Privacy Policy

1. Overview

Kadantte is a static personal website. It does not provide user accounts, registration, checkout, comments, file uploads, or an online contact form through the main website.

The main website does not directly ask visitors to submit their names, addresses, telephone numbers, payment information, passwords, or other personal details.

Kadantte also operates cdn.why-inside.me to store and deliver files used by the website and for related content-hosting functions. The data handled by that service is described separately in this policy.

Questions about this policy may be sent to admin@kadantte.moe.

2. Information collected directly

The main website does not contain a backend application, visitor database, account system, contact form, newsletter form, or other feature that directly collects information entered by ordinary website visitors.

Selecting an email link opens your device's configured email application. The website itself does not receive or store an email unless you choose to send one through your email provider.

3. Theme preference and local storage

The website uses the browser's local-storage feature to remember the theme you selected.

This preference is stored under the key theme with one of the values dark, light, system, or contrast (high contrast). The system value follows your operating system's light or dark setting. When no value is stored, the website defaults to the dark theme.

The theme preference remains on your device until it is changed or removed through your browser settings. It is not transmitted to Kadantte's server as part of a user profile.

4. Cookies and authentication storage

The main Kadantte website does not intentionally create, read, or use first-party HTTP cookies. Its theme preference uses browser local storage, which is separate from cookies.

The authenticated account area at cdn.why-inside.me may use a session cookie to keep an authorized user signed in. Authentication tokens may also be created for users who access the service through compatible applications or its API.

These authentication mechanisms apply to authorized CDN users. An ordinary visitor requesting a publicly hosted image or file is not required to create an account or sign in.

Independent external services may apply their own cookies or similar technologies when their resources are requested or when you follow an external link. Those activities are governed by the respective provider's policies and your browser settings.

5. Hosting and server logs

The website and its hosted resources are delivered through web servers, reverse proxies, containers, and security infrastructure. These systems may automatically generate standard access, error, and security logs when a page or resource is requested.

Depending on the active server configuration, logs may contain:

• The Internet Protocol address making the request.
• The date and time of the request.
• The requested page, file, or resource.
• The HTTP request method and response status.
• Browser or user-agent information.
• The referring page, when supplied by the browser.
• Technical error, rate-limiting, or security information.

These logs may be used to deliver content, maintain reliability, diagnose technical problems, protect the infrastructure, investigate misuse, and enforce security controls.

6. Analytics and tracking

The main Kadantte website does not include Google Analytics, OpenPanel, Rybbit, Plausible, Umami, Meta Pixel, advertising pixels, or another dedicated visitor-analytics platform.

The main website does not intentionally track visitors across unrelated websites, build behavioural advertising profiles, or use unique advertising identifiers.

The service at cdn.why-inside.me may maintain operational statistics when those features are enabled. These statistics may include:

• Total storage consumption.
• The number of uploaded files.
• Authorized-user activity.
• File-view statistics.
• Click or visit statistics for shortened URLs.

These service statistics are used for administration, capacity monitoring, content management, security, and understanding use of hosted files or shortened links. They are not used to provide behavioural advertising.

7. Discord presence through Lanyard

The home page connects directly from your browser to the Lanyard service at api.lanyard.rest through a WebSocket connection.

This connection is used to retrieve and display the public Discord presence and Spotify-listening status associated with the website owner's configured Discord account.

The website sends the configured Discord account identifier to Lanyard. It does not send your Discord username or ask you to authenticate with Discord.

Because your browser connects directly to Lanyard, that service may receive technical connection information such as your IP address, browser details, connection time, and network metadata. Kadantte does not control Lanyard's independent logging or retention practices.

8. Content hosted at cdn.why-inside.me

Kadantte operates cdn.why-inside.me as a content-hosting and delivery service. The main website uses it to deliver certain images, including the favicon and social-preview image.

Uploaded content

The service stores content intentionally uploaded by authorized users. This may include:

• Images and screenshots.
• Videos and other media files.
• Documents and archives.
• Code files and code snippets.
• Uploaded text.
• Other files selected by an authorized user.

Depending on the upload options used, the service may also store file-related information such as:

• The generated or assigned filename.
• The original filename, when preservation is enabled.
• The file type and size.
• The date and time of the upload.
• The account associated with the upload.
• The folder, tag, or organizational information applied to it.
• A configured expiration date.
• A configured maximum number of views.
• Password-protection settings, when applied to a file.

Uploaded text and screenshots

Authorized users may upload screenshots, clipboard text, or other content through compatible desktop, mobile, screenshot, or file-sharing tools. The uploaded material and its associated file information are stored so that the service can provide a shareable URL.

Shortened URLs and aliases

Authorized users may create shortened links. The service may store:

• The original destination URL.
• The generated short-link identifier.
• A custom alias or vanity path selected by the user.
• Password-protection settings, when configured.
• A maximum-view limit, when configured.
• Creation and account-association information.
• Click or visit counts when link analytics are enabled.

Authorized-user accounts

The CDN's private management area may store information needed to create, secure, and administer authorized-user accounts, including:

• Usernames.
• Secure password hashes rather than plain-text passwords.
• Authentication tokens.
• Active and previous session information.
• Login-related and account-activity records.
• Account roles, permissions, and service settings.
• Optional authentication or multi-factor-authentication data.

Account and authentication information applies only to authorized users of the CDN's private management functions. It is not collected from ordinary visitors merely because they viewed a public image or downloaded a public file.

Service analytics and activity

When service analytics are enabled, the CDN may store operational information such as:

• Storage usage.
• Upload totals.
• File and account activity.
• File-view totals.
• Short-link click totals.
• Recent activity associated with an authorized account.

This information may be used to administer the service, monitor storage, investigate errors or abuse, secure accounts, and understand how hosted content and shortened links are used.

