Privacy Policy
Last updated: 2026-04-26
The short version
- No account required. We do not know who you are.
- Values you type into tools stay in your browser and are never sent to our servers.
- Ads default to contextual only (non-personalised). You may opt in to personalised ads via the privacy anchor at the bottom of every page.
- Health tools (
/health/*) remain contextual-only regardless of your choice. - Contact form submissions are stored server-side because you intentionally submit them.
Consent Management
Advertising consent on Kefiw is handled by Google's IAB Europe-certified Consent Management Platform (delivered by Google AdSense Privacy & Messaging). In jurisdictions where consent is required (EEA, UK, Switzerland), Google's CMP banner is shown before personalised ads are served and emits the standard IAB TCF consent string on behalf of Kefiw.
Kefiw's own first-party privacy anchor (fixed to the bottom of every page) governs a separate, narrower choice: whether Kefiw may collect aggregate, non-advertising telemetry (Cloudflare Web Analytics plus anonymous impression/fill counters). These two controls are independent.
Machine-readable disclosure of our on-device storage is published at /device-storage-disclosure.json.
Legal bases for processing
Kefiw itself relies on the following legal bases for the limited processing it performs:
- Store and/or access information on a device: consent (the first-party anchor, for telemetry storage).
- Understand audiences through statistics: legitimate interest (aggregate counters only).
- Security / fraud prevention: legitimate interest.
- Save and communicate privacy choices: legitimate interest.
Personalised advertising, profiling, cross-device matching and geolocation are not used by Kefiw directly. Google Advertising Products (IAB vendor ID 755) declares its own purposes and legal bases through its CMP and the IAB Global Vendor List.
Our full Legitimate Interest Assessment (balancing test) is published separately.
Cookies set by Kefiw
| Name | Purpose | Max age |
|---|---|---|
kfw_sid | Anonymous session identifier for aggregate telemetry counts | 30 days |
Local storage set by Kefiw
| Key | Purpose |
|---|---|
kfw_consent | Your current consent state (pending / ltd / full) |
kfw_region | Cached region classification (EU / UK / US / ROW) from edge IP lookup |
kfw_context | Session diagnostics context (viewport, route cluster, risk tier) |
kfw-bridge-metrics | Cross-tool numeric bridge values (no user-typed strings) |
kfw-tool-state-* | Per-tool input persistence so you don't lose work on reload. User-typed values in these entries never leave your device. |
kfw_track_progress:* | Per-track progress so guided Tracks can remember completed or skipped steps on this device. |
Analytics
Kefiw uses Cloudflare Web Analytics (privacy-first, cookie-less, no cross-site tracking). We may additionally log aggregate impression / fill / click counts for ad slots and basic page-view counters keyed to the anonymous kfw_sid cookie. No user-typed tool values are ever included in telemetry payloads.
Advertising
Kefiw shows ads from Google AdSense (IAB vendor 755). On pages outside /health/*, if you have enabled the Full privacy protocol, AdSense may serve personalised ads per its own privacy policy. On /health/* pages and for visitors who have not opted in, AdSense is forced into non-personalised contextual mode via requestNonPersonalizedAds=1.
You can review and change Google-wide advertising preferences (including opting out of personalised ads entirely for your Google account or device) at adssettings.google.com. For general information about how Google uses data from partner sites, see policies.google.com/technologies/partner-sites. To opt out of many third-party advertising cookies at once, visit the industry-wide pages at aboutads.info/choices (US) and youronlinechoices.eu (EU).
Health tools
Health-related tools store entered values in your browser's local storage and never transmit them to Kefiw. They are educational planning aids only and are not clinical advice, diagnosis, treatment, prescribing, or emergency support.
Contact form submissions
If you submit the contact form, Kefiw stores the name, email, phone number, contact type, and message text you provide in a Cloudflare D1 database. We use this to review corrections, bugs, complaints, solicitations, and other requests. We do not promise replies, phone calls, text messages, support tickets, vendor follow-ups, or individual back-and-forth.
Data retention
On-device storage (cookies and localStorage) persists for the max age declared above or until you clear it. Server-side aggregate telemetry is retained for up to 395 days. Contact form submissions are retained until reviewed and no longer operationally useful.
Your rights
You can:
- Toggle between Contextual-only and Full protocol at any time using the anchor at the bottom of the page.
- Clear all Kefiw storage through your browser's site-data controls.
- Signal Global Privacy Control (GPC); Kefiw honours it as an opt-out of sale/share under US state privacy laws.
Changes
We may update this policy. Material changes are reflected by updating the "Last updated" date above.
Contact
Privacy questions: Contact form.