Privacy at KrushIt

Your file content

KrushIt Desktop performs supported optimization and conversion locally on your computer. The public Growth Foundation does not provide a file-upload endpoint and does not accept file content, filenames, document text, media, transcripts or embedded metadata.

Website and acquisition data

If you allow measurement, KrushIt stores opaque visitor, session and acquisition identifiers; landing path; first and current non-direct attribution; referrer; UTM parameters; Google click identifiers when present; a small allowlisted event name; event time; and bounded scalar metadata. Raw IP addresses and user-agent strings are not persisted by the application.

First touch is preserved. A later direct visit does not overwrite original acquisition provenance. Unavailable values remain unavailable.

Referral data

Generating a referral link is an explicit product action. KrushIt then stores an opaque referral code, referral clicks, acquisition lineage, qualification status, and server-authoritative reward-ledger state. Clicks do not earn rewards. Qualification requires a verified Successful Krush. Exact reward economics are not approved.

Cookies and local storage

With measurement consent, secure HttpOnly first-party cookies preserve opaque visitor and session identities. A referral click uses a secure HttpOnly first-party cookie so the referral can be attributed. The browser stores only your measurement preference in local storage. No third-party analytics script is deployed.

Purpose and retention

Data is used to understand which public entry points lead toward genuine product outcomes, maintain referral integrity, diagnose bounded ingestion failures, and prepare privacy-bounded Learning Plane inputs. Current policy retains ordinary events for 180 days, attribution identities for 365 days, short-lived handoff records for seven days, and durable referral-ledger evidence for up to seven years where needed for integrity and audit. These periods may be shortened as operational evidence improves.

Web-to-Desktop handoff

The server can issue an opaque, short-lived, single-use attribution token. It carries no credentials, raw personal data, or execution authority. The current public Desktop producer is not released, so end-to-end handoff is not yet active.

Your choices

You may decline measurement and still read the site. Referral identity is created only when you explicitly request a link or arrive through one. You can withdraw this browser’s measurement/referral identifiers below. Withdrawal stops future browser linkage; previously retained ledger or integrity records are not automatically erased.

Contact and operator identity

A dedicated public privacy contact and final legal-operator identity have not yet been canonically designated. KrushIt will not invent them. This is a founder/legal decision required before broader commercial distribution. Until then, do not submit sensitive personal information through the public site; no contact form exists.