Website Privacy Policy
Last updated: 4 September 2026
This document covers the karadia.app website (the “Site”) only. The KARADIA mobile app has its own, far broader policy - if you are looking for information about training data, health data, photos or AI features, see the app privacy policy.
Controller: The Site is operated by Largiter (“we”, “us”, “our”). For privacy questions, contact us at largiter.dev@gmail.com.
1. Data we collect
The Site has no sign-in, no user accounts and no forms. We collect nothing that you would enter yourself.
We collect visit statistics only, through two analytics tools: Google Analytics 4 and PostHog (EU-hosted cloud):
- the number of page views and which pages are visited,
- where the visit came from (search, a link on another site, direct),
- approximate location at country or city level,
- device, browser and operating system type,
- browser language,
- interactions with page elements - clicks on links and buttons, cursor movement and scrolling (PostHog’s autocapture and heatmaps). Events, coordinates and element labels are recorded, not anything you type. We record no sessions and no screen contents,
- basic page performance metrics: largest contentful paint, layout stability and responsiveness to the first interaction.
Google Analytics 4 does not store IP addresses - they are used only to derive the approximate location and then discarded. We do not combine these statistics with any other data and make no attempt to identify individual visitors from them.
2. Cookies
Cookies are small text files that a website you visit stores on your device. They are either “session” cookies, deleted when you close the browser, or “persistent” cookies, kept for the period set in the file or until you delete them.
The Site sets no cookies of its own. The only cookies come from the analytics tools:
| Cookie | Provider | Type | Retention | Purpose |
|---|---|---|---|---|
_ga |
persistent | 2 years | distinguishing visitors | |
_ga_<ID> |
persistent | 2 years | keeping measurement session state | |
ph_<key>_posthog |
PostHog | persistent | 1 year | distinguishing visitors and sessions |
PostHog also keeps the same identifier in the browser’s local storage (localStorage) alongside
the cookie.
In the categories cookies are commonly divided into, the Site uses performance cookies (collecting information about how the Site is used) and integration cookies (tied to third-party tools) only. It uses no strictly necessary cookies (the Site has no sign-in or authorisation), no security, no functional (the language follows the URL, not a cookie) and no advertising or profiling cookies.
The Site embeds no third-party content - videos, maps, social plugins - that could set cookies of its own.
3. Server logs
Separately from the analytics tools, and as every website does, our hosting provider records the HTTP requests reaching the server. These logs contain:
- the IP address the request came from,
- when the request arrived and the response was sent,
- the URL requested and the previously visited page (referrer),
- browser and operating system information,
- error details, if any occurred.
We use the logs only to operate the Site, diagnose failures and maintain security - in particular to detect abuse and attacks. We do not combine them with analytics data and do not use them for profiling. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).
4. Purpose and legal basis
We use these statistics for one purpose: to know which content is read and where visitors come from, and to develop the Site accordingly.
The legal basis is our legitimate interest in analysing traffic and improving the Site (Article 6(1)(f) GDPR). We do not use this data for advertising or profiling.
5. Recipients and transfers outside the EEA
The statistics are processed on our behalf by two providers:
- Google Ireland Limited and Google LLC - as described in Google’s privacy policy. Google LLC participates in the EU-US Data Privacy Framework, which is the basis for transfers to the United States.
- PostHog - on their EU-hosted instance, as described in PostHog’s privacy policy.
We share Site data with no one other than these two.
6. Retention
Cookies expire after the periods listed in the table in section 2 - you can also delete them sooner yourself. Aggregated statistics are kept for no longer than 14 months in Google Analytics, and per the retention setting on our PostHog project.
7. Data security
Every connection to the Site is encrypted over HTTPS - traffic between your browser and the server is confidential. The Site is static: it runs no user database and stores no passwords or contact details, so there is no store on our side that could leak.
Analytics data is held in our providers’ infrastructure, described in section 5, and is accessible only to authorised people on our side.
8. Your rights
For data processed on the Site you have the right to access it, to have it corrected, erased or its processing restricted, and to object to processing based on legitimate interest. Send requests to largiter.dev@gmail.com.
You also have the right to lodge a complaint with a supervisory authority - in Poland this is the President of the Personal Data Protection Office (UODO).
9. Managing cookies
You can block or delete cookies in your browser settings - every browser can reject third-party cookies or all cookies. Disabling cookies does not limit your use of the Site in any way, as none of its features depend on them.
You can also install Google’s Analytics opt-out add-on, which disables Google’s measurement across every site you visit.
10. Changes and contact
We may update this document from time to time. The “Last updated” date above shows when we last changed it.
If you have any questions, write to us at largiter.dev@gmail.com.