// summary
kioho.org is a static personal website. It collects no personal data directly. It uses no cookies, no tracking, no analytics, no advertising, and no third-party scripts. The only personal data processed in connection with this site is standard HTTP request metadata recorded by the hosting provider, as described below.
// data_controller
Controller: Kioho (operator of kioho.org, kioho.se, kioho.eu), a private individual established in the European Union.
Contact for privacy matters: privacy@kioho.org
The controller's full legal identity is disclosed on request to the contact above, in fulfilment of Art. 13(1)(a) GDPR. Data subjects, supervisory authorities, and legitimate third-party requests are all eligible.
// what_is_collected
When you load a page on this site, your browser sends standard HTTP request data to the hosting provider (Vercel). That request data is written to Vercel's access logs and may include:
- IP address
- User-Agent string (browser / OS identifier sent by your browser)
- Requested URL, HTTP method, status code, response size
- Referrer header, if any (this site sets no-referrer for outgoing requests)
- Timestamp of the request
Under the GDPR, an IP address is personal data. This site itself does not store, correlate, or further process this data.
// why
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating the site, defending it from abuse, and ensuring its security and availability. The processing is limited to what the hosting provider needs to serve the site.
// data_processor
Hosting and edge delivery is performed by:
Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723, USA
Vercel acts as a data processor on the controller's behalf under a Data Processing Addendum. Vercel serves EU traffic from EU edge regions (this site is currently served from Stockholm, arn1). Where data leaves the EU, transfers rely on the EU-US Data Privacy Framework and Standard Contractual Clauses.
// retention
Request data is retained by Vercel only for as long as needed to operate and secure the platform, in line with their published retention policy. The operator of this site does not retain or archive these logs.
// your_rights
You have the following rights under the GDPR:
- access to any personal data concerning you (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- objection to processing based on legitimate interest (Art. 21)
- lodge a complaint with a supervisory authority — in Sweden: Integritetsskyddsmyndigheten (IMY), imy.se
To exercise any of these rights, contact privacy@kioho.org. Requests are normally answered within one month (Art. 12(3)).
// no_cookies_clause
This site does not set cookies, does not use sessionStorage, IndexedDB, service workers, or any other client-side persistence beyond the single opt-in clause described next. No consent banner is shown for site browsing itself, and none is required under the ePrivacy Directive for strictly necessary or explicitly-consented client-side storage.
The interactive game at /simulation uses no storage by default. If the player explicitly opts in via the title-screen // enable_persistence button (which first shows a disclosure dialog), the game writes a single localStorage key (kioho.simulation.v1) on the player's device. That key stores only: which endings have been unlocked, the best run so far, and the player's mute preference. Nothing is sent off the device. The opt-in can be revoked at any time, and a // wipe_local_data button removes the key entirely.
// changes
Material changes to this notice will update the last_updated field at the top. The git history of the source repository records every change.