Privacy Policy
This policy explains the data paths in KASQORA's current browser-based household tools: local inventory, readable QR snapshots, files you control and contact messages. These are different activities with different privacy implications.
Last updated: . Questions: hothitber@gmail.com.
1. Information used by the tools
You choose the item names, quantities, units, locations, notes and tool-specific values you enter. Saved records also contain an item identifier, tool number, creation and update times, and a QR version. The inventory code processes these values in your browser; it does not send your inventory or backup files to an inventory server. There is no inventory account or cloud synchronization service in this version.
This does not mean that visiting a website produces no information outside your device. Delivering pages and third-party resources involves network requests, and contacting us creates a message held by email services. Those activities are described below.
2. Local browser storage
My Items uses localStorage, currently under the key kasqora.v1. Records belong to the browser profile and site origin where you saved them. A different device, browser, profile or site address does not automatically receive the same records. Private browsing and browser storage restrictions can affect whether records remain available.
Saved records generally remain until you remove or replace them, clear site data or the browser removes the storage. A supported migration may retain an original local copy under a related recovery key. That copy is still in the same browser and is not a remote backup. Damaged or unreadable storage can trigger a recovery mode that allows you to download the original text before replacing it.
Export JSON backups regularly, particularly before changing browsers, clearing storage or importing replacement data. A successful save is not a promise that a device or browser will retain information indefinitely.
3. Information in QR codes and links
A generated QR code contains a link with an encoded snapshot in the URL fragment, the part following #kq=. The snapshot can include the item's name, quantity, unit, location, notes, identifiers, timestamps and selected tool fields. It is readable encoding, not encryption, a password or an access-control system.
Anyone who can scan, photograph or receive the code or link may read the snapshot. The fragment is normally excluded from the HTTP page request sent to the web host, but the page's scripts can read it, and a copied link, browser history entry, screenshot or messaging service can expose the full value. Do not put passwords, precise home addresses or sensitive information about people into item fields or labels.
Codes are snapshots rather than live shared records. Updating a local item does not rewrite a printed code. Rebuild and replace old labels when information changes. Deleting an item here cannot erase a label or link that someone else already has.
4. JSON backups, CSV input and downloads
JSON export creates a file in your browser for you to download. JSON imports are read and validated locally before the selected merge or replacement action. Merge and replacement have different effects; review the page's controls and keep a separate backup before proceeding.
The CSV tool parses the CSV text entered into its input, previews and validates rows, and saves accepted records locally only after the import action. The supplied inventory code has no endpoint that uploads these JSON or CSV contents. Raw CSV input is not included in generated QR snapshots, although the imported item fields may be.
Downloaded JSON, PNG, SVG, ZIP and print output are copies you control. Your operating system, download location, printer or a cloud-synced folder may retain copies independently of KASQORA. Delete or protect those copies separately. Clearing this site's storage does not remove exported files.
5. Contact form and email
The current EmailJS Service ID, Template ID and Public Key are empty. Browser form sending is therefore unavailable and the form reports that it is not configured. It does not send a message or claim success. The direct contact address is hothitber@gmail.com; opening that link uses your email application, and you decide whether to send.
The contact page includes a locally hosted copy of the official EmailJS browser SDK. Loading it does not contact a third-party CDN or submit your form fields. If form sending is configured later, submitting it will send Name, Email, Subject and Message through EmailJS and the connected email provider to this contact address. The form does not attach inventory or backup files.
The form code does not save submitted messages or drafts in localStorage, sessionStorage, IndexedDB or cookies. Text can remain in the current page until you leave; browser restoration or autofill features may operate independently. Messages sent directly by email are processed by your provider and the receiving Gmail service. Include only the information needed to answer your question.
6. Cookies and similar technologies
The supplied first-party code does not set cookies or include advertising or analytics trackers. localStorage is used for inventory and related recovery copies; it is different from a cookie and is not automatically attached to every HTTP request. The code does not implement a separate inventory store in IndexedDB or sessionStorage.
We have not audited the settings of the production host or every email provider's infrastructure. This policy does not promise that a hosting or email provider never uses cookies or logs. Your browser's controls can restrict storage and resource loading, but restrictions may prevent saving or contact features from working.
7. Hosting and third-party services
A static web host may receive an IP address, requested path, request time, browser information and other request headers needed to deliver pages. Its access or security logs depend on its configuration. The production hosting provider, log retention period and operator location have not been verified in this package; a specific retention period cannot be stated.
The official EmailJS SDK is bundled with this website and does not require a CDN at runtime. EmailJS is integrated for future configured form sending; its privacy policy explains its processing. Direct messages to the listed Gmail address are handled by Google under its privacy policy. These services have their own infrastructure and practices.
Site photos are served as local files. Photo-credit links lead to external photography sites only when followed. The bundled QR library runs locally. No Google Analytics, advertising platform, social sign-in or payment integration was found in the supplied site code.
8. Security and retention
Browser-local storage is not an encrypted vault. People or software with access to your browser profile or device may access it. Use appropriate device protections and avoid storing sensitive material. A printed label is physically shareable, so its privacy depends on where it is placed as well as what it contains.
Inventory has no automatic expiry in the supplied code. You control local deletion and exported copies. Email providers may retain messages and backups according to their policies; no automatic contact-message deletion schedule is implemented by this static site. We cannot promise complete security, remote recovery or deletion of copies outside our control.
9. Your choices and deletion
You can edit or delete saved items in My Items, export a JSON file, or clear this site's storage through your browser settings. Clear all site storage if you also intend to remove retained migration copies. Export anything you want to keep first. Check other browsers, exported files, printed labels and shared links separately.
For questions about a message you sent, email the contact address and identify the relevant message without resending private attachments. We can consider requests about correspondence accessible to us, but cannot remotely inspect or remove your browser-local inventory. Privacy rights and identity-verification requirements depend on applicable law; this policy does not limit rights you may have.
10. Children's privacy
KASQORA is a household organization resource for general use and has no child account system or age-verification flow. Children should ask a parent or guardian before sending personal information by email or entering information about other people. If you believe a child has sent personal information to the contact address, write to us with enough detail to locate the message. Local records on a child's device must also be reviewed there.
11. International users
Local inventory processing happens in your browser, while page delivery and email can involve providers in other countries. The operator jurisdiction and the countries in which providers process each request have not been established in this package. It does not claim automatic compliance with every privacy law. The legal obligations for a production service must be assessed against its actual operator, audience and processing arrangements.
12. Changes and questions
We will update this page when the described processing changes, including enabling contact sending or introducing an analytics or advertising service. Those additions would require a new assessment of notices and any consent obligations; they are not described as active features today. Check the date above when reviewing changes. Contact hothitber@gmail.com with privacy questions.