9. Independent third-party resources

The website loads certain resources from independent external providers. When your browser requests these resources, the provider may receive your IP address and standard request information.

• Lanyard Provides the Discord and Spotify presence information displayed on the home page through api.lanyard.rest (a WebSocket connection). This is the only independent third-party resource the website loads. The previous third-party JavaScript (jQuery from Google Hosted Libraries, and Popper and Tippy.js from unpkg) was removed, so the website no longer requests those origins.

These providers operate independently and may maintain their own technical logs. Their handling of information is governed by their respective terms and privacy policies.

The Kadantte-operated cdn.why-inside.me service is described separately above and is not treated as an independent third-party provider in this policy.

10. External links and redirects

The website contains links or redirect pages leading to external services, including:

• Discord
• GitHub
• Instagram
• X, formerly known as Twitter
• CIG House
• Exergium

Once you follow an external link or are redirected, the destination service may receive your IP address, browser information, referral information, and other data according to its own privacy practices.

Kadantte does not control external websites, their cookies, account systems, analytics, or data-retention practices.

11. Advertising

The current website does not display third-party advertisements and does not integrate an advertising network, ad server, sponsored-link platform, remarketing service, or behavioural-advertising system.

Kadantte does not sell visitor information to advertisers and does not use website or CDN activity to select personalized advertisements.

12. Information retention

Theme preference

The selected theme remains in your browser's local storage until you change it, clear the website's stored data, or reset your browser. Kadantte does not maintain a server-side copy of this preference.

Hosted files and uploaded content

Content uploaded to cdn.why-inside.me may remain stored until it is deleted by an authorized user or administrator.

Some uploads may have a configured expiration date or maximum-view limit. When such a rule is applied, the content may be removed after the relevant date or view threshold is reached.

Shortened URLs

Shortened URLs and their aliases may remain stored until deleted or until an applicable expiration or maximum-view rule removes them. Related click totals may remain associated with the shortened-link record while that record exists.

Authorized-user accounts

Account, authentication, session, and activity information may be retained while an account remains active and for a reasonable period afterward where necessary for security, administration, abuse prevention, backup recovery, or legal compliance.

Service statistics

Storage, upload, activity, file-view, and short-link statistics may be retained for service administration while the corresponding content, account, or analytics records remain active.

Server logs

The retention period for access, error, security, reverse-proxy, and container logs depends on the active logging and log-rotation configuration. A fixed retention period is not defined by the website's source code.

Backups

Deleted information may remain temporarily in restricted backups until those backups are overwritten or expire through the normal backup-retention process.

13. Legal basis for processing

Where applicable data-protection law requires a legal basis, technical information may be processed for Kadantte's legitimate interests in operating, securing, maintaining, and troubleshooting the website and its hosting infrastructure.

Content and account information submitted by authorized CDN users may be processed as necessary to provide the requested hosting, file-management, account, and shortened-link services.

Information may also be processed where necessary to comply with a legal obligation, respond to a valid legal request, prevent misuse, or protect the rights and security of Kadantte and its users.

14. Your data-protection rights

Depending on your location and applicable law, you may have rights relating to personal information processed by Kadantte, including the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion where legally applicable.
• Object to or restrict certain processing.
• Request data portability where applicable.
• Withdraw consent where processing relies on consent.

Because the main website does not maintain user accounts or visitor profiles, Kadantte may have little or no information that can be associated with an ordinary website visitor.

Authorized CDN users may have identifiable account, upload, session, activity, and shortened-link records.

Requests may be submitted to admin@kadantte.moe. Reasonable identity verification may be required before fulfilling a request.

15. Children's privacy and email contact

Kadantte is a general-audience website and is not directed or intentionally marketed to children. The website does not knowingly solicit personal information from children through forms, account registration, comments, newsletters, or similar collection features.

The website includes a mailto: link that opens the visitor's own email application. A visitor may voluntarily use that link to send an email to admin@kadantte.moe.

An email may disclose information chosen by the sender, including their email address, display name, message content, and any attachments they voluntarily include. This information is used only to review, respond to, manage, secure, or resolve the related communication.

Age and parental authorization

Children should not send personal information through the email link without the permission and supervision of a parent or legal guardian when required by the laws applicable in their country.

In particular:

• In the United States, children under 13 should not send personal information without the authorization of a parent or legal guardian.
• In the United Kingdom, children under 13 should not send personal information where valid parental authorization is legally required.
• In the European Economic Area, the applicable age at which a child may independently consent to certain online processing varies by country between 13 and 16. A child below the age applicable in their country should obtain authorization from a parent or legal guardian where required.
• In other countries, the minimum age and parental-authorization requirements established by local law apply.

Emails received from children

If Kadantte becomes aware that personal information has been sent by a child without legally required parental authorization, reasonable steps will be taken to delete the message and associated personal information, except where limited retention is necessary for security, abuse prevention, legal compliance, or protection of legal rights.

A parent or legal guardian who believes that a child has sent personal information without appropriate authorization may contact admin@kadantte.moe to request review and deletion of the relevant communication.

Email transmission and storage are also subject to the privacy, security, and retention practices of the sender's email provider and Kadantte's email service provider.

16. Security

Reasonable technical and organizational measures may be used to protect the website, hosted content, user accounts, authentication information, and infrastructure.

Passwords used for authorized accounts are stored as password hashes rather than as readable plain-text passwords. Authentication tokens and active sessions should be treated as confidential because they may provide access to an account.

No Internet transmission or storage system can be guaranteed to be completely secure.

17. Changes to this policy

This Privacy Policy may be updated when the website's code, infrastructure, hosted services, account functions, external resources, or legal obligations change.

The current version will be published on this page with an updated review date.