Who runs these sites
Oskar Gravesen, an individual based in Denmark, runs both sites. Email: privacy@kebivo.com. We are the controller for the personal data described on this page.
When you visit
Both sites are static pages hosted on Cloudflare Pages. To deliver a page, Cloudflare processes your IP address and standard request data: the page address, the time, your browser's user agent and the referring page. Cloudflare uses this data to serve the sites and to protect them from attacks and abuse. In the Cloudflare dashboard we see aggregate traffic statistics. For requests that Cloudflare blocks or challenges as a security threat, we can also see the individual event, including the IP address. We don't use this data to identify you or build profiles.
Legal basis: our legitimate interest in running working, secure websites (Article 6(1)(f) GDPR).
When you email us
We use your email address and message to answer you, and keep them for as long as we need to handle your request. Cloudflare Email Routing forwards mail sent to our address to a Gmail mailbox, so Google also processes it. Legal basis: our legitimate interest in replying to you (Article 6(1)(f) GDPR).
Cookies and tracking
We don't set cookies or save data in your browser storage. If Cloudflare needs to check whether a visit comes from a bot, it may set a short-lived security cookie (such as __cf_bm or cf_clearance). That cookie is needed only to protect the sites and isn't used for tracking, so there is nothing to accept and no cookie banner. We use no analytics, advertising, social media plugins or third-party fonts, and we don't build profiles. The demo video is served from this site and loads only when you press play. If this changes, we will update this page first and ask for your consent where the law requires it.
Who receives the data
Cloudflare, Inc. hosts both sites and processes request data on our behalf under its data processing agreement. Cloudflare may process the data in the United States. That transfer relies on Cloudflare's certification under the EU-U.S. Data Privacy Framework, with the EU standard contractual clauses as a fallback. Emails you send us are also handled by Cloudflare Email Routing and stored in our Gmail mailbox (Google), which may process them in the United States; Google is also certified under the Data Privacy Framework. We don't sell personal data or share it with anyone else.
How long it is kept
Cloudflare keeps request data only as long as it needs it to deliver and protect the sites. We don't receive or store copies. We delete emails once the matter is handled and we no longer need them for follow-up.
Your rights
Under the GDPR you can ask us for access to your personal data, and to correct, delete or restrict its use. You can object at any time to processing based on our legitimate interests. Write to privacy@kebivo.com. You can also complain to a data protection authority: Datatilsynet in Denmark, or the authority in the EU country where you live or work, or where you think the problem happened.
You don't have to give us any personal data, but your browser can't load the sites without sending its IP address. We make no automated decisions about you.
The Kebivo software
This policy covers the websites only. Kebivo is software you run yourself. It has no telemetry and sends us nothing. Data in your installation goes only to the destinations and AI providers you configure.
Changes
When something changes, we update this page and the date at the top.