Privacy

KeebDepot is a product-comparison site. We do not require, request, or offer user accounts. We do not run analytics pixels, advertising trackers, or social network widgets. This page describes, in plain English, the small amount of data we do touch and why.

What we collect

1. Ephemeral request data

When you visit KeebDepot, our server logs the minimum needed to serve pages and diagnose errors:

• the URL you requested
• HTTP status and response size
• user-agent string (browser + OS your device advertises)
• request IP address — used only in memory, to enforce rate limits, and not stored in any database

Operational web-server logs (from Caddy) are kept for up to 14 days on the VDS and then rotated out. They are not shared with third parties.

2. Affiliate click tracking

When you click an outbound “Buy” link, we record that a click happened against the offer, the HTTP Referer header, and the user-agent. We intentionally do not store your IP, a session identifier, or any fingerprint. The record exists so we can (a) know which vendor a commission belongs to and (b) detect obvious bot traffic. See the Disclosures page for how affiliate programs work.

3. Error reports

Unhandled exceptions are forwarded to Sentry (a third-party monitoring service) so we can fix bugs. We configure Sentry with sendDefaultPii: false, which prevents it from attaching IPs or cookie data to error reports. Sentry’s own retention and infrastructure are documented at sentry.io/privacy.

4. Content Security Policy reports

Modern browsers will POST a JSON report to us if a page tries to load a resource our Content Security Policy disallows. These reports help us spot injection attempts and misconfigured embeds. They include the blocked URL and the URL of the page that triggered it; they never include form input or cookies.

Cookies

KeebDepot sets exactly one cookie, kd_admin_session, and only on the /admin area. The admin area is hidden from public visitors by a secret request header that only the operator’s browser sends; without that header the surface returns a 404. Normal readers of the site receive zero cookies from us.

Third parties

• Cloudflare sits in front of the site as CDN and DDoS filter. It sees request metadata but does not set tracking cookies on our behalf.
• Sentry receives stack traces for server errors, without personally identifiable information.
• OpenRouter (with Anthropic as the upstream model) is invoked server-side to summarise publicly-posted product reviews. Your browsing does not trigger these calls.
• Affiliate retailers (Amazon, Drop, NovelKeys, etc.) — once you click through, you are on their site and subject to their privacy policy. We do not receive payment, address, or account data from them; we receive aggregate commission reports.

Your rights

Because we do not maintain user accounts and we do not store IPs, there is no profile we hold about you. If you believe an entry in our Sentry logs contains data you want removed, email [email protected] with enough context to identify the event (approximate timestamp, URL, browser) and we will redact or delete it within 30 days.

If you are a EU/UK resident invoking GDPR / UK-GDPR rights (access, rectification, erasure, portability, objection), the same address works. We aim to respond within 30 days. Our basis for processing operational logs and error reports is legitimate interest (operating and debugging the service).

Changes to this page

We publish this page directly in our source repository. Substantive changes bump the “Last updated” date above. If a change reduces your privacy in a meaningful way, we will also note the change on the home page for at least 14 days.

Contact

Questions, requests, or incident reports: [email protected]. For general site feedback see About.