Privacy notice
Optional online image-to-text recognition
Online OCR offers limited initial use without sign-in. Service availability and separate consent naming the provider are required. The selected image is transmitted through KitForma to Google Cloud Vision when that provider is enabled. KitForma does not persist the image or recognized text in its OCR database. For abuse and cost controls, we retain request identifiers, the provider identifier, timestamps, budget reservations and request states. Security rate-limit counters use a derived account identifier for signed-in use, or a daily-changing derived network identifier for guest use. These counters do not store the raw IP address, image, filename or recognized text. Guest limits are shared by people using the same public network address. Guest counters expire at the end of the UTC day and expired records are periodically removed. The provider processes the image under its own data terms. Online OCR never silently falls back to another provider or downloads a local recognition model. The separately selected on-device mode downloads its models but keeps the image on your device. OCR may omit or misread text, and historical scripts are not guaranteed.
Google Cloud Vision · data use
Public community profiles and contributions
Questions, answers, chosen display names, avatars, biographies and optional website links in the community are public. Your sign-in email and private account name are not used as your community identity. Community data is stored in our Cloudflare D1 database. Votes, bookmarks, reports and in-app notifications are linked to your account; bookmarks and notifications are private. Reputation is calculated from visible contributions and community feedback. Do not publish passwords, contact details or confidential documents. You can edit your contributions and remove unanswered questions or your answers through the community controls. For a question with answers, contact a moderator to request removal. If your account is deleted, remaining contributions are detached from your profile and shown without its identity; contact support for a content removal request.
Product catalogs and optional services
CSV preparation and price calculations run in your browser. Requesting reference rates sends currency codes and an optional date through KitForma to Frankfurter, not your product rows. The dated reference rate is not a bank settlement quote. An optional Open Food Facts lookup sends the selected food barcode; returned community data needs review and carries its source and ODbL attribution/share-alike conditions. These public reference responses may be cached.
When available, product translation requires a separate confirmation to send only the selected text and language choices through KitForma to Microsoft Azure Translator. Translation results can be kept encrypted for one-hour replay access, then removed by scheduled cleanup to recover a completed request without charging the shared allowance again. Usage reservations and a pseudonymous account budget identifier are retained to enforce finite free limits. Review every translation before using it. Optional WooCommerce access is restricted to an authorized, configured store: credentials and product job records are stored encrypted until account deletion; previews expire after ten minutes, a final confirmation creates draft products, and uncertain requests are not automatically repeated. Disconnecting removes the stored connection; it does not delete products already created in your store.
Public product photos and compression
Local photo-to-SKU mapping does not upload files. If a configured Cloudinary or ImageKit option is selected, uploading requires separate provider and public-image consent. The selected image passes through KitForma to that provider; the original filename and SKU are not included in the upload. Anyone with the resulting public URL can view it. KitForma stores the account-linked provider asset ID, URL, date, size and operation state so you can manage it. Removing a hosted image can break existing catalog links; CDN invalidation is requested but cached copies can persist temporarily. Account deletion detaches these records for remote cleanup. Uncertain uploads or failed cleanup need reconciliation and are not reported as removed. Do not upload private documents or images you lack permission to publish.
Optional Tinify compression sends the selected image through KitForma to Tinify after confirmation and returns a download; it does not create a permanent catalog image URL. Optional OCR.space sends the selected image to OCR.space only after its own consent. KitForma does not store those image bodies or OCR text; minimal operation IDs and counters prevent duplicate requests and enforce limits. These providers have their own retention practices. Provider features remain unavailable until configured and may stop when their shared free allowance is exhausted. Local alternatives remain available.
Cloud files and photo libraries
Optional cloud output saving is currently offered through Google Drive. Opening it connects to Google; after you authorize file access, choose a destination folder and separately confirm the completed file, your browser uploads that output directly to Google Drive. The file may contain the personal information, source images or other content you placed in it. The destination folder’s sharing permissions apply. KitForma does not store the output or cloud access token on its server; the token stays in page memory. Local downloading remains available without cloud permission. Cancelling or closing an upload cannot remove a file Google may already have received. Check the selected folder before starting a new save if completion is uncertain. Closing clears local access but is not provider revocation. The explicit revoke action, or your Google account connections settings, can remove KitForma’s granted Google permissions, including its cloud import access; saved files remain in Drive until you remove them there.
