Skip to content
Kevin Amado

Privacy

What this website collects about its visitors (very little), who receives it, and who to ask. This site is made by one person, Kevin Amado.

Last updated: 2026-10-23

The short version

This website has no sign-in, no form and no account. It sets no cookies and stores nothing in your browser. It has no tracking, and your browser contacts only Cloudflare, which hosts this site, to load it. Two small things are sent to this site: an error report if a page breaks, and one anonymous count when you open a project. Both are explained under "What the page sends" below. Some of my other apps let you sign in with Google or with a code sent to your email address; that is explained under "Sign in with Google" below.

What stays in your browser

Nothing. The site sets no cookies and does not use local storage or IndexedDB. It runs no service worker. It can be installed to your home screen (it has a web app manifest), and installing it saves no data of yours.

What the page sends

  • Error reports. If a page breaks in your browser, it sends a short error report to this site. The report has the error name, its message, the first lines of its trace, the kind of page (not its address), the version of the site, whether you use a phone or a computer, your browser name and major version, and the time. It has no cookie, no account and no IP address, and a page sends at most 5.
  • One count for a project. When you open a project on the Projects page, the page sends one anonymous count to this site: the site, which job ("project_opened"), the page type, and mobile or desktop. It does not say which project. It has no cookie, no IP address and nothing you typed. It is not sent when your browser sends Do Not Track or Global Privacy Control.
  • The server writes one line to a log for each of these requests: the address asked for, the answer status, how long it took and a random request number. The log does not keep your IP address or cookies.

Who receives your data

  • Cloudflare hosts the site and its images. Like any web host, it receives your IP address, your browser's user agent and the page you ask for, and it keeps normal server logs. See the Cloudflare privacy policy .

Sign in with Google

This website does not use it. But some of my other apps let you sign in with Google, through a sign-in service at auth.kamadorueda.com (also at auth.utilarium.app). The apps that use it are Email aliases, Chess, Coro, Drive, Help desk, Hooks, Journal, Media, Picks, Podcast Host, Secure notes, Sign and Utilarium, and the admin tool I use myself. You can also sign in with a code sent to your email address, without Google: the service then sends a 6-digit code to your address through Cloudflare's email service, and keeps your address and a scrambled copy of the code for at most 15 minutes. Each of these apps asks the sign-in service on every page load whether you are signed in, with your sign-in cookie if you have one. If you do not sign in, the rest of this section does not apply to you.

  • What it gets from Google. It asks Google only for the "openid" and "email" scopes. Google tells it your email address, whether Google has verified that address, and a number that is your Google account's id. It does not get your name, your picture, your contacts, your files or anything else in your Google account, and it never asks to read them.
  • How it is used. Only to know who you are when you sign in, to keep you signed in, and to link your data in an app to you. It is not used for ads, for profiling or to train any model. The service counts how many sign-ins start, succeed or fail, with no email address or account in those counts.
  • Where it is stored, and for how long. Your email address, the Google account id and the times of your first and latest sign-in are kept in a database on Cloudflare (D1), until you delete your account. A session record with your email address is kept in Cloudflare KV for 30 days after each sign-in, then it expires, or sooner if you sign out. The sign-in cookie is set for 30 days and cannot be read by scripts on a page. Cloudflare D1 keeps point-in-time backups of the database for up to 30 days, so deleted data can stay in a backup for that time. Nobody reads these backups except me, and only to restore.
  • Who it is shared with. No one. It is not sold, not rented and not given to advertisers or any other third party. Cloudflare, which hosts the service, stores it for me and processes it only to run the service. I can see the email address of people who have an account, to run the apps.
  • How to delete it. Every app that uses this sign-in (Email aliases, Chess, Coro, Drive, Help desk, Hooks, Journal, Media, Picks, Podcast Host, Secure notes, Sign and Utilarium) has a "Delete my account" button, with a confirm step. It deletes that app's data and your sign-in account right away: your email address, your Google account id and every session on every device. The sign-in is shared, so it signs you out of the other apps too. A request is sent to me automatically to delete, within 30 days of the request, what the other apps keep for that account. You do not need to delete in each app first. To ask something, write to kamadorueda@gmail.com from the address you signed in with. You can also remove the apps' access to your Google account at any time at myaccount.google.com/permissions .

The use of information received from Google APIs complies with the Google API Services User Data Policy , including the Limited Use requirements.

Links to other sites

The main page shows Kevin's email address and links to LinkedIn, GitHub, Instagram and his web applications. Other pages link to more sites. Once you follow a link, that site's own policy applies, not this one.

What this site does not do

  • It has no ads and sells or shares no data, and that includes data from Google sign-in in my other apps.
  • This website itself has no sign-in, no account and no form.
  • It does not ask for your name, email address or any other personal detail.

Questions

If you write to kamadorueda@gmail.com, Kevin reads your message and your address, and uses them only to answer. Ask there about anything on this page.

Your rights, your contact and the law

Who is responsible

I am Kevin Amado, and I am responsible for the data in this website. I am one person in Alberta, Canada. Write to kamadorueda@gmail.com with any question or request about your data.

Why data is used, and for how long

  • Counts, error reports and logs: to run the tool and fix errors. The legal basis is my legitimate interest. Counts stay 90 days. Logs and error reports stay 7 days. Nothing is counted when your browser sends Do Not Track or Global Privacy Control.
  • Data in your browser: I do not receive it. It stays until you clear it.

Who receives your data, and where it goes

Cloudflare hosts this tool and handles the data for me. It works in the United States and in other countries. For transfers from the EU and the UK, it relies on the EU-US Data Privacy Framework and standard contractual clauses. If you sign in with Google, Google receives your sign-in request. I do not sell your data. This page names any other service.

Your rights

  • You can ask for a copy of your data.
  • You can ask me to correct it, delete it or stop using it.
  • You can ask me to move it to another service.
  • You can object to how I use your data.
  • You can take back a consent at any time.
  • Write to the address above. I answer within 30 days.
  • If the request is about an account, write from the email address of that account. This shows me it is you.
  • You can also clear the data of this site in your browser. That removes what the page keeps there.
  • If you delete your account in one app, I get a request to delete what my other apps keep for it. I finish it within 30 days.

Complaints

If you are not happy, you can complain to a data protection authority. In the EU, this is the authority of your country. In the United Kingdom, it is the ICO. In Canada, it is the Office of the Privacy Commissioner of Canada. For Alberta, it is the Office of the Information and Privacy Commissioner of Alberta. In Saudi Arabia, it is SDAIA. I would like to answer you first.

Children

This tool is not for children under 13, or under 16 in the EU without a parent's permission. If a child gave me data, write to me. I will delete it.