Privacy Policy
I run this site myself. I try not to collect anything I don’t need.
What the site collects
I use PostHog for product analytics, reverse-proxied through /relay-kc so it looks like a first-party request. PostHog is configured person_profiles: identified_only, meaning no identified profiles are created by default. The events captured are:
- anonymous pageviews
- claim button click
- phrase share click
- search query
- color filter use
- gate unlock / sign-out (the fact, not the address)
The Elastic gate
The gate uses Google Sign-In. When you click it, Google’s script loads from accounts.google.com and returns a signed ID token to the site. I verify the token server-side, check that your account’s hd claim is elastic.co, and then set one cookie (kg_session) that records your verified email. The cookie is HttpOnly, Secure, SameSite=Strict, signed with HMAC-SHA256, and expires after 30 days. I don’t share your email with anyone. Sign out at any time to clear it.
What’s stored in your browser
- the
kg_sessioncookie above (set by the site, server-side only) - PostHog’s own analytics state and cookies
- Google may set its own state on
accounts.google.comas part of Sign-In (subject to their privacy policy)
The receipts email
When you click “claim,” your own mail client opens a pre-filled mailto: to me. Nothing is sent through the site. I receive whatever you choose to write, at yakiryous@gmail.com.
Where things are hosted
The site runs on Vercel (US). Analytics go to PostHog Cloud (US), via the reverse proxy. I don’t share data with anyone beyond those two platforms. No ads, no trackers, no data brokers.
Contact
yakiryous@gmail.com, or Slack @kiryous. Email me to ask what’s stored or to have anything removed.
Last updated: 2026-06-13