iki Privacy

The short version

Public iki profile pages — on dontdoit.club/iki and on profile owners' custom domains — set no cookies, run no tracking scripts, and store nothing on your device. That's why there's no cookie banner: under GDPR/ePrivacy and Quebec's Law 25, consent is required for technologies that store or access information on your device or that identify, locate, or profile you. iki does none of that on public pages, so there's nothing to consent to.

What we measure

We count how profile pages perform so owners can see what works. The counters are anonymous and aggregate:

Page views — which profile page was viewed (/, /cv, a post), the referring site's domain, UTM campaign tags, and country (provided by our hosting provider, Cloudflare).
Interactions — clicks on profile blocks (which block type, the destination domain — never the full URL with query strings) and clicks on the "Powered by iki" badge.
Unique visitors — estimated with a rotating anonymous identifier: a SHA-256 hash of the visitor's IP address, user agent, a salt, and the current date. The raw IP and user agent are never stored, and the hash changes every day — so the same visitor counts once per day but can never be followed across days, sites, or profiles.

This is legitimate-interest audience measurement: it answers "312 views → 41 clicks → 6 contacts" for the profile owner, and nothing about who you are.

What we don't do on iki pages

No cookies, localStorage, or other device storage for tracking.
No fingerprinting, cross-site, or cross-day tracking.
No third-party analytics or advertising scripts.
No sale or sharing of personal information.
No session recordings, heatmaps, or behavioral profiling.

If a profile owner connects their own analytics in the future (e.g. Google Analytics or Tag Manager), that changes the picture: those tools are loaded only after consent, and a consent banner will appear on that profile's pages. The rest of iki stays cookieless.

If you own an iki profile

Your profile content is public by choice — anything you publish can be seen by anyone with the link. Your account data (email, settings) is private and is never shown on your page. Stats about your page are visible only to you.

You can set your profile to unlisted or private, edit it, or delete it at any time from your settings. Deleting a profile removes its content and its stats.

Where data lives

iki is operated by Dontdoit Inc. (Montréal, Canada). Data is processed by two providers: Cloudflare (hosting and edge security, which sees request metadata like any host does) and Neon (our database, where stats and profile content are stored). Signed-in app analytics additionally go to PostHog; public iki visitors are never sent there.

Your rights

Under GDPR, Quebec's Law 25, and similar laws, you can request access, correction, or deletion of your personal information, and object to or restrict its processing. Because iki's public stats can't be tied back to a person, there is generally nothing individual to erase — but ask anyway if you have concerns. Reach us via the contact page.

Last updated: September 25, 2026. If this policy changes, the date changes — and if we ever need consent on iki pages, we'll ask before collecting.