Legal
Privacy Policy
Last updated: 16 July 2026. This policy covers the websites kovarra.xyz, demo.kovarra.xyz and pay.kovarra.xyz ("the sites"), operated by Kovarra (online trading name — "we"). Contact for all privacy matters: contact@kovarra.xyz.
The short version
- We collect almost nothing: an email address if you join the waitlist, request partner terms, or buy a license — and the purchase details needed to deliver and account for your order.
- No analytics, no tracking pixels, no advertising cookies, no third-party trackers on any of the sites.
- We never sell or share your data with anyone, except where the law requires it.
What we collect, and why
| Data | When | Purpose & legal basis (GDPR) |
|---|---|---|
| Email address | Waitlist or partner form | To send the update you asked for — consent (Art. 6(1)(a)). Withdraw any time by replying "unsubscribe". |
| Email, optional company name, amount, payment transaction hash | License purchase | To deliver your license and keep required sales records — contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)). |
| Standard technical logs (IP address, request time) | Any visit | Security, rate-limiting and abuse prevention — legitimate interest (Art. 6(1)(f)). Rotated automatically. |
Payments are made in cryptocurrency directly on public blockchains; we never receive card numbers or bank details, and blockchain transactions are public by their nature.
Cookies
The landing site (kovarra.xyz) sets no cookies at all — which is why you see no cookie banner. The demo and pay sites set a single strictly-necessary session cookie only when an administrator signs in to a dashboard. No consent banner is required for strictly-necessary cookies.
Where your data lives & how long
Data is stored on our own server (no third-party analytics or CRM services). Waitlist emails are kept until you unsubscribe or the list is retired. Purchase records are kept as long as required for accounting and license verification. Technical logs rotate automatically within days.
Your rights (GDPR / UK GDPR)
You may request: access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interest. Email contact@kovarra.xyz from the address concerned and we will act within 30 days. You also have the right to lodge a complaint with your local data protection authority.
A note on the software we sell
Kovarra (the product) is self-hosted: it runs on the buyer's own server and sends us no data — no telemetry, no phone-home. For payments processed by a merchant running Kovarra, that merchant is the data controller, not us.
Changes
If this policy changes, the new version appears here with an updated date. We don't retroactively weaken protections for data already collected.