Privacy and telemetry

Effective: October 14, 2026

Purpose separation

Google Tag Manager is used only for approved marketing page and event counters. Direct HAProxy and Cloudflare logs provide separately governed request and security counters.

Security evidence

Restricted logs may contain source IP, request metadata, and JA4/JA4H availability for abuse and DDoS investigation. Raw records are not placed in the Google data layer, sold, or joined to subscriber identities.

Consent and retention

Optional marketing tags remain disabled until the approved consent policy is active. Retention and deletion periods are documented before new telemetry persistence is enabled.

Contact

Privacy requests: privacy@kmns.io.