carry a one-tap unsubscribe that actually works. Your address is never shared or sold. Ever.

Payments, when pro tools ship: Stripe handles them, not us.

Paid tools will use Stripe Checkout. Your card number goes to Stripe and only to Stripe. It never touches Khaivo's servers, and we couldn't read it if we wanted to.

Your rights: email a human, get an answer.

Want to know what we hold about you, or want it deleted? Email hello@khaivo.art and the founder answers, not a ticket queue. Data is deleted on request. Given how little we collect, that conversation will be short.

Who is responsible, and on what basis.

Khaivo is run by one person, Quan Vo. Email hello@khaivo.art and you reach him, not a company desk. A postal address lands here once the business details are settled, and the version above bumps that day.

The host logging named above is the only personal data in play, and it exists so these pages get delivered and stay secure. That is legitimate interest, not consent: nothing here asks you for any. The logs are Cloudflare's, kept for its own short standard window, so we hold no copy to keep or delete. If you live in the EU or the UK, you can also complain to your national data protection authority.

Changes are versioned, never quiet.

This policy carries a version and a date at the top of this page. Any change bumps the version, and the changelog is public. You should never discover a privacy change by surprise.

Further reading, from people we do not control

Privacy is bigger than this site. Two independent, free resources we trust and do not control: Privacy Guides, a community-run catalog of privacy tools and advice, and the EFF's Surveillance Self-Defense, plain-language guides to protecting yourself online. Neither knows you came from here: the links carry no tracking of any kind. Two more worth bookmarking: Data Detox Kit, step-by-step guides to clean up your digital life from a nonprofit, in many languages, and Have I Been Pwned, a free way to check whether your email appeared in known data breaches, no signup. And when you want to understand why any of this matters: Privacy International, an independent nonprofit that has investigated the surveillance industry since 1990 and accepts no corporate or government funding. And when you want the exhaustive map instead of the short list: Awesome Privacy, a community-kept catalog of alternatives where every change is public.