v2 · Updated 2026-10-06
Your login email (or basic Google profile: email, name, avatar).
Login and usage records: sign-in time, IP, a device identifier (for the device limit) for security auditing, plus AI-chat usage counts.
We do not collect ID documents, card numbers, or contacts. WeChat payments happen on WeChat's side — we only see the received payment and the email you noted.
New first-party analytics use a random per-tab, daily-rotating sessionStorage identifier, not device fingerprinting. We record page categories, referrer domains, estimated visible time, feature clicks, AI and email-login outcomes, and request IDs, not search text, email addresses, codes or URL queries. To diagnose crawlers and browser compatibility, we also store the request User-Agent (up to 512 characters, with control characters removed), visible only to administrators. It is not used for device fingerprinting and no additional IP address storage is introduced. Admin, self-marked test and suspected bot traffic are grouped separately; this does not establish whether a visitor is human. DNT and the kc_noanalytics preference disable behavioral analytics. Events and User-Agent values are retained for 30 days and periodically pruned during writes; deletion may be delayed during inactivity and backups are managed separately. Legacy daily-hash counters remain historical data.
New AI debug archive entries retain metadata such as model, tool names, latency, usage and error flags, not question or answer text. Historical transcripts have not been retroactively deleted and remain subject to the previous approximately 90-day cleanup mechanism. Account-security and billing records are separate; content you send to AI is still processed by inference providers.
Sign-in and account security (anti-abuse, anti-sharing), member quota metering, and service improvement.
We do not sell your personal data and do not use it for third-party advertising.
Used only for the login session and preferences (language, up/down color, theme). No third-party ad cookies.
Cloudflare (network & protection), Resend (login-code emails), and AI inference providers (only the question text you actively send). Each is necessary to run the service and handles data under its own privacy policy.
Account and audit data are kept while the service operates; to delete your account or data, contact support and we will process it within a reasonable period.
[email protected], X koalcheck.