Policy / updated October 8, 2026
Privacy
Accounts are optional. This build uses two strictly necessary cookies, no advertising, and no file uploads. Designs can stay in local browser storage. It records four anonymous tool events and first-party product events so we can tell whether the site is useful.
Data collected by this application
You can sign in with a one-time email code. That creates an optional account and sets the HttpOnly kandi_session cookie. A first cloud save may set the HttpOnly kandi_guest cookie so unclaimed designs can be restored. The application code does not load advertising pixels. Generator selections can stay in page memory and in local browser storage on this device. Source images stay in the browser and are not uploaded.
Usage events
To learn whether the tools work, the site records four events when you use them: “idea_generated”, “phrase_generated”, “plan_printed”, “tutorial_next_step”. Each record contains only the event name, the page path, a short non-personal detail (for example the recipe name or the filters chosen), and a timestamp. No IP address, user agent, cookie, device identifier, or session identifier is stored in these event records, and events cannot be linked to a person or across visits. They are kept in a Cloudflare D1 database operated for Kandiideas, used only to improve the site, and never sold or shared.
First-party product events
To learn how people move through the site, Kandiideas also records first-party product events: page views and page leaves on live routes, allowlisted key-link clicks, sign-in, library saves, gallery submissions, moderation decisions, and local tool project exports. Each record stores the event name, a page path, a timestamp, whether the visitor was anonymous, a guest, or signed in, and a short allowlisted property bag (for example a project kind, a theme slug, visible dwell time, or a named CTA). When a kandi_session or kandi_guest cookie is already present, the row may include the same account or guest identifier the site already stores for library and gallery work. The browser may also keep a short-lived tab session id in sessionStorage (not a cookie) so views, leaves, and key clicks in the same tab can be joined. Closing the tab clears it. Anonymous visits in other tabs or on later days cannot be stitched; that would require a new cookie, which this site does not set. No email address, IP address, user agent, cookie value, or device fingerprint is copied into these rows. They are kept in the same Cloudflare D1 database, used only to improve the site, purged after 90 days, and never sold or shared.
Feedback submissions
The optional feedback form stores only what you type: a feedback type, your message, an optional email address for replies, and the page path. Submissions are stored in a Cloudflare D1 database operated for Kandiideas, are used only to plan site improvements, and are never sold or used for marketing. To request removal of a submission, use the contact below.
Hosting logs
When the site is deployed, the selected hosting and security providers may process technical request data such as IP address, user agent, requested URL, timestamp, and error information. The configured providers are Cloudflare Workers and Cloudflare CDN. Production logging is configured as “Cloudflare Workers Logs, kept 7 days”. These Cloudflare Workers Logs record request details such as the requested URL (including any query string, for example a gallery search), the referring site, user agent, IP address, approximate location derived from the IP address (country, region, city, postal code, and coordinates), the network operator, response status, and timing. Cookie values are redacted. The logs are used only to run the site, investigate errors, and count visits by traffic source, and are not sold or shared beyond Cloudflare as our host. No Logpush, Tail Worker export, or third-party log destination is configured. Cloudflare may also process limited network and security metadata under its privacy policy.
Clipboard and printing
Copy buttons write the visible recipe, phrase, or tile to your device clipboard only after you activate them. The site does not read clipboard contents. “Print this plan” opens your browser’s print dialog on your device; the plan itself is not sent to a server, only the anonymous “plan_printed” event described above.
External links
The content pages do not contain affiliate links or embedded social media. This policy links to a service provider disclosure. Future external links will be identified, and any affiliate relationship will be disclosed before use.
Contact
Kandiideas is operated by FanYehua. Privacy questions and requests: fanshifu@agent.qq.com.