Privacy policy
Data collected
Kankwa only collects data required to operate the service:
- Email address (account identifier)
- Hashed password (never stored in plain text)
- Content created on the platform, such as lists and events
- Guest participation data: display name, optional email, cancellation token and comments
- Product links and remote image URLs added to gift lists
Use of data
Your data is used exclusively to operate Kankwa and send requested transactional messages. It is never sold or used for advertising or targeting. Only the providers required for these operations receive the strictly necessary data.
Processors and external content
Kankwa relies on its European hosting operator and a transactional email provider. When a product link is submitted, the Kankwa server contacts the merchant site to extract product information. Remote product images are then loaded from their original host with no Kankwa page referrer; that host still receives the visitor’s IP address and browser information. These providers may process data outside the European Economic Area under the safeguards described in their contractual terms.
Cookies and tracking
Kankwa uses no third-party analytics or advertising tracker. Audience measurement is enabled by default and uses a random first-party identifier stored in your browser. It links steps in the Kankwa journey to measure audience, activation and conversion: event name, Kankwa service of origin, mobile or desktop device category, approximate country, region and administrative subdivision and, when an experiment is active, its variant. This approximate location is calculated on the Kankwa server from the connection IP address against local DB-IP Lite databases. In France, approximate coordinates are compared in memory with local public administrative boundaries to estimate the department. A very coarse network category may also be recorded only when the local ASN organisation explicitly indicates a mobile or cellular network; the ASN and organisation are not retained. The IP address, city, postal code and coordinates are not retained in audience measurement events. After sign-up or sign-in, some events may also be associated with the internal account identifier. These data are used to produce Kankwa’s own aggregate statistics and are not sold or sent to an analytics or advertising provider. The browser identifier expires after 13 months without renewal and event data is deleted after at most 25 months. You can opt out at any time using the button below: this deletes the identifier from this browser and prevents new measurement events from being sent from it.
Hosting and security
Primary Kankwa application data is hosted on a private server in Europe. Communications are encrypted via HTTPS and passwords are hashed with bcrypt. Transfers linked to transactional email are described above.
Your GDPR rights
You have the right to access, correct and delete your personal data. To exercise these rights, contact contact@kankwa.fr.
Retention period
Account and organizer data is retained while the account remains active. Guest participation data remains attached to the shared resource until its organizer deletes that resource or account. Account deletion immediately removes primary Kankwa data; encrypted operational backups are rotated within 30 days.