Local processing comes first
These tools analyze the files and answers you supply in your browser. We do not upload those files, pasted reports or form values to our servers. Downloaded reports may contain details you entered or that the tool read from your files; review a report before sharing it.
Essential operation
Cloudflare serves the website and may process IP addresses and request metadata to deliver and protect it. This is separate from optional product measurement. We use local storage to remember your privacy choice for up to 180 days. No account is required.
Optional analytics
Only after you allow analytics, Google Analytics 4, PostHog and KitForma receive page views and a small set of tool actions: start, completion, error, report download, copy and guide-to-tool navigation. Events identify the product and page, but exclude form values, filenames, file contents, pasted text, raw query strings and URL fragments. We do not enable session replay, autocapture, advertising personalization or Google Signals on these products.
PostHog uses the EU endpoint with person profiles and IP geolocation disabled in our event payload. A random session identifier is stored for the current browser tab; it is not an account identity and is not shared across product subdomains. It expires after 30 minutes without activity or 24 hours in total. To distinguish browser visits from automation and support browser reports, PostHog receives the browser-supplied user-agent string (limited to 512 characters) and broad browser, operating-system and device categories. No high-entropy browser APIs or fingerprinting are used. Referrers are reduced to their public web origin, without paths, searches or fragments. Only fixed, approved campaign labels are retained from supported UTM parameters; arbitrary campaign text and click identifiers are excluded. Campaign labels remain in tab storage for up to 30 minutes without activity or 24 hours in total. Google may process network information when its script loads, and uses host-only analytics cookies with a configured maximum age of 180 days. KitForma stores daily aggregate action counts without a visitor identifier.
After you allow analytics, Cloudflare Web Analytics also measures page loading and web performance. Its payload is restricted to approved page URLs and numeric performance measurements. Form values, DOM selectors, resource URLs, query strings and fragments are excluded.
Your control
Rejecting optional analytics leaves every tool usable. Use Privacy settings in the footer to withdraw consent. Withdrawal stops further events from this integration and removes its accessible analytics cookies and session identifier. Global Privacy Control or Do Not Track disables optional measurement. Choices are stored separately on each subdomain. Privacy settings also offers a reversible option to exclude this browser from usage analytics on the current subdomain while testing. Explicit test URLs are excluded from all production collectors. The supported Printable Studio bio-test campaign sends consented diagnostic events marked as test traffic to Google and PostHog, and never sends events to aggregate counters or Cloudflare Web Analytics. Withdrawal also clears stored campaign labels. Historical data already received by providers is governed by their retention settings and policies.
Advertising and external links
An optional Adsterra banner can appear after the content of a guide only after you separately allow advertising. Analytics consent does not enable advertising. The provider script runs directly on static guide pages and can access that page and browser storage. Advertising scripts never run on tool pages, where you select files or enter answers. A guide does not contain your tool files or form values. Adsterra and its advertising partners may process your IP address, device and browser information, and use cookies or similar technologies to serve and measure ads. Use Advertising preferences to withdraw permission; this saves a refusal and reloads the guide to stop the provider code. Older consent for the previous frame-based integration does not enable this direct-script integration; a new explicit choice is required. Global Privacy Control and Do Not Track also disable it. This integration does not activate Google AdSense ads. See Adsterra’s privacy policy. External documentation, the main KitForma website and other products have their own policies. Following a link can share normal browser request information with its destination.
Contact and corrections
Contact kitforma@outlook.com about privacy or a correction. Please do not send passwords, payment information or confidential files. Updated 2026-10-19.