In short: the Kurkik software collects nothing about you. This website collects what you type into the early-access form, so we can email you when Kurkik is available, and - only if you accept - Google Analytics statistics. We do not sell your data or use it for advertising.
1. Who is responsible
The controller of your personal data is Pavel Bodiachevskii, individual entrepreneur, Republic of Armenia, taxpayer number 40258354, Pavstos Buzand Street, 87, Yerevan, Armenia. For anything about your data, write to pavelbodyachevskiy@gmail.com.
2. The Kurkik software
Kurkik runs on your machine and connects only to the systems you configure. It does not send telemetry, usage statistics, crash reports, broker data, documents or credentials to us or to anyone else. This policy is therefore about the website only.
3. What we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Early-access form: name, work email, and optionally company, the systems you run and your message; the time and the version of the consent text you agreed to | To email you, personally and at most a few times, about Kurkik early access and its first release, and to understand which organisations and systems are interested | Your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time | Until 12 months after Kurkik's first general release, or until you withdraw consent or ask us to delete it, if sooner |
| Analytics: a pseudonymous cookie identifier, pages viewed, referring site, approximate location (country, city) derived from your IP address, which Google Analytics does not store; browser and device type | To count visitors and see which countries and pages Kurkik reaches | Your consent through the cookie banner (GDPR Art. 6(1)(a) and the ePrivacy rules) | 14 months |
| Server logs kept by our host: IP address, time, page requested, browser | To deliver the website and protect it against abuse | Our legitimate interest in running a secure website (GDPR Art. 6(1)(f)) | As set by Netlify, our host, for security and operations |
| Emails you send us | To answer you | Our legitimate interest in replying, or steps you ask for before a contract | As long as needed to handle your request |
We also use Google Search Console and Bing Webmaster Tools. They show us how the site appears in search results, in aggregate, and receive nothing from this website. We do not make decisions about you by automated means, and we do not build profiles of you.
The consent text on the form, version 2026-10-29, reads: "Email me when Kurkik early access opens. I can withdraw at any time by replying to that email."
4. Cookies and analytics
This site sets no cookies by default. If you choose Accept in the cookie banner, Google Analytics is loaded and sets the cookies _ga and _ga_<id> (expiring after up to 2 years) to recognise repeat visits. If you choose Reject, nothing is loaded from Google. Google signals and ad personalisation are switched off.
Your choice is kept in your browser's local storage (kurkik-consent) for 365 days, and then the banner asks again. You can change it at any time:open cookie settings. Rejecting after accepting removes the Google Analytics cookies. Your browser can also block or delete cookies.
5. Who receives your data
We never sell your personal data, and we do not share it for advertising. Only the service providers below receive it, and they process it on our behalf and under contract:
| Recipient | Country | Purpose | Data | Retention | Safeguard |
|---|---|---|---|---|---|
| Netlify, Inc. | United States | Hosting this site and receiving the early-access form | Form contents; IP address, browser and request details in server logs | Form entries until we delete them; logs as set by Netlify | Netlify data processing agreement with standard contractual clauses |
| Google LLC (Google Analytics) | United States | Counting visits, countries and pages viewed - only after you accept analytics cookies | Pseudonymous cookie ID, pages viewed, approximate location derived from the IP address (which Google Analytics does not store), browser and device type | 14 months | Google Ads Data Processing Terms, EU-US Data Privacy Framework and standard contractual clauses |
We may disclose data where the law requires it, for example to comply with a court order, and only to the extent required. We read and manage the data ourselves from Republic of Armenia.
6. International transfers
We are based in Armenia, and our providers process data in the United States and possibly in other countries where they operate. These countries may not protect personal data in the same way as yours. Transfers from the European Economic Area, the United Kingdom and Switzerland rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses. By submitting the form or accepting analytics, you also consent to the transfers described in this section, where the law of your country requires such consent.
7. Your rights
Depending on where you live, you can ask us to:
- tell you what personal data we hold about you and give you a copy (access and portability);
- correct it (rectification);
- delete it (erasure);
- limit how we use it (restriction), or stop using it where we rely on legitimate interest (objection);
- withdraw your consent at any time - this does not affect what we did before you withdrew it.
Email pavelbodyachevskiy@gmail.com. We answer within 30 days, free of charge. We may ask you to confirm that the email address is yours before acting. To leave the early-access list, simply reply to any email we send you.
8. Complaints
If you think we handle your data wrongly, please tell us first. You may also complain to a data protection authority: in Armenia, the Personal Data Protection Agency of the Ministry of Justice; in the European Union, the supervisory authority of the country where you live or work; or the authority responsible where you live, such as the UK Information Commissioner's Office, the Office of the Privacy Commissioner of Canada, Brazil's ANPD, Korea's Personal Information Protection Commission or Japan's Personal Information Protection Commission.
9. Regional information
Armenia
We process personal data in line with the Law of the Republic of Armenia on Protection of Personal Data.
European Union, United Kingdom, Switzerland
The legal bases, rights and transfer safeguards above are given as the GDPR, UK GDPR and Swiss law require.
United States, including California
We do not sell personal information and do not share it for cross-context behavioural advertising. We collect only the categories listed in section 3, for the purposes stated there. You can exercise the rights in section 7 regardless of the state you live in, and we will not treat you differently for doing so.
Canada
We collect personal information with your consent and only for the purposes stated, as PIPEDA requires.
Brazil
The rights in section 7 include those under the LGPD, including information about the entities we share data with (section 5).
Republic of Korea, Japan, China
Section 5 lists each overseas recipient, its country, the purpose, the data, the retention period and the safeguard. If you are in one of these countries, submitting the form or accepting analytics means you consent to those transfers abroad. You can withdraw that consent at any time as described in section 7.
10. Security
The site is served only over HTTPS. Form entries are kept in our Netlify account, which is protected by two-factor authentication, and we keep exports of them only as long as we need them. No method of transmission or storage is perfectly secure, but if a breach affects your data, we will tell you and the authorities where the law requires.
11. Children
Kurkik is a tool for professionals. This site is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
12. Changes
We will publish any change to this policy on this page with a new version number and effective date. If a change affects how we use data you already gave us, we will ask for your consent again where the law requires.