Privacy
The short version: if you only read this site, we do not know you were here in any way that could be tied back to you. There is no account, no tracking, no advertising and no analytics — not "anonymised" analytics, none.
This page describes what the site actually does today. When that changes, this page changes with it and the change is in the changelog.
What we store
If you are only reading:
- Request logs. Each request adds a line with the path, the response status, how long it took, a random request id and the IP address it came from. Never a query string, never a header, never a body. They exist so a broken page can be found and so abuse can be stopped, and they rotate.
- Nothing else. No account, no profile, no cookie at all unless you ask for one (below).
If you have an account:
- Your email address, so we can reach you and so a recovery link has somewhere to go.
- The public half of each passkey, a name for the device, and when it was last used. There is no password here, because there are no passwords here.
- Your sessions: when each started, when it was last seen, and the IP address and browser it came from. That is there so a session can expire, and so a sign-in from somewhere strange can be spotted. Signing out deletes the session; there is no page listing them yet, and until there is, ask us and we will read yours out to you.
- An audit log of administrative actions: who invited whom, who changed a role, who opened the vault, who published what. It is deliberately hard to edit, because a log you can quietly fix is not a log.
If you write to us: mail sent to an address at kink.ong is stored so a person can read and answer it — the sender, the subject and the plain-text body, capped at 16 KB. Attachments are counted and thrown away, never saved, and the HTML version of a message is discarded. Nothing here answers mail by itself; a person does, from their own mailbox.
Cookies
Three, none of them for tracking, none of them shared with anyone:
| Cookie | What it is for | How long |
|---|---|---|
kk_s |
your signed-in session | 30 days, extended while you are using it |
kk_c |
one passkey ceremony in progress | minutes |
kk_18 |
you have seen the 18+ notice before an outbound link | a year |
kk_18 holds the number 1. Not which tool, not when, not who. All three are HttpOnly and SameSite, so
a script cannot read them and another site cannot make your browser send them.
Your light/dark choice and your skin are kept in your browser's own storage, not in a cookie. They never reach us.
What we do not do
- No advertising and no analytics. No pixels, no beacons, no third-party scripts. The site loads nothing from anybody else's server — every font, style and script here is served from this domain, which is also why there is no cookie banner to dismiss.
- No tracking in email. No open pixels, no rewritten links. Opening a message from us tells us nothing, because there is nothing in it to tell us.
- No selling or sharing. Not to advertisers, not to data brokers, not to anyone, ever. There is no business model here that would want it.
Where your data goes
Almost nowhere. The site runs on one machine and stores everything in one database on it.
- Postmark sends and receives our email. They see what any mail provider sees: the addresses and the message.
- OpenRouter is sent the text of public news articles to summarise. It is never sent anything about you, anything you wrote, or anything from the database.
- ImageRouter generates artwork from prompts we write. Same: nothing about you goes near it.
The keys for those services are encrypted at rest with a key that is not kept in the database, so a copy of our database is not a copy of our credentials.
The outbound 18+ page
A link to a tool that allows adult content goes through a short notice page first. That means the request
log has a line saying the notice was shown for that tool, in the same rotated log as every other page
view, not attached to you or to an account. Once you have agreed, kk_18 means you are not asked again,
and the log line stops too.
How long we keep things
- Request logs rotate.
- Job history: 90 days.
- Tool measurements, like a star count over time: 400 days.
- Your account and its passkeys: until you ask us to delete them.
- Mail you send us: until it has been dealt with and cleared.
What you can ask for
Write to us and we will do it:
- A copy of what we hold about you.
- Deletion. We delete your account, its passkeys and its sessions. Comments go too, unless removing the text would make a thread unreadable, in which case it is detached from your account instead.
- A correction, if something is wrong.
There is no form and no account setting for this, because there are so few accounts that a person doing it by hand is faster and more honest than a button that files a ticket.
Contact
Contact has the addresses. For anything about this page, say so in the subject.