Privacy Policy

What is stored

There are no accounts. Keavix keeps an operational record of the links submitted to it, described in full below, plus what any web server unavoidably writes down:

• Server logs. Each request records the time, the path, the response code, your IP address, and your browser's user-agent string — the same lines every web server writes. These rotate and are overwritten.
• Application logs. When a link is fetched, the log records the URL and the media title, so a failure can be diagnosed. These rotate on the same schedule.
• Rate-limit counters. Your IP address is held in memory to stop one caller overwhelming the service. Nothing is written to disk and the counters refill within the hour.

The download record

Every link pasted into Keavix, and every download attempted, is written to a record used to keep the service working — to see which platforms are failing, which downloads are slow, and what error people are actually being shown. Each entry holds:

• the link you submitted, the platform, and the title of the media it resolved to;
• which tool page you pasted it into, the format you chose, and the size delivered;
• how long each stage took, and whether it succeeded or the error message you saw;
• your IP address, your browser's user-agent string, and the page that referred you.

Entries are also grouped by a first-party cookie named kv_sid, so that several downloads from the same browser can be seen as one visit rather than as unconnected rows. That cookie holds a random identifier and nothing else — no address, no fingerprint, nothing derived from you or your device. In the operator's view each group is labelled with an assigned name such as “Marcus Reed”. That name is generated from the random identifier. It is not your name, it is not looked up anywhere, and it says nothing about who you are.

If a request arrives without that cookie — before it has been set, or because you block cookies — it may be joined to a recent group that used the same IP address and the same browser, within a six-hour window. This exists so that one person does not appear as a stream of unrelated strangers; it is bounded deliberately, because an unbounded version would eventually merge everyone sharing an office or home connection into one. The cookie always takes precedence when it is present.

You can delete the kv_sid cookie at any time in your browser settings. Doing so ends the grouping immediately, and after the six-hour window nothing links a new visit to an earlier one.

This record is not shared, not sold, not used for advertising, and not used to build a profile of you. It is visible only to the operator, on a password-protected page.

Downloaded files

Files that have to be prepared on the server are written to temporary storage, streamed to your browser, and deleted automatically — by default within thirty minutes of finishing, whether or not you collected them. Smaller formats are relayed straight through and never touch the disk at all. No copy is retained, archived, or indexed.

How long records are kept

Download records are deleted thirty days after they are written. Full IP addresses are kept for seven days, after which the last part is discarded — 203.0.113.44 becomes 203.0.113.0 — so the entry can still show that a network was overusing the service without identifying a connection. The link between a session and the addresses it used is deleted entirely at the same point.

These deletions are carried out automatically, on a timer, not on request. Logs rotate at a fixed size and older files are overwritten.

Third-party analytics

This instance runs Google Analytics 4. Unlike everything above, it is a third party: it sets its own cookies, and it sends Google the pages you visit, an approximate location derived from your IP address, and details of your device and browser. Google processes that on the operator's behalf and under its own terms.

What it does not see is the link you paste. Analytics records the page address, and the address of a tool page is the tool page — fetching a link does not put that link into it. Earlier versions of this site did append the pasted URL to the address, which meant Google saw it; that no longer happens, and the parameter is stripped from any older link that still carries one.

To opt out, block googletagmanager.com — any content blocker does this, and the downloader works normally without it. Nothing here is required for the site to function.

This instance also runs Microsoft Clarity, and it is worth saying plainly what that is, because it is not a traffic counter. Clarity records your session: where you move the pointer, what you click, how far you scroll, and where you hesitate or click repeatedly in frustration. Those recordings are replayed as video by the operator and aggregated into heatmaps. It sets its own cookies and the data is processed by Microsoft under its own terms.

What it does not capture: Clarity masks text input by default, so what you type is not recorded — and since the address bar no longer carries the link you pasted, it does not reach a recording that way either.

To opt out, block clarity.ms. As with the above, the downloader works normally without it — nothing here is needed for the site to function.

In the UK, EU and several other jurisdictions, cookies like these require your consent before they load — and session recording is held to a higher standard than counting, not a lower one. This software ships no consent banner, so an operator serving those regions is responsible for placing one in front of it.

Who it is shared with

Nobody, beyond anything named above. Nothing is sold, rented, or passed to data brokers.

Two unavoidable exceptions: fetching media means the server contacts the platform the link points to — YouTube or Instagram — which will see the server's address, not yours; and if the operator has placed this site behind a CDN or hosting provider, that provider processes traffic on the operator's behalf.

Your rights

Depending on where you live, you may have the right to ask what is held about you, to have it deleted, or to object to it being held at all. There are no accounts, so the only handle on your records is the kv_sid cookie in your browser: send its value to the operator and the matching entries can be found and deleted. Deleting the cookie yourself stops any further grouping straight away, and every record is deleted on its own within thirty days regardless. Contact the operator of this instance with any request.

Changes

Material changes will be reflected in the date at the top of this page. Continuing to use the service after a change means accepting the revised policy.

Contact

This is a self-hosted application, so the operator of this particular instance is your point of contact — they are responsible for the data described above. Reach them at info@keavix.com. See the terms of service for the rest.