Last updated 8 August 2026
This page covers everything Kodoro collects through this site and the accounts that sit
behind it, the public site itself, the contact form, the customer dashboard, and our
own admin panel. If something here doesn't answer your question, ask us directly through the
contact form and we'll give you a straight answer.
What we collect
Just browsing: nothing beyond what any web page needs to be delivered to your
browser. We don't build a profile of you, and we don't set any cookie at all unless you
sign in somewhere (below).
Anonymous usage analytics: which projects and services get looked at, whether it
was a click or a longer look, and roughly how long a look lasted. It's tied to a random id
your browser makes up for that visit only, never your name, email, IP address or any
account, purely so we can tell "one visit looked at this for 40 seconds" from "forty
separate visits each looked for one second."
The contact form: whatever you type (name, email or phone, your message, and any
services you tick) is sent to us so we can get back to you. Used only for that.
Customer dashboard and admin accounts: the name and email you register with, and a
password we never see or store in plain text, only a one-way cryptographic hash of it,
which can't be reversed back into your actual password even by us.
The newsletter: only if you switch it on yourself in your dashboard, which is off
for every account until you do. We record that you agreed and when, because we have to be
able to show it, and which issues were sent to you. Every issue carries a one-click
unsubscribe link, the same switch turns it off, and erasing your account removes the
subscription and the record of it. We never pass your address to anybody.
Cookies
Two, and only two, both set only once you actually sign in, never from simply
browsing the site:
• Admin panel session, keeps our own staff signed in to manage the site.
• Customer dashboard session, keeps a signed-in customer on their own
account. Entirely separate from the admin cookie; one can never be used to access the
other.
Neither cookie is used for advertising, and neither follows you to any other site. There
are no third-party ad or cross-site tracking cookies anywhere on this site.
Fonts
Typefaces are loaded directly from Google Fonts and Fontshare, which means your browser
makes a request to their servers the same way it would for any embedded resource, that
request can include your IP address, handled under each provider's own privacy policy
rather than ours.
The assistant
If you use the chat assistant on this site, what you type is sent to Anthropic, who run
the model that answers you, and is handled under their privacy terms as well as ours. We
don't send them your name, your email or your IP address, and there's nothing else
attached to the conversation to send: a chat you start without signing in is tied only to
a random id your own browser makes up and keeps. We store the conversation so the
assistant can follow the thread and so we can see whether it's being useful. Under
Anthropic's commercial terms, what's sent through their API isn't used to train their
models. "Forget this chat" in the corner of the conversation deletes it from our side
for good, not just from your screen, and we delete public conversations automatically
after 90 days regardless.
What we don't do
We don't sell or rent anything we hold about you to anyone. We don't run advertising
trackers, and we don't build cross-site profiles. Analytics events are never joined back
to a name, an email or an account, there'd be nothing to join them to.
How long we keep things
Actual numbers, because "as long as necessary" doesn't tell you anything. Assistant
conversations: 90 days if you weren't signed in, a year if you were. Anonymous analytics
events: around 13 months, and they aren't linked to any identity, so there's nothing to
individually delete, we only ever look at them in aggregate. Our own internal record of
who did what inside the admin panel: a year. Contact form messages and account details
are kept for as long as the relationship they're part of is live. Signed agreements and
anything with an invoice attached we keep for as long as the law requires, even after an
account is deleted, because we're obliged to.
Your rights
If you have a dashboard account, two of these are buttons rather than requests.
Download your data gives you everything we hold about you as a single file, and
Delete your account removes your details for good: your contact information, your
assistant conversations, and your access to anything shared with you. What survives it is
the paperwork we're legally required to keep, signed agreements and invoices, with your
identity stripped out of it. Both are under Account settings, and neither needs us to be
in the office. Without an account, or if you'd rather just ask, the contact form reaches
us and we'll handle it directly. You can also correct anything that's wrong, object to
how we're using something, or complain to your data protection authority.
Changes to this policy
If what we collect or how we use it changes in any meaningful way, this page gets
updated and the date at the top moves. There's no separate mailing list announcing
changes, this page is the source of truth.