When a cloud picker is available and you open it, your browser connects to Google Drive, Dropbox or personal OneDrive. Sign in and choose the files to import in that provider’s window. This permission is separate from signing in to KitForma. Files are downloaded directly into your browser for the tool; KitForma does not store cloud access tokens or upload these files to its server. Provider windows receive technical network information and use their own sign-in cookies. Cancel or close the picker to end an unfinished import.
Available Pexels and Unsplash searches send your search text to the selected provider through our server. Photo previews and selected photos load from its image servers. The photographer and source are displayed. Photo-selection identifiers, source metadata, state and date are linked to your account to avoid duplicate provider requests; deleting your account removes these records. Anonymous usage counters protect free service limits. We do not send your account email or uploaded files to photo libraries. Provider attribution and image-license conditions apply.
Support notifications and live chat
If email delivery is enabled, signed-in users may opt in to reply notifications for each support request and turn them off in their request history. The configured provider, Resend or Brevo, receives the recipient email and a generic notification with a link to the private support page. Ticket text and files are not included. Delivery status, provider message reference and notification preferences are stored with the request; account deletion removes linked records. Anonymous send-attempt counters remain temporarily to enforce free limits. No marketing subscription is created.
Optional tawk.to chat connects only when you open it. Its service processes the messages you choose to send, technical connection information and its own cookies. KitForma does not automatically identify your account or attach files. Chat records held by tawk.to are separate from KitForma support tickets; use our support contact for deletion requests.
Passkeys
When enabled, a passkey lets your device authenticate you after a recent verified sign-in has enrolled it. We store a public key, device type, chosen label and creation/use dates. Your device or passkey manager keeps the private key; KitForma never receives your fingerprint, face scan or device PIN. You can remove a passkey in account security settings. Account deletion and completed password recovery invalidate registered passkeys.
Optional Etsy shop connection
The Etsy uploader requires a KitForma account and your explicit shop authorization. CSV preparation and file matching happen on your device. After you confirm a transfer, we store your shop identifier, listing inputs, file names and checksums, draft identifiers and transfer status in Cloudflare D1 so you can follow and resume the work. Selected file bytes pass through the KitForma server to Etsy; we do not keep a file backup. Reselect the same files after reopening the page.
OAuth access and refresh credentials are encrypted on the server and never returned to your browser. Signing out preserves the shop connection for your next sign-in. Disconnecting removes our saved credentials, pending authorization attempts and transfer history. Transfer history is eligible for cleanup after 30 days; cleanup runs when the Etsy service is used. Completing account deletion also removes these records. Existing transfer records are included in your account data export without credentials. Disconnecting or deleting a KitForma account does not delete drafts already created in Etsy. You can also remove KitForma’s access in your Etsy account settings. Etsy handles received content under its own privacy policy.
Form security
Support requests and new blog comments use Cloudflare Turnstile to check for automated abuse when you interact with the form. Cloudflare receives technical browser and network information for this security check. The challenge does not receive your message or comment text from KitForma. A short-lived, single-use verification result is checked on our server. Blocking or failing the check prevents that submission; your draft remains available to retry.
Optional AI processing
Standard file tools and local AI process your inputs in your browser. Optional cloud AI is different: when it is available, you must sign in and explicitly agree before the text you enter is sent through our server to the provider named in the form: Cloudflare Workers AI or, only when separately configured, OpenAI. Consent is provider-specific; changing providers requires new consent. There is no automatic fallback to a different provider. KitForma does not store that prompt or generated draft. We retain request identifiers, timestamps and budget reservations without document text. Each provider processes requests under its service data policies. Cloudflare Workers AI uses the free daily allocation and stops when the configured allowance is exhausted. Cloud AI is automatically unavailable when its service budget is exhausted; normal tools continue working.
