What Kagoj does with your data.

• Your account. When you sign in with Google, the only sign-in method, we receive your name, email address, Google account identifier and profile picture.
• Content you create. The documents you paste or upload. Text (Markdown, rich text, HTML, code, plain text) is stored in our database; files (PDFs, images, video) are stored on Cloudflare R2. We also keep the title and the rendered version.
• Activity. How many times a document has been opened, a log of actions taken by any AI agent keys you issue (what they did and when), the IP address of those requests for that audit trail, and timestamps.
• Short link clicks. When someone opens a shortened link, we add one to a daily counter for that link, grouped by the referring site’s domain and a device category (desktop, phone, tablet or link preview). We do notstore the visitor’s IP address, their location or country, the full referring address, the browser’s user agent, or any cookie. These counters are kept for two years and are visible only to the person who made the link.
• Files sent to you. When somebody sends you a file through a request link, we keep the file, the name they typed for themselves (which is optional and never verified), and the time it arrived. We do not ask them for an email address, set a cookie on them, or keep their IP beyond the short-lived rate-limit counter that every write to Kagoj passes through. They cannot see anything on your shelf, including the file they have just sent.
• Keys. Agent and extension API keys are stored only as a hash. The plaintext is shown once, at creation, and never stored.
• Anonymous use. You can use Kagoj without an account. Anonymous content has no owner and is deleted automatically after 24 hours. Shortened links are the exception: they are kept until someone deletes them.

The Kagoj browser extension places a floating launcher on the pages you visit, and acts only when you ask it to: when you click a tool in it, click the toolbar icon, use a keyboard shortcut, or use its right-click menu. It can then record your screen, take a screenshot (a selected area, the full page, a single element, or the visible tab), pick a colour from the screen, or take the current page’s readable text, title, URL and any text you have selected, and send what you captured to your Kagoj account.

It installs with access to kagoj.app only. Captures you start from the toolbar, a shortcut, or the right-click menu use access to just that one tab, at that moment. The floating launcher’s screenshots need to read the page you’re on, so it asks for capture access the first time you use one. It is an optionalpermission you can turn on and off from the extension at any time.

If you turn on the microphone or webcam for a recording, they are used only while that recording is running, streamed into the recording itself, and never stored or sent anywhere but your own upload. The extension does not track your browsing or run in the background. Signing in stores a scoped access token in your browser (via chrome.storage). That token can create and read your documents; it can never change who they are shared with, or delete them. Remove it with “Sign out” in the extension, or revoke it from Agent keys in Kagoj.

To provide the service: store and render your documents, enforce who can see them, show you your shelf, and let AI agents you authorise act on your behalf. We do not sell your data, and we do not use it for advertising or cross-site tracking.

We rely on a small number of processors to run the service:

• Google. Sign-in.
• Cloudflare R2. Storage for uploaded PDFs, images and video.
• Hetzner. Server and database hosting, in the EU.

Beyond these, your content is shared with other people only as you direct, through the visibility and access settings on each document (public, unlisted, your team, or specific people).

• Anonymous content. 24 hours, then deleted from the database and file storage.
• Trashed content. Kept 30 days, then permanently purged.
• Signed-in content. Kept until you delete it, or delete your account.

Our database and servers are hosted in the EU (Hetzner). Files are stored on Cloudflare R2.

• Export. Download your account and every document you own as one JSON file, from Account settings.
• Delete. Delete your account, which permanently removes every document you own, including files.
• Per link. Set each link’s visibility, add a passphrase, choose when it opens and closes, or cap how many times it can be opened.
• Revoke. Revoke any agent or extension key at any time.

User-submitted HTML is sanitised before it is stored and served from an isolated origin, so it cannot reach your session. Private files are served only through short-lived signed links, after an access check. Keys are hashed, and the session cookie is host-only.

The word counter, the diff checker and the QR generator at /tools run entirely in your browser. Nothing you type into any of them is sent to us, stored, or logged. The only exceptions are the buttons that say so: the diff checker’s “keep it as a page” and the counter’s “keep the breakdown as a page”, each of which does exactly what it says and nothing at all until you press it.

A single cookie keeps you signed in; your light/dark preference is stored locally in your browser. There are no advertising or cross-site tracking cookies.

Kagoj is not directed at children under 13, and we do not knowingly collect their data.

We may update this policy. The date at the top reflects the current version; material changes will be noted there.

Questions about this policy or your data? Email [email protected], or reach Shadman Taqi.