Privacy Policy

Last updated: August 19, 2026

This Privacy Policy explains how Kioskt (“Kioskt”, “we”, “us”) collects, uses, and shares information when you use our website at kioskt.com and related services (the “Service”). By using the Service you agree to the practices described here.

Information we collect

We collect the following categories of information:

Account information. When you create an account we collect your email address, a display name, a handle, and a password (stored only as a secure hash, never in plain text). If you sign in with Google, we receive your name, email address, and profile picture from Google.
Content you create. The pieces, issues, images, text, comments, and other material you submit. Published content is public by design.
Usage data. Basic interaction data such as view counts, likes, and saves, used to power features like trending and recommendations.
Technical data. Information your browser sends automatically, such as IP address and user-agent, used for security, rate-limiting, and abuse prevention.
Cookies. Essential cookies used to keep you signed in and remember your theme preference. See “Cookies” below.

How we use information

To provide, operate, and maintain the Service and your account.
To display your published content and power discovery features (trending, related, personalised feeds).
To send transactional email: email verification and password resets. We do not send marketing email.
To keep the Service secure: authentication, rate-limiting, and preventing fraud and abuse.
To comply with legal obligations.

Cookies

We use only strictly necessary cookies. A session cookie (an opaque, random token) keeps you signed in after you log in; it contains no personal information and is HttpOnly and Secure. A separate preference is stored in your browser to remember light/dark mode. We do not use third-party advertising or cross-site tracking cookies.

How we share information

We do not sell your personal information. We share information only with:

Service providers that host and run the Service on our behalf: Vercel (website hosting), Railway (application and database hosting, located in the United States), Cloudflare R2 (media/image storage), and our transactional email provider. These providers process data only to provide their service to us.
Google, if you choose to sign in with Google, solely to authenticate you.
Legal and safety recipients, where required by law or to protect the rights, safety, and property of Kioskt or others.
The public. Content you publish, along with your display name and handle, is publicly visible.

Data retention

We keep your account information for as long as your account is active. If you delete your account, your account record and personal profile data are removed; content you published may remain but is disassociated from your profile. We may retain limited information where required for legal, security, or backup purposes.

Your rights

Depending on where you live (for example under the GDPR or the California Consumer Privacy Act), you may have the right to access, correct, delete, or export your personal information, and to object to certain processing. You can edit your profile and delete your account at any time from your account settings. To make any other request, contact us at privacy@kioskt.com. We will not discriminate against you for exercising these rights.

Security

We protect your information with measures including encrypted connections (HTTPS), hashed passwords, opaque server-side sessions, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

International transfers

The Service is operated from, and stores data in, the United States. If you access it from outside the United States, your information will be transferred to and processed there.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice.

Contact

Questions about this policy or your data? Email us at privacy@kioskt.com.