Privacy and cookies
This page explains what data kiosk.ad handles, why, and what you can do about it.
Who is responsible
The data controller is Kiosk.ad, Traversa Dragone 2, Atrani, Italy. Questions about your data: hello@kiosk.ad.
What we collect, and why
- Your account
- Name, email address, password (stored only as a hash), language and time zone — to run your account and sign you in. Basis: the contract with you.
- What you put on your screens
- The files you upload, the channels and playlists you create, the names of your devices and the screenshots they send — to provide the service. Basis: the contract with you.
- Billing
- Payments are taken by Stripe. We store the plan, the subscription status and Stripe’s identifiers, never a card number. Basis: the contract with you, and accounting law.
- Server logs
- IP address, browser and time of each request, kept for a short period to protect the service and to find faults. Basis: our legitimate interest in running a secure service.
- Sign-up protection
- Registration is guarded by Cloudflare Turnstile, which checks that a request comes from a person; Cloudflare processes the connection data for that check. Basis: legitimate interest.
- Confirmation and password-reset messages are sent through Twilio. Basis: the contract with you.
- Which home page you saw
- We test versions of the home page. If you sign up, your account keeps which version you saw, and when you first connected a screen and first paid — to learn which page explains the product best. We only ever look at totals. Basis: legitimate interest.
- Visit statistics
- Only with your consent — see Cookies below.
Cookies
These cookies are set without asking. None of them follows you to another site:
| admin_session | keeps you signed in to the panel | 30 days |
| lang | remembers the language you chose | 1 year |
| signup_pending | lets the confirmation link sign you in when you open it in the browser you signed up in; deleted once used | 7 days |
| cookie_consent | remembers your answer to the cookie banner | 12 months |
| landing_variant | shows you the same version of the home page each time you visit; it stores the version, not who you are | 90 days |
A connected screen holds its own credential cookie on the device host; it never reaches a visitor’s browser.
Visit statistics
We count visits to the landing, the sign-in pages and the panel with Google Analytics. The counters are written into the page only after you choose Accept in the cookie banner; until then they are not in the page at all. The service sets its own cookies (for Google Analytics, _ga and _ga_*, up to 2 years) and processes the data on our behalf; Google may transfer it to the United States under the EU–US Data Privacy Framework. Counters never run on your screens.
You have not answered yet, so counters are off. Your answer is kept for 12 months. Change it here at any time:
How long we keep it
Account data and content stay for as long as the account exists. Write to us to close the account and everything it holds is deleted; billing records are kept as long as accounting law requires. Server logs are kept for a short period and then deleted.
Your rights
You can ask what data we hold about you, have it corrected or deleted, restrict or object to its processing, receive a copy, and withdraw a consent at any time without affecting what was done before. Write to the address above. You can also complain to a data-protection authority — in Italy, the Garante per la protezione dei dati personali.
Changes
When this page changes, the date at the top changes with it.