This Privacy Policy explains which personal data is processed when you visit and use Kyajet and which information is stored in your browser.

Controller

Crazy Monkey Development
Wolfgang Neikes
Bilker Allee 64
40219 Düsseldorf, Germany
Email: info@thecrazymonkey.rocks
Owner: Wolfgang Neikes

Website delivery and server access

When you access the website, your browser transmits connection data required for technical operation to the web server. This may include, in particular, the IP address, time of access, requested resource, amount of data transferred, referrer, and browser and operating-system information. Where necessary, this data is processed to provide the website securely and reliably and to identify technical faults or abusive access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the online service. Log data is not used for advertising or profiling and is retained only for as long as necessary for operation, troubleshooting or security, or as required by law.

Technically necessary session

Kyajet uses a technically necessary PHP session for security and session functions. The session cookie is used exclusively for functions such as CSRF protection, form security, and internal session and authorization functions. It uses the security attributes Secure, HttpOnly and SameSite=Lax. Storage is necessary to provide functions explicitly requested by the user. Where Section 25 TDDDG applies, storage is based on Section 25(2)(2) TDDDG; personal data is processed on the basis of Art. 6(1)(f) GDPR.

Privacy settings and consent management

Kyajet stores your privacy choice locally in your browser under the key kyajet.consent.v1. The selected setting, consent version and time of the last change are stored. This storage is necessary so that your choice can be respected on subsequent page views. You can change your choice at any time via the “Privacy settings” link in the footer.

We obtain your consent in advance for browser storage that is not strictly necessary. The legal basis for accessing or storing information on your device is Section 25(1) TDDDG; where personal data is processed, Art. 6(1)(a) GDPR applies. Consent can be withdrawn at any time with effect for the future.

Optional local convenience storage

If you consent to the “Preferences” category, Kyajet can persist data exclusively in your browser’s local storage (localStorage). This includes in particular:

• setup and application state
• saved setups and setup history
• assistant and test history
• environment, display and operating preferences
• a persistent presence identifier

The setup, history and display information listed above generally remains on your device and is not transmitted to Kyajet merely because it is stored locally. The presence function is an exception: to display the number of currently active browsers, a randomly generated identifier is transmitted to the Kyajet server. On the server, only a SHA-256 hash of this identifier and the last activity time are stored; IP address, user agent, language and setup data are not stored in the presence store. Presence entries are removed after no more than 24 hours. Without consent, the presence identifier remains only in working memory for the current page; with consent, it may be stored locally for up to 24 hours. All other optional storage access is technically blocked without consent. If consent is refused or withdrawn, Kyajet removes known optional Kyajet storage entries. You can also delete local browser data at any time via your browser settings.

Contact form

If you use the contact form, we process the information you enter – name, email address, subject and message – solely to handle and respond to your request. To protect against automated abuse, technical values for CSRF protection, form timing, honeypot and link-delay mechanisms are also processed. The message is sent by email to the recipients configured for Kyajet. The legal basis is Art. 6(1)(b) GDPR where your request relates to entering into or performing a contract; otherwise Art. 6(1)(f) GDPR based on our legitimate interest in handling enquiries and protecting the form against abuse. The data is deleted once the enquiry has been fully handled and no statutory retention obligations prevent deletion.

External services and tracking

Kyajet currently does not use advertising, audience-measurement or tracking platforms. No external CDN resources are required for the basic presentation of the website. Vimeo, YouTube, Google Maps, Facebook, X/Twitter or Instagram content is not embedded automatically as third-party content. External websites are opened only when you actively select a corresponding external link.

Security

We use appropriate technical and organizational measures to protect processed data. These include, in particular, HTTPS, secure session settings, CSRF protection, security headers and measures against automated abuse. The legal basis for security-related processing is Art. 6(1)(f) GDPR.

Your rights

Subject to the statutory requirements, you have in particular the rights of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). You may withdraw consent at any time with effect for the future in accordance with Art. 7(3) GDPR. You also have the right to lodge a complaint with a data protection supervisory authority under Art. 77 GDPR.

Changes to this Privacy Policy

We update this Privacy Policy when technical processing or the legal framework changes. Last updated: October 2026.