OpenAI API data controls · Cloudflare Workers AI data usage
Blog community and document drafts
Comments are stored with your account, chosen public name and timestamps. Approved comments are public; you can delete your own comments. Likes are linked to your account, but individual likes are not listed publicly. Deleting your account also removes its comments and likes. View totals are measured from this feature’s release, not historical or unique reader counts. Short-lived HMAC hashes of IP addresses limit duplicate views and abuse; raw IP addresses are not stored by this counter. A session marker avoids recounting the same article in a tab.
CV and letter drafts are saved only when requested, in this browser under your account ID. They contain the document information you enter and do not sync to our servers. Clear them in the builder before using a shared device; browser cleanup or changing devices removes access. Signing out does not erase locally saved drafts.
Optional newsletter
When newsletter signup is available, its link opens a separate Brevo form. You enter your email address and give a separate subscription choice there, then confirm through a second email before joining the list. Each newsletter includes an unsubscribe link. Creating an account, requesting support or allowing analytics does not subscribe you. Visiting a KitForma guide does not load a Brevo form script.
Optional administrator notifications
An authorized administrator can separately enable Firebase Cloud Messaging for a browser. Google processes the device installation identifier and delivery metadata. KitForma encrypts the identifier and ties it to the signed-in session; signing out revokes that browser registration. Notifications contain only generic support alerts, never customer names or request text. When separately configured by the operator, a Telegram bot can deliver the same generic alert to one verified private administrator chat. These are administration features, not visitor subscriptions.
Effective date: 20 October 2026.
Optional accounts and sign-in
Core local tools do not require an account. Some optional features require a free account; Pro access requires a separate paid subscription. If you register or sign in, Firebase Authentication processes your email, password or Google identity, verification and password-reset requests. Our secure account service forwards the requests; passwords are not stored in our application database or intentionally logged. We store your verified email, account identifier, optional display name, account dates and subscription references to provide your account and access. Google sign-in requests basic identity and email only; it does not request access to Gmail or Drive.
A necessary Secure, HttpOnly session cookie lasts at most 30 days. The server stores a hash of this cookie and an encrypted Firebase refresh credential, and rechecks provider access at least every five minutes while the account is used. Signing out revokes that browser session; signing out of all devices revokes all KitForma sessions. Expired sessions and temporary anti-abuse records are removed during periodic request-time cleanup. Account data remains until deletion is requested. Account pages do not load visitor analytics or advertising.
For account access, correction or deletion requests, email kitforma@outlook.com. We verify account ownership before acting. Deleting an account does not itself cancel a payment-provider subscription: cancel renewal through billing management first. Payment records required for accounting or disputes may need to be retained separately by the payment provider. Hosting and authentication providers may process data outside your country; no specific data-residency guarantee is offered.
Workspace, support and account controls
Your account can sync favorites, recent tool identifiers, checklist progress, preferences and explicitly saved tool presets. Workspace synchronization does not upload source files or processing outputs. Optional Etsy transfers are described separately below. Support requests store your email, category, subject, message, status and reply so we can investigate and respond. Include only the information needed to explain the issue. Signed-in requests appear in your support center; guest replies are handled by email.
Account settings provide profile editing, data export and deletion. Export and deletion require a recent sign-in. Automatic deletion removes linked workspace and support records; guest requests need a separate verified support request. Billing history requires support review, and deletion does not cancel a subscription. Restricted administrator actions retain an audit record. Operational monitoring records daily server-error counts by fixed service category, without message content or file data.
Optional Pro access
When account-based Pro is available, checkout sends your verified account email and a random checkout reference to Lemon Squeezy. Our service links the order and subscription references, payment status and billing dates to your account using verified payment notifications and provider checks. The application does not receive your full card number. Pro access is rechecked at least every five minutes while Pro is used. Signing out ends the account session without cancelling your subscription. Where legacy license activation is offered instead, your license key is sent securely to our licensing service and Lemon Squeezy for verification; an encrypted, HttpOnly access cookie lasts at most 30 days, with access rechecked about every 15 minutes while Pro is open. Disconnecting that browser clears the legacy session after its activation is released. License keys are not sent to analytics or stored in localStorage. Pro presets store settings only: up to 100 locally, and up to 5 explicitly saved in your signed-in workspace. Local projects save settings and source-file names, sizes, modification dates and order in this browser; reopening them requires selecting the original files again. Clearing site data removes local projects and presets. Files and output images remain processed on your device.
