Privacy: what stays on your device

The text, password, invoice, budget, colour, QR code, unit, typing, code, explain, quiz and game tools do their work in your browser. What you type or paste into them is processed on your own device and is not uploaded to us. They need no account and have no usage limits, and they work without an API key because nothing is sent to an AI service. The DJ console and Local Library play music from your own device without uploading it.

To feel like yours, tools remember things such as your profile, saved invoices, budgets, scores and settings. These are kept in your browser's own storage on your device. Open My Space to see everything that is stored, back it up to a file, restore it in another browser, or erase it. Clearing your browser data also erases it. Because it lives only on your device, we cannot recover it for you if you lose it, so back up anything you care about.

Some features are built on an account and our server, and need to be: signing in and registering, purchases and downloads, the feed, messages and groups, live multiplayer quiz rooms, the K3N assistant, and saving an assessment result to your account when you choose to. For these we store what you give us, such as your account details and what you post, send or save. You can delete your account from Settings, using “Delete my account”. Messages you send in the chat features, and anything you post, pass through our server in order to be delivered.

The site can use three tracking tools, and none of them loads until you choose to allow it in the cookie banner. You can allow all, reject all, or choose by category:

• Analytics: Google Analytics (Google) counts visits and which pages are viewed.
• Marketing: the Meta (Facebook) Pixel and the TikTok Pixel tell Meta and TikTok that someone who saw one of our ads visited the site or clicked a checkout link, so ads can be measured. Meta and TikTok may link this to an account you have with them, under their own privacy policies.
• Live chat: Smartsupp runs the chat where you can ask us questions. With this choice it loads on every page, sees which pages you visit here so we can offer help, and keeps what you write in a chat. Without it, nothing from Smartsupp loads until you open the chat yourself with “Chat with a person” in our assistant.

What they are given: the address of each page you visit (without the part after a ? or #) and its title, and a note when you click a Whop or Gumroad checkout link (which product, which platform). They are not given what you type into the tools or any form. They set their own cookies in your browser.

If your browser sends Global Privacy Control or Do Not Track, the site treats that as “no” and does not ask. Your choice is stored in your browser (under k3n8h-consent:v1), and you can change it at any time with Cookie settings here or at the bottom of every page. If you withdraw permission, the page reloads without them and their cookies on this site are deleted.

• Whop and Gumroad handle checkout and payment on their own sites. We never see or store your card details.
• Cloudflare hosts the site and the music file storage, so it handles the network requests that reach them.
• shown.io provides a visit-counting script that loads on public pages. It is not given anything you enter into a tool.
• Google, Meta and TikTok, only if you allow them, as described above.
• Smartsupp runs the live chat, only if you allow it or open the chat yourself. What you write in a chat is kept by Smartsupp and seen by us. We also use the text of chats, after removing names, email addresses, phone and card numbers and the details in links, to teach our own on-site assistant to answer common questions. Only answers we have checked are used, and nothing that identifies you is kept for this.
• jsDelivr serves the emoji pictures used in the messages, emoji picker and sticker picker.
• cdnjs (Cloudflare) serves the PDF-reading library when you open a PDF in the document tools. Your file is read on your device and is not sent to it.

The site does not show ads, and without your permission it loads no tracking from Google, Meta or TikTok. It does not read what you type into the on-device tools. It does not store a password you generate or check in the Password Toolkit anywhere, even on your own device.

On the My Space page, “Show what this page contacted” lists every address the page has fetched from, taken straight from your browser, so you can check these statements rather than take our word for it. Your browser's developer tools show the same thing.

If you have a question about your data or want something removed, use the feedback page. This page describes how the site works today in plain language and will be updated as the site changes.