Privacy Policy

At KitLoop (kitloop.io), your privacy is a priority. This Privacy Policy outlines what information is collected, how it is handled, and your rights regarding that information.

1. Tools That Run in Your Browser

Most KitLoop tools (text, JSON, encoding, hashing, password, PDF, image, calculator and converter tools) run entirely inside your browser. The files and text you use with them are processed on your device and are never uploaded to, stored on, or seen by our server. Each tool page shows a badge saying whether it runs in your browser or needs an online service.

2. Tools That Use Online Services

A few tools can only work by sending your input somewhere else. These are labelled on their tool pages:

• AI tools (summarizer, email/cover letter/caption writers, translator, chat assistant, grammar checker, horoscope): the text you enter is sent through our server to Google Gemini to generate a response. We don't store it. Google processes it under its own Gemini API terms.
• URL tools (HTTP header checker, Open Graph preview, meta tag analyzer, redirect checker, broken link checker, domain WHOIS): our server fetches the public URLs you enter (for WHOIS, the official RDAP registry record). We don't store the URLs or the pages.
• Speech to Text: uses your browser's built-in speech recognition. In Chrome and Edge your audio is sent to Google's or Microsoft's speech service by the browser itself; KitLoop never receives it.
• PageSpeed and Website Screenshot: the URL you enter is sent to Google PageSpeed Insights, which loads and tests the page.
• Lookup tools: your browser sends the domain, IP or currency query directly to the service doing the lookup: Cloudflare (DNS), ipwho.is (IP lookup), crt.sh (SSL certificates), open.er-api.com (exchange rates).
• Password strength checker: only if you press "Check breaches", the first 5 characters of your password's SHA-1 hash are sent to Have I Been Pwned (k-anonymity). Your password itself never leaves your browser.

3. Account Data (if you create an account)

If you create an account, we store your name, email address, a securely hashed version of your password (never the password itself), the date you accepted these terms, and a session identifier while you're signed in. If you create short links, we store each link's destination URL and click count. If you don't create an account, none of this applies to you.

4. Daily Usage Counts

To enforce fair-use daily limits, KitLoop keeps a count of how many times each tool was opened per day, tied to your account (if signed in) or your IP address (if not). It records the tool name and the count only, never what you typed or what a tool produced. These counts are automatically deleted after about 5 weeks.

5. Newsletter and Contact Messages

If you subscribe to the newsletter, we store your email address, the date, and the consent text you agreed to. Every email includes a one-click unsubscribe link that deletes your address. If you use the contact form, we store your name, email and message so we can reply.

6. Advertising (Google AdSense)

KitLoop shows ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

You choose whether ads are personalized in the cookie banner (reopen it any time with "Cookie settings" in the footer). You can also opt out of personalized advertising in Google Ads Settings or, for other vendors, at aboutads.info. Learn how Google uses data at policies.google.com/technologies/partner-sites.

7. Cookies and Local Storage

KitLoop itself sets one cookie: a session cookie that keeps you signed in (only if you sign in). Preferences such as theme, favorite tools, your cookie choice, and data you save in tools like Encrypted Notes, Expense Tracker or Habit Tracker are kept in your browser's local storage and never sent to us. Advertising cookies are described in section 6.

8. GDPR Data Protection Rights (EU Users)

Under the General Data Protection Regulation (GDPR), every user has the right to:

• The right to access – You have the right to request copies of your personal data.
• The right to rectification – You have the right to request correction of inaccurate information.
• The right to erasure – You can permanently delete your account and all associated data yourself, at any time, via "Delete account" in the account menu once signed in - no need to submit a request and wait.
• The right to restrict or object to processing – You have the right to object to data processing.

9. California Consumer Privacy Act (CCPA Rights)

Under the CCPA, California consumers have the right to request disclosure of categories of personal information collected, request deletion of data (see "Delete account" above - self-service, no waiting on a request), and opt-out of the sale of personal information. KitLoop does NOT sell user personal information.

10. Contact

For any questions or privacy requests, contact: privacy@kitloop.io.