Files, text and results
Standard local image, PDF, text, QR and calculation tools process selected files and entered values in your browser without uploading them. Online OCR and the optional connected features described above are separate: they transmit only the content you explicitly authorize. Working data remains in browser memory for the tool session and is cleared when the page is closed or reloaded. Downloaded files remain on your device until you delete them. Cropping or changing metadata does not necessarily remove hidden information from a document; read each tool’s limits.
Optional account workspace
When you sign in, your favorite tool identifiers, recent tool visits and times, named checklists and their completed steps, and appearance and language preferences are stored with your account in our Cloudflare database. This enables access across devices. These records do not include uploaded files, filenames, tool inputs or generated output. Avoid putting personal or sensitive information in checklist names. You can remove favorites, clear recent tools and delete checklists from your workspace. Signing out clears the account workspace from the page, but does not delete the server record; account deletion requests also cover this record. Guest favorites and browsing preferences remain separate local data. Local presets stay in this browser; presets you explicitly save to your account sync across signed-in devices.
Local preferences
Favorites store only tool identifiers in this browser’s localStorage until you clear the list or site data. Recent tools use sessionStorage, which lasts for the browser session. Catalog search terms, filters, layout and scroll position are also stored for that session so returning to the catalog preserves your place. These are catalog preferences, not tool inputs or filenames, and are not sent to analytics. Games may offer optional local progress storage; their controls explain it.
Hosting and security
Loading this website and its software sends technical requests to our hosting providers. These can include your IP address, browser information and requested URL. Providers may keep access or security logs according to their own retention practices. Optional account information is stored separately from files processed by the tools.
Cloudflare protection can set the __cf_bm cookie to distinguish automated traffic. It is separate from visitor analytics and expires after 30 minutes of inactivity according to Cloudflare. Declining visitor analytics does not disable hosting security. Cloudflare cookie documentation.
Anonymous page accesses
Separately from optional visitor analytics, the server counts successful deliveries of fixed public HTML pages, even when optional analytics is declined. It uses the existing page request: no analytics cookie, browser storage, extra browser request, visitor ID or session ID is created. Only a UTC calendar day, an approved public page path and its aggregate count are stored. This counter does not store IP addresses, referrers, user-agent strings, query strings, account identity, files or tool inputs. The technical network processing needed to serve the website still occurs as described under Hosting and security.
Counts are available only to the site owner and automatically expire outside the 31 UTC calendar days including today. They are not unique-person counts: repeat requests, owner visits and undetected bots may count. Known bots, requests carrying DNT/GPC signals, test requests, prefetch and in-app data requests are excluded; in-app navigation, browser-only cached pages and offline use may not count. Earlier unrecorded traffic is not reconstructed.
The aggregate is held in our Cloudflare-hosted database. Cloudflare provides the hosting and database processing needed for this feature; the counter adds no marketing provider and does not send its counts to Google Analytics or PostHog. The consent controls for Google Analytics, PostHog, Cloudflare Web Analytics and the existing KitForma visitor/tool report remain separate and unchanged.
Visitor and tool-usage analytics
Cloudflare Web Analytics starts only after the current combined analytics consent. It receives public page visits and loading measurements, including clean page paths, referrer origin, browser and numeric timing data. Private routes, query or fragment URLs, analytics test sessions, DNT and GPC are excluded. Withdrawing consent closes its request gate immediately; pending requests are cancelled where possible without reloading your work. We do not pass tool inputs or files to it. Cloudflare describes this analytics service as not using cookies, localStorage or fingerprinting to track individuals. That statement does not apply to its separate security cookies.
KitForma first-party usage report
Only after the current analytics opt-in, KitForma records fixed page codes, visible engagement, tool and approved interaction event types, coarse entry-source and device categories, and random temporary tab-session/event identifiers. Account, support, Pro and Etsy sections use fixed page categories only. No account ID, email, private object ID, form contents, files, raw query, referrer or IP address is stored in this report. Security callbacks, administration, embeds and offline packages are excluded. The temporary session rotates after 30 minutes idle or 24 hours and is not linked to your account. The owner can read aggregate reports; measurement rows are removed after 31 days by hourly cleanup. DNT, GPC and the analytics choice gate collection. Withdrawal stops new measurement and clears the tab identifier; it cannot undo events already received. Checkout clicks are never proof of payment.
