Privacy policy

Pre-launch version · Updated 29 October 2026

Who we are

Kitebox Studio is operated by Kai Xing, an individual based in China. Kitebox Studio is a trading name, not a registered company. For privacy questions, contact support@kiteboxstudio.com.

What this preview does

You can browse original wallpaper previews and download three free pairs without an account. This website does not collect payment details, accept chat uploads or send your files to an AI service. A limited Group Chat Awards Beta reads selected chat exports only inside the browser. Its files, file names, messages and generated results are not uploaded. The Beta loads no external analytics, including when analytics was allowed on another page; its in-page privacy notice explains hosting requests and voluntary sharing.

Analytics and browser storage

Optional Cloudflare Web Analytics loads only after you choose Allow analytics. Page-view measurement is currently configured on kiteboxstudio.pages.dev only; it is not yet active on kiteboxstudio.com. Optional action counts are available on both domains after permission. It records the page URL/path, referring URL when available, visit/page-view counts, country/region, browser/device categories and performance measurements such as load time and Core Web Vitals. Its script generates a random identifier for each page load, not a persistent visitor profile. Cloudflare states that the beacon uses no cookies, localStorage, sessionStorage or browser fingerprinting. It receives an IP address as part of the network connection, derives region information and discards that IP at its edge for this analytics service; this does not describe all hosting/security processing. The beacon may process data outside your country. We do not send chat content, downloaded artwork contents, payment details, names or emails to this analytics service. Browser blockers and missing referrers can affect counts. See Cloudflare’s collected-data description.

With the same explicit permission, Cloudflare Analytics Engine receives counts of pack-interest clicks, free-ZIP download requests and share-card download clicks. Each event contains only its action, a fixed artwork or format label, the consent version and a test/production flag. We do not include names, email addresses, IP addresses, full URLs, referral URLs, chat content or visitor identifiers in these event records. Hosting still processes network connection data to deliver the request. These are action counts, not unique people, completed downloads, public social posts, orders or payments.

Our own site stores only your analytics permission choice in localStorage under kitebox-visitor-analytics-consent-v2; this is separate from the cookie-free Cloudflare beacon. It is a preference, not a visitor identifier. Optional page and action measurements are based on your permission; declining does not restrict free downloads. Use Analytics choices (or Privacy settings on the product page) to change it. Turning analytics off reloads the page to remove the running measurement script; a final exit measurement from that page may already be in flight, and data already sent cannot be recalled. Clearing browser storage resets your choice to off. The three optional product events are sent only after permission; no earlier actions are replayed when you opt in.

Hosting and requests

This website is hosted on Cloudflare Pages. When accessed online, Cloudflare processes connection data such as IP address, requested page and browser headers to deliver and secure the site. See Cloudflare’s privacy policy for its practices. Local previews run on your computer instead. We do not sell your personal data or use it for advertising.

Contact and your choices

You can use free downloads without accepting optional analytics and clear local browser storage at any time. For privacy requests, email support@kiteboxstudio.com. We receive the details you choose to include and use them to handle your request. Our domain email is forwarded by Cloudflare Email Routing to the operator’s Gmail inbox. Avoid sending chat exports or other sensitive information. Applicable data-protection rights remain unaffected.

Purchase verification and recovery

The public Awards Beta does not require a purchase. Paid checkout is closed. The following describes the prepared paid service and isolated test environment, not an active sale.

If you choose to buy or restore paid Awards access, our server and Creem process the product and order references, payment/refund status, license and activation identifiers, and the order email you enter for recovery. Card details stay with the hosted payment provider. Chat files, file names, messages, member names, statistics and generated cards are never included in these requests. We do not create a user account.

In your browser, an encrypted, Secure, HttpOnly access cookie contains the product, order reference, license and activation details for up to 30 days. Website JavaScript cannot read it. It is necessary for the access you request, not optional analytics. The email and license input fields are cleared after submission and are not saved in localStorage or sessionStorage.

For a new device or cleared browser, Cloudflare KV holds a keyed, one-way lookup identifier and an encrypted checkout reference. It holds no order email, plaintext license or chat content. This small recovery reference is retained for as long as the purchased 2026-edition license is supported, rather than expiring your purchase with the 30-day browser cookie. A confirmed refund removes it when we process the refund or next verify the purchase. A reference cached briefly by the storage provider cannot authorize access: every protected request checks current Creem payment and license status. The recovery email is used in request memory and is not retained by this website.

We do not log payment request bodies, recovery emails, licenses, signatures, cookies or payment-provider portal links. Test diagnostics contain only an allowlisted endpoint name, HTTP status and test-mode label; local test evidence uses synthetic chats and non-sensitive test order references. Cloudflare may process ordinary connection and security data under its own policy; Creem retains financial and license records under its privacy and legal-retention rules. Those providers’ records are separate from our recovery lookup.

To request deletion or help recovering a purchase, contact support@kiteboxstudio.com with an order reference, not a license key or chat export. Deleting a necessary recovery record can prevent automatic restoration; we will explain that consequence before carrying out a request. Already downloaded files cannot be remotely erased. Optional analytics remain off until you consent, and refusing analytics does not prevent purchase recovery.