Privacy policy
We collect as little as possible. There are no accounts, no logins and no newsletters that require your data. The tools on this site run entirely in your browser — nothing you type into the token counter or cost calculator is transmitted to us or anyone else.
Effective
Who we are
Kimi K4 AI publishes independent reference material about the Moonshot AI Kimi model family at kimik4ai.com. In this policy, “we” and “us” mean the operators of this website.
We are not affiliated with, endorsed by, or connected to Moonshot AI. This policy covers this website only. It does not cover Moonshot’s own services, which have their own privacy policy.
What we collect
Information you give us
Only what you choose to send. If you email us or use the contact form, we receive your email address and whatever you write in your message. We do not require a name, and there is no account to create.
Information collected automatically
Like any website, our host records standard server log data when you request a page: your IP address, browser type and version, operating system, referring page, and the date and time of the request. This is generated by the hosting infrastructure, not by us, and is used to serve the site and to detect abuse.
Information we do not collect
We want to be specific here, because these are the things people reasonably worry about:
- Nothing you type into our tools. The token counter, cost calculator, context window visualizer and model comparison all run entirely in your browser. Text you paste is never transmitted. You can verify this by opening your browser’s network tab while typing.
- No accounts, passwords or payment details. We do not offer any of these.
- No selling of personal data, to anyone, under any circumstances.
Why we process it
Under the UK and EU General Data Protection Regulation we must tell you our lawful basis for each purpose:
- Serving the website and preventing abuse — legitimate interests. We cannot deliver a page without processing your IP address.
- Replying to your message — legitimate interests, or performance of a request you made. If you did not contact us, this does not apply to you.
- Analytics and advertising — consent. These load only after you accept optional cookies, and never before.
Cookies and similar technologies
We use two categories, and they behave differently:
- Essential storage. Your theme preference (light or dark) and your cookie choice are stored in your browser’s local storage. These never leave your device and are not used to identify or track you.
- Optional cookies. Analytics cookies load only if you press “Accept all”. Choose “Essential only” and they are never set.
You can change your decision at any time from our cookie policy, or clear it by deleting this site’s data in your browser settings. Blocking cookies entirely in your browser will not break the site.
Advertising
We do not currently display advertising. If that changes we will update this policy before any ad script loads, and advertising cookies will remain behind the same consent banner as analytics. We are disclosing this in advance rather than adding it quietly later.
Who else receives data
These are the third parties that can receive data about your visit. Services marked not in use are listed so you can see the full picture rather than only what is switched on today.
| Service | Purpose | Data | Status |
|---|---|---|---|
| Cloudflare | Hosting and content delivery | IP address, request headers, timestamps — processed to serve the site and mitigate abuse | In use |
| Google Analytics 4 | Aggregate traffic measurement | Pseudonymous usage events, approximate location, device and browser type | Not in use |
| Google AdSense | Advertising | Cookies and identifiers used to select and measure ads, including the DoubleClick DART cookie | Not in use |
Links to other websites are not covered by this policy. Once you follow a link to Moonshot AI, Hugging Face, GitHub or anywhere else, that site’s privacy policy governs what happens next. We suggest reading it.
Your rights under GDPR
If you are in the UK or the European Economic Area, you have the right to:
- Access the personal data we hold about you
- Rectify anything inaccurate
- Erase your data (“the right to be forgotten”)
- Restrict how we process it
- Object to processing based on legitimate interests
- Port your data to another service in a machine-readable format
- Withdraw consent at any time, without affecting prior processing
- Complain to your national data protection authority
In practice we hold almost nothing about you. Unless you have emailed us, there is usually no personal data to access or erase beyond transient server logs. Email [email protected] and we will respond within 30 days, free of charge.
Your rights under CCPA and CPRA
If you are a California resident, you have the right to:
- Know what personal information is collected, used and disclosed
- Delete personal information we hold about you
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information
- Limit use of sensitive personal information
- Not be discriminated against for exercising any of these rights
We do not sell your personal information, and we never have. We do not share it for cross-context behavioural advertising beyond what the advertising cookies described above do, and those require your consent first.
To exercise any of these rights, email [email protected] with “CCPA request” in the subject line.
Children’s privacy
This site is aimed at developers and technical readers. It is not directed at children, and we do not knowingly collect personal information from anyone under 13 (or under 16 in the EEA and UK).
If you believe a child has provided us with personal information, email [email protected] and we will delete it promptly.
How long we keep data
- Server logs — retained by our host for a short period for security and abuse prevention, then deleted or aggregated.
- Email correspondence — kept only as long as needed to handle your enquiry and any reasonable follow-up, then deleted.
- Analytics data — retained according to the settings of the analytics provider, in pseudonymous aggregate form.
We do not keep personal data indefinitely, and we do not build profiles.
International transfers
This site is served from a global content delivery network, so the server that responds to you is likely the one physically closest to you. Our service providers may process data in countries outside your own, including the United States.
Where such transfers involve personal data of UK or EEA residents, our providers rely on recognised safeguards such as Standard Contractual Clauses or an adequacy decision. Each provider’s privacy policy, linked in the table above, sets out the mechanism it uses.
Security
The site is static, served over HTTPS with HSTS, a strict Content Security Policy, and standard security headers. There is no database of users to breach because there are no user accounts.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. Please do not send us sensitive personal information by email.
Changes to this policy
We will update this page when our practices change, and revise the effective date at the top. Material changes — such as introducing advertising or a new analytics provider — will be reflected here before the change takes effect, not after.
Continuing to use the site after a change means you accept the updated policy.
How to contact us
For any privacy question, data request or complaint, email [email protected], or use the contact page. We aim to reply within a few working days and will respond to formal data requests within 30 days.
Questions about this page? Email [email protected]. We are an independent publisher, not a law firm — nothing here is legal advice.