Ko-fi.tools is not affiliated with Ko-fi.com
This is the Privacy Policy for Ko-fi.tools, it describes how we use and process your data and what we do with it. Its important stuff that we take very seriously!
Privacy Policy
Effective date: May 5, 2025
1. Introduction
Welcome to Ko-fi Tools! We’re Catkin’s personal project (not a separate legal entity) at https://ko-fi.tools. We offer a free API and easy-to-use JavaScript widgets so Ko-fi creators (16+ only) can fetch their own public Ko-fi profile data. Please note we are not affiliated with Ko-fi.com or Ko-fi Labs Limited.
2. Who We Are
This website is a personal project developed by me, Catkin, to provide users with the ability to embed parts of their Ko-fi pages into their own websites. There is no registered company behind this project, but I am based in the UK and I comply with GDPR regulations. I strongly believe in the importance of user privacy and strong web security.
3. Data We Collect
3.1 Public Ko-fi Profile Data
• Shop items, commission offerings, top supporters, gallery images, feed posts—all publicly visible on your Ko-fi page.
3.2 API & Widget Requests
When you use our API or widgets, we automatically collect:
• Your site’s origin URL
• IP address
• User Agent (browser & OS version)
• ISP name & country location
• Your Ko-fi profile URL and extracted Ko-fi Page ID
3.3 Website Visits
When you browse our site, we collect:
• Referrer (site or search engine)
• IP address
• User Agent
• ISP name & country location
• Session duration
3.4 Contact Form Submissions
If you message us via our contact page, we collect:
• Name
• Email address
• Message content
3.5 Newsletter Sign-Ups
If you subscribe to our newsletter, we collect your email address. You can unsubscribe anytime via the link in each email.
4. Legal Bases (GDPR)
We process your data under these GDPR principles:
| Data Collected | Lawful Basis |
|---|---|
| Public Ko-fi profile data | Contract performance: fulfilling your request to fetch public data. |
| API & widget request logs | Legitimate interests: security, troubleshooting, analytics. |
| Website visit analytics | Legitimate interests: improving site performance and abuse detection. |
| Contact form submissions | Consent: you voluntarily provide name, email, message. |
| Newsletter sign-ups | Consent: for sending you updates and news. |
| Server log retention | Legal obligation/legitimate interests: record-keeping and security. |
5. Data Retention
6. Data Storage & Transfers
All data is stored on servers located in the UK, hosted solely by us. We do not transfer any data outside the EEA or UK.
7. Analytics & Cookies
We use a self-hosted analytics solution and do not set any cookies beyond essential session cookies required for site functionality.
8. Data Sharing
We don’t share personal data with any third-party partners. Upon request from Ko-fi Labs Limited, we may provide aggregated or anonymized analytics data only.
9. Security
We protect your data using HTTPS/TLS in transit, encrypted storage at rest, and secure database access controls. Only users aged 16+ (per Ko-fi’s requirements) may use our service.
10. Your Rights under GDPR
Under Articles 15–22 of the GDPR, you have the right to:
To exercise any of these rights, please visit our contact page.
11. Contact & Supervisory Authority
If you have questions or wish to make a complaint, reach out via our contact page, or lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk.
12. Changes to this Policy
We may update this policy from time to time. Each version’s “Effective date” at the top shows when it was last revised. Continued use of our service after updates means you accept the changes.