Google Analytics
Google Analytics loads only after you allow it. It uses cookies to measure visits, page views and tool usage. Page and referrer addresses sent to Google Analytics exclude query strings and fragments. Automatic form, download and outbound-link measurement is disabled. A tool opening is a page view with its tool identifier and interface language. Starts, completions, failures and the first download request per attempt also carry a random, temporary attempt identifier. The application stores this identifier only in page memory; it changes for each attempt and does not identify you across sites or sessions. A download event means you requested a file, not that saving completed. Events do not contain files, filenames, input values, results, QR content or raw error messages.
Your choice is saved for up to 180 days; analytics identifier cookies are configured with the same maximum duration. If storage is unavailable, the choice lasts for the current page only. Use Analytics settings at the bottom of public pages to decline or withdraw consent. Withdrawal stops further Google Analytics measurement and clears this site’s analytics cookies, but does not erase data already processed. Google Signals and advertising personalization are disabled. Explicit QA mode marks test events as developer traffic and stores its setting in this tab for up to eight hours; it never replaces analytics consent.
How Google processes information from partner sites
PostHog
PostHog receives optional page-view and tool-attempt measurements only after a new, explicit analytics choice that names PostHog. An earlier Google Analytics choice is not reused. We send only known public page paths, allowlisted campaign labels, tool identifiers and interface languages, event types, and random temporary session and attempt identifiers. Query strings, fragments, page titles, external referrer paths, account details, filenames, CV or letter content, tool inputs, results and raw errors are excluded. Account, administration, billing and support routes are excluded. Automatic click/form capture, session replay and identified person profiles are disabled.
The random PostHog identifier is stored in this tab’s sessionStorage after consent, expires after 30 minutes of inactivity or 24 hours at most, and is cleared when consent is withdrawn. It is not linked to your KitForma account. The application requests that PostHog disable GeoIP enrichment; its HTTPS endpoint still receives technical network information such as your IP address to deliver the request. Browser Do Not Track and Global Privacy Control signals prevent PostHog collection. Local previews and analytics test sessions are excluded. Withdrawal stops new measurement and aborts pending requests where possible; it cannot recall measurements already received by PostHog.
With the current combined analytics consent, technical error tracking sends a fixed error category and only allowlisted KitForma script locations, never raw exception messages or entered content. PostHog evaluates one boolean flag for optional tool feedback; this does not change core tool access. If you open and submit the optional two-question survey, only the selected choices, survey reference and tool identifier are sent. Opening or dismissing that survey is also measured after consent. Old analytics consent does not activate these new features.
Advertising
Display advertising is disabled. This application currently does not load advertising scripts or set advertising cookies.
Affiliate links
KitForma may earn a commission if you purchase through this link. The provider’s prices and terms apply.
These labeled links open an external provider or affiliate network only when you choose them. The destination receives technical connection information and may use attribution identifiers and its own cookies under its privacy terms. KitForma does not attach your files, tool text, filenames or account information to these links. The recommendation cards do not load third-party scripts or set cookies.
Amazon
As an Amazon Associate I earn from qualifying purchases.
Optional equipment cards include labeled Amazon.com affiliate links. They make no request to Amazon until you follow a link. On navigation, the link carries our fixed Associate ID and a fixed product search. Your browser may send the KitForma origin, without its page path, query or fragment, and technical connection information. Amazon may use its own cookies and identifiers to attribute eligible purchases under its privacy notice. We do not attach tool inputs, files, filenames or KitForma account information.
Your choices and contact
Close a tool to discard working data, clear saved tool lists from the catalog, or clear site data through your browser. This does not delete downloaded files. If applicable law gives you data access, correction, deletion or objection rights, contact the operator. We cannot retrieve inputs processed only on your device. The account and Etsy sections above describe data that you explicitly send to our service.
Project and privacy contact: KitForma · kitforma@outlook.com
This notice is updated when features or providers change. Its effective date identifies the current version.