We built DenaliKit with privacy at its core. Here's exactly what we collect, what we don't, and why.
DenaliKit ("DenaliKit", "we", "us", or "our") operates the website at denalikit.com and provides browser-based PDF and image tools. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
For questions about this policy, please contact us at hello@denalikit.com.
This means:
When you create a DenaliKit account, we collect:
| Data | Why we collect it | Retention |
|---|---|---|
| Email address | Account login, transactional emails, support | Until account deletion |
| Password (hashed) | Account authentication | Until account deletion |
| Account creation date | Fraud prevention, support | Until account deletion |
| Premium status | Feature access control | Until account deletion |
We never store your password in plain text. Passwords are hashed using a one-way cryptographic function before storage.
Payments are processed by Stripe. We do not store your credit card number, CVV, or full billing address on our servers. When you complete a purchase, Stripe provides us with:
| Data | Why we collect it | Retention |
|---|---|---|
| Stripe Customer ID | Link your account to your Stripe record for subscription management | Until account deletion |
| Stripe Subscription ID | Track active subscriptions and renewals | Until subscription ends + 7 years (tax records) |
| Purchase type (monthly/lifetime) | Determine which features to unlock | Until account deletion |
| Transaction date and amount | Receipts, refund processing, tax compliance | 7 years (legal requirement) |
| Last 4 digits of card + card type | Display in account for reference | Until account deletion |
Stripe's handling of your full payment details is governed by Stripe's Privacy Policy. Stripe is PCI DSS Level 1 certified.
We collect anonymised usage data to understand how the Service is used and to improve it:
| Data | Why we collect it | Retention |
|---|---|---|
| Pages visited | Understand which features are used | 26 months |
| Tool usage counts (e.g. "compress used 3 times") | Prioritise product improvements | 26 months |
| Browser type and OS | Ensure compatibility | 26 months |
| Country (from IP, not stored) | Understand geographic reach | Not stored |
| Error events | Identify and fix bugs | 90 days |
This data is aggregated and does not include any file content. We do not track individual user behaviour across sessions beyond what is necessary to maintain your login state.
If you contact us by email, we retain the correspondence to respond to your enquiry and for quality assurance. We do not add you to any marketing list without your explicit consent.
We may send you the following transactional emails:
You may opt out of non-essential communications at any time by contacting hello@denalikit.com.
DenaliKit uses minimal cookies and browser storage:
| Name | Type | Purpose | Expiry |
|---|---|---|---|
| auth_token | localStorage | Keep you logged in between sessions | 30 days or logout |
| userEmail | localStorage | Display your email in the account bar | 30 days or logout |
| premiumExpiry | localStorage | Cache your Premium status to avoid repeated server checks | Refreshed on each login |
| Analytics (anonymised) | Cookie | Aggregate usage statistics — no personal data | 26 months |
We do not use advertising cookies, cross-site tracking cookies, or third-party retargeting pixels. You can clear localStorage and cookies at any time through your browser settings — this will log you out.
We use the information we collect only for the following purposes:
We do not use your data for advertising, profiling, or any purpose beyond operating and improving the Service.
We do not sell, rent, or trade your personal information. We share data only with the following categories of service providers, and only to the extent necessary to operate the Service:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, payment details |
| Web hosting provider | Server infrastructure | Account data (encrypted at rest) |
| Analytics provider | Anonymised usage statistics | No personal data |
| Email provider | Transactional emails | Email address, email content |
All third-party providers are contractually required to process your data only for the purposes we specify and in compliance with applicable privacy laws.
We may also disclose your information if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of DenaliKit, our users, or the public.
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
We implement industry-standard security measures to protect your personal data:
No system is completely secure. In the event of a data breach affecting your personal data, we will notify you and relevant authorities as required by applicable law, within 72 hours of becoming aware of the breach.
Depending on your location, you may have the following rights regarding your personal data. We honour these rights for all users regardless of jurisdiction.
Request a copy of the personal data we hold about you.
Request correction of any inaccurate or incomplete data.
Request deletion of your account and associated personal data (subject to legal retention requirements).
Request your personal data in a structured, machine-readable format.
Object to processing of your data for any purpose beyond providing the Service.
Request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, email hello@denalikit.com with your request. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.
For EU/EEA users (GDPR): You have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with applicable data protection law.
For California users (CCPA): You have the right to know what personal information we collect, to opt out of the sale of personal information (we do not sell personal information), and to non-discrimination for exercising your rights.
The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us at hello@denalikit.com and we will delete the information promptly.
DenaliKit is based in the United States. If you are accessing the Service from outside the United States, your personal data will be transferred to and processed in the United States, where data protection laws may differ from those in your country.
For users in the EU/EEA and UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal mechanism for transferring personal data to the United States.
The Service may contain links to third-party websites (for example, links in our blog posts or documentation). This Privacy Policy applies only to DenaliKit. We have no control over and assume no responsibility for the privacy practices of any third-party sites you visit.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify registered users by email at least 14 days before the changes take effect.
Your continued use of the Service after any changes constitutes your acceptance of the updated policy. The current version is always available at denalikit.com/privacy.
DenaliKit is the data controller for the personal data described in this policy.
For any privacy-related questions, requests, or complaints:
We aim to respond to all privacy requests within 30 days.