We count. We don’t follow.

Short version

• No raw network address is stored. Not in the counts, not with a pack.
• No cookie and no local identifier is set for visitors. The only thing your browser keeps is your light or dark choice.
• If your browser sends Do Not Track or Global Privacy Control, page views are not counted at all.
• Detailed counts are deleted after 90 days. Only daily totals stay.

1. A page view

When your browser asks kuticon.com for a page, the server notes the visit itself. No script and no extra request is involved. We keep:

• The page path, such as /gallery. The address of a private pack is stored as /p/*, not its id.
• The site you came from, as a host name only, when your browser says so, such as news.ycombinator.com. Never the full address.
• The utm_source, utm_medium, and utm_campaign tags, if the link had them.
• The country, as the two-letter code our network provider adds. Not the city, not the coordinates.
• The kind of device: phone, tablet, or desktop.
• A visitor code that lets us count one person once per day. It is a hash of your network address and browser name with a random key. The key lives only in the server’s memory, is never written down, and is replaced every day at midnight ICT. Yesterday’s codes cannot be matched with today’s, and nobody, including us, can turn a code back into an address.

2. A pack

When you ask for a pack we keep the sentence, the style choices, the icon names, and whether you used the website, the command-line tool, or the MCP server. Before the sentence is stored, anything that looks like an email address, a web address, or a phone number is replaced with [email], [link], or [number].

To enforce the daily limit, the server stores a salted hash of your network address with the pack. It cannot be read back as an address, but the operator, who holds the salt, could test a known address against it. The same hash is how a network can be blocked if it sends abuse.

We also count failed drawings, and when someone reaches the daily limit or the queue is full, with the same fields as a page view.

3. A download or a search

Each time an icon or a pack leaves the site we count it once: a pack zip, a single SVG or PNG, an icon fetched by the command-line tool or an MCP server, or a press of Copy SVG on a pack page. We keep which icon or pack it was, the style, the file type and size, and whether it came from a browser, the command-line tool, the MCP server, or another program, with the same fields as a page view. A library search is counted with how many icons it found; the words are kept only when nothing was found, so we know what to draw next. If you use the command-line tool or the MCP server with files already on your machine, nothing reaches us and nothing is counted.

4. Who sees it

Only Kuticon’s operator, on a private page behind a password. Nothing is sold or shared. The counts never leave our server, and no analytics company receives them.

Kuticon runs behind Cloudflare, which handles network traffic for the site under its own policy.

5. How long

• Single events: 90 days, then deleted. Daily totals by page, referrer, country, and so on are kept.
• The record of what the operator flagged, hid, or blocked: one year.
• Packs and their sentences: as long as the pack exists. Write to us to have one removed.

6. Questions or removal

Write to [email protected]. Send the pack address if you want a pack removed. Because we do not keep names or addresses, we cannot look you up any other way.