1. A correction
An earlier version of our Privacy Policy said we used “browser local storage (not tracking cookies)” for an API key and a theme preference. That was wrong, and we would rather say so than quietly change it.
Google Analytics does set cookies. An icon font was being requested from Google on most pages, which sent them your IP address. And the demo on our home page runs our own fingerprinting library in your browser and keeps an identifier for it. None of that was disclosed.
All three are now fixed rather than merely described. The icon font is served from our own servers, so Google is no longer contacted for it at all, and both analytics and the demo are now under your control from the panel described below. What follows is the current state, not a plan.
2. What we store on your device
| Name | Type | What it does | Lasts |
|---|---|---|---|
| _ga, _ga_<id>optional | Cookie (Google Analytics) | Counts visits and pages viewed so we can see which parts of the site are useful. Only set if you accept analytics. | Up to 2 years |
| kaidn_preview_fpoptional | Local storage | A random identifier for the live demo on the home page, so a returning browser sees a consistent result. It is not linked to an account and never leaves your browser except as part of a demo scan. | Until you clear site data |
| kaidn_preview_visitsoptional | Local storage | Counts how many times you have run the demo, so it can say “visit 3”. | Until you clear site data |
| kaidn_admin_tokenessential | Local storage | Keeps an administrator signed in to the internal console. Only ever set for staff. | Until sign-out |
| kaidn_consentessential | Cookie (ours) | Remembers the consent choices you made, so we do not ask again every visit. This is the record of your decision, which is the one thing we may store without asking. | 6 months |
| kaidn-themeessential | Local storage | Remembers whether you chose light or dark. | Until you clear site data |
3. The demo on our home page fingerprints your browser
Kaidn detects fraud partly by recognising devices, and the demo on the home page shows you that working on your own browser. To do it, it runs the same library our customers install: it reads how your browser renders graphics, audio and text, which fonts you have, and what your browser reports about itself, then combines those into an identifier.
We are not trying to be coy about this — it is the product, demonstrated on you. But it is more than a normal website does, so it should be stated plainly rather than buried:
- it runs on the home page, when the demo panel loads;
- the identifier is stored in kaidn_preview_fp and stays until you clear site data;
- it is not linked to any account, and we do not use it to follow you to other websites — it cannot work on another site, because it is stored under kaidn.io only;
- it is not used for advertising, and we do not sell it.
It does not run unless you allow it.It is its own category in the consent panel, separate from analytics, and it starts switched off. If you decline, the demo panel says so and offers to run it — nothing is read from your device in the meantime. You can change your mind either way from Consent settings in the footer.
4. Requests that reach someone else
| Who | When | What they receive | Where |
|---|---|---|---|
| Google Analytics | Only after you accept analytics | Your IP address, an analytics cookie identifier, and which pages you viewed. Nothing is sent, and no cookie is set, unless you say yes. | United States |
| Cloudflare Turnstile | Sign-up, sign-in and the public lookup tools | Your IP address and a challenge token, to check you are not a bot. | United States / global edge |
The full list of everyone who handles data through Kaidn, including for the service rather than the website, is on our sub-processor page.
5. Where you are changes what we do first
Everyone gets the panel. It appears on your first visit wherever you are, because being told what a site does to you should not depend on your postcode. What changes by region is only whether we wait for your answer before starting.
In the EEA, the UK and Switzerland, we wait: neither analytics nor the home-page demo does anything until you answer.
Everywhere else they start when you arrive, and the panel is how you stop them. We rely on legitimate interest there rather than prior consent, which is the ordinary practice outside those jurisdictions. Turning either one off does not just affect next time — it deletes what it already stored, including the demo’s device identifier, and clears the result from the screen.
We work out which applies from your IP address, on our server, and we fail towards asking: if we cannot tell where you are, you get the question. The only thing that decision changes is whether we ask first — the switches, and what they control, are identical either way.
6. How to change or refuse
Use the Consent settingslink in the footer of any page. It opens the same panel you saw on your first visit, and you can change or withdraw any choice there at any time — withdrawing is exactly as easy as accepting, which is what Article 7(3) requires. Turning analytics off also deletes the analytics cookies already set.
These also work, and we would rather list them than pretend the panel is the only way:
- Any mainstream content blocker (uBlock Origin and similar) stops Google Analytics and the Google Fonts request. Nothing on this site breaks without them.
- Browser “Do Not Track” or “block third-party cookies” settings stop the analytics cookies.
- Google publishes an opt-out add-on for Analytics at tools.google.com/dlpage/gaoptout.
- Clearing site data for kaidn.io removes the demo identifier, the visit counter and your theme preference.
- Private or incognito browsing prevents anything here persisting past the session.
Turnstile is the one thing we ask you not to block: it is what stops automated abuse of the sign-up and lookup forms, and those forms will not submit without it.
7. Questions, or want your data
Email support@kaidn.io. If your question is about data we hold as a service provider to one of our customers rather than about this website, the Privacy Policy explains which of us to contact and why.