Privacy

kva.gg · updated November 2026

This site collects as little as possible. It does not use marketing, advertising, analytics, or tracking cookies, and does not load any third-party trackers, pixels, or fingerprinting scripts. Only strictly necessary first-party storage is used to operate the site and keep it secure.

What is stored, and why

• Access cookie — entering the correct access phrase sets one cookie (kva_gate, valid 30 days) so you are not asked again on every page. It is strictly necessary for the site to work and holds no personal data, only a signed expiry.
• Preferences — your theme choice and map position are kept in your own browser's storage. They never leave your device.
• Gate attempts — failed access-phrase attempts are counted against a salted, non-reversible connection hash to block brute force. These counters expire on their own within half an hour and hold no readable address.
• Access requests — if you request access by email, the address is stored together with the request time, a salted (non-reversible) connection hash, and your browser's identification string. This is used for one thing only: deciding on and answering your request. It is not added to any list, not shared, and not used for marketing. Entries are deleted once resolved, or at any time on request.

What is never done

Your personal data is not sold, traded, or rented. There are no newsletters or mailing lists attached to the access request.

Infrastructure

The site is served by Cloudflare — the only processor involved — which handles connection data (such as IP addresses) to deliver and protect the site, as any host does. Fonts and every other asset are served from this domain itself: no visitor request goes to Google or any other third party.

Your rights and contact

To have an access request removed, or for any question about your data, write to kevin@vonatzigen.com.