Privacy Policy ​

Last updated: 2026-10-19

kitloom is published by Kitloom, a business registered in Manitoba, Canada ("we"). This policy covers this site (kitloom.dev), the demo sites under kitloom.dev, buying a license, and writing to support. It does not cover the sites you build with kitloom — there you decide what is collected.

We collect as little as we can, use it only to sell, deliver and support kitloom, and never sell it.

This site ​

kitloom.dev is a static site. It sets no cookies, runs no advertising scripts and loads nothing from third parties; the search runs in your browser. The hosting provider, DigitalOcean, keeps standard server logs (IP address, the page requested, the browser's user agent) for security and troubleshooting.

To see which pages are read and where visitors come from, the site counts visits with Umami, which we run ourselves on our server (DigitalOcean, Frankfurt) — nothing goes to a third party. It uses no cookies and keeps nothing in your browser. For each page it records the address (with any campaign tags such as utm_source), the page you came from, your browser, operating system, device type, screen size and language, and the country, region and city looked up from your IP address. Your IP address itself is not stored: with your browser's user agent it makes an anonymous visitor ID, mixed with a value that changes every month, so you cannot be recognised from one month to the next. It also counts a few clicks — opening the demo and the Buy buttons on the pricing page, with the edition and the plan. We use these numbers only in aggregate, to improve the site and to see which places that mention kitloom bring visitors.

The demo ​

The demo sites give each visitor a temporary site of their own. Anything you enter there — content, users, uploads — stays in that sandbox and is deleted when the sandbox expires: after 24 hours without a visit, and 72 hours after it was created at the latest. A session cookie keeps you signed in to your sandbox. Your IP address is used for a short time to limit how many sandboxes one address can create. The demo's start pages are counted by the same Umami as this site, and so is each sandbox that is created (which edition and which demo), in the same anonymous way — nothing you do inside a sandbox is counted. Please don't put real personal data into a demo site.

Buying a license ​

Payments are handled by Dodo Payments, which sells kitloom to you as merchant of record. Dodo collects your payment details, billing name, email address, country and the tax information it needs, under its own privacy policy. We never see your full card number.

From Dodo we receive what we need to deliver and support your license: your name, email address, country, the product you bought, the order number and the license key.

To give you the packages we create an access token for you in our private Composer repository, packages.kitloom.dev, on our server (DigitalOcean, Frankfurt), under a customer name we keep with your email address. The server logs which packages are downloaded with your token and from which IP address.

Feedback ​

The Feedback button on this site and in the demo sends what you write — the text, the kind of request, the module and the page it is about, and your email address if you give one — to our demo server (DigitalOcean, Frankfurt), where we read it to answer you and to improve kitloom. So that our answers can show, your browser keeps the conversation's random token in its local storage; nothing is kept in your browser until you send something. Your IP address is used for a short time to limit how much one address can send.

Support and email ​

When you write to [email protected] we keep the conversation to answer it and to help with later questions about your license. We email you about your purchase, your license, and important changes to the packages you bought. We don't send newsletters unless you ask for them.

How long we keep it ​

• Purchase and license records: while your license exists and for as long as tax and accounting law requires after that.
• Support emails: as long as they are useful for supporting your license, then deleted.
• Demo sandboxes: deleted when they expire, as above.
• Feedback: as long as it is useful for the product, or until you ask us to delete it.
• Visit statistics: kept in aggregate as long as they are useful for the site; they hold no IP addresses.

Your rights ​

You can ask what we hold about you, ask us to correct it, or to delete what we don't have to keep by law — write to [email protected]. We answer within 30 days. For data Dodo Payments holds as merchant of record, you can also contact Dodo directly.

Where you live may give you further rights (for example under the GDPR in the EU and UK, or PIPEDA in Canada), and the right to complain to your data protection authority.

Changes ​

If this policy changes, the new version is published here with a new date. Significant changes for license holders are also sent by email.

Contact ​

Kitloom
Manitoba, Canada
[email protected]