KOSA Icons Privacy Policy

1. Who We Are

KOSA Icons is an independent project by Katarina Ilic, operating as KOSA Design, based in Belgrade, Serbia. We run the website kosaicons.com and the related icon packages, and we are responsible for the personal data described in this policy. You can reach us at [email protected] for anything about your privacy.

2. What We Collect

Website analytics. To understand how the library is used, we use Umami Cloud, a privacy-focused analytics service that does not use cookies. Umami records which pages are visited, the referring website, browser and operating system, device type, screen size, language and approximate country. We also record actions such as copying or downloading an icon, including the icon's name and the format (for example SVG, PNG or React code).

Umami uses your IP address and browser information to calculate a pseudonymous visitor identifier and your approximate location, but it does not store your IP address in its analytics records. We do not use this information to identify you personally, to build profiles or to follow you across other websites. Umami may also process technical and security data for its own operation, as described in its privacy policy.

Hosting and security logs. Our hosting provider, Cloudflare, processes technical request data, such as your IP address, browser type and the page requested, in order to deliver the website and keep it secure. Cloudflare may keep certain operational and security information under its own policies.

Scripts and fonts. The fonts and code that make the website work are served from our own domain. The only external script is the Umami analytics script, which is loaded from Umami's servers.

Your browser's storage. If you switch between light and dark mode, we save that choice in your browser's local storage so that the site remembers it. It stays on your device and is not sent to us.

Email. If you write to us, we receive your email address and the content of your message, and use them only to reply and to keep a record of the conversation. Mail sent to [email protected] is forwarded by Cloudflare to our mailbox at Gmail (Google).

Icon settings. The size, color and line settings you choose in the library, and the icons you copy or download, are processed in your browser. We do not receive them, apart from the analytics events described above.

3. Why We Use Data

We process data to operate and secure the website, understand how visitors use KOSA Icons, improve the library, and respond to messages. Where applicable, we rely on our legitimate interests in maintaining website security, providing and improving our free service, and responding to general inquiries. We also process information where necessary to comply with legal obligations. We consider the nature of the data and the impact on visitors when relying on legitimate interests.

4. Cookies

KOSA Icons does not set advertising or analytics cookies, and Umami works without cookies. Our hosting provider, Cloudflare, may use strictly necessary security cookies in some cases, for example to protect the website against bots, depending on the features enabled. These are not used by us for advertising or tracking. If this changes, we will update this policy and ask for your consent where the law requires it.

5. Who We Share Data With

We do not sell or rent your data. We share it only with service providers that help us run the website, acting on our behalf: Umami (analytics), Cloudflare (hosting, delivery and email forwarding) and Google (our email mailbox). We may also disclose information if the law requires it.

6. International Transfers

Our providers may process data outside Serbia and the European Economic Area, including in the United States. Umami stores analytics data in the European Union, but some of its processing can take place elsewhere. Where required, our providers rely on transfer safeguards recognized by data protection law; the specific mechanism depends on the provider and the transfer.

7. How Long We Keep Data

Under our current Umami Cloud plan, analytics data is retained for up to six months, subject to the provider's applicable retention and backup policies. Aggregate totals that do not identify anyone, such as the number of downloads we choose to publish, may be kept longer. Emails are kept for up to 24 months after our last message, and then deleted. Cloudflare keeps technical and security logs according to its own policies.

8. Your Rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to receive a copy of it, to object to or restrict its use, and to withdraw consent where we rely on it. Because our analytics use pseudonymous identifiers and do not provide us with information that directly identifies individual visitors, we may be unable to associate analytics records with a particular person; for anything involving your email messages, write to [email protected] and we will help. You may also complain to your local data protection authority. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection.

9. Children

KOSA Icons is not aimed at children, and we do not knowingly collect personal data from them.

10. Third-Party Links

The website links to other services, such as npm, GitHub and PayPal. They have their own privacy policies, and we are not responsible for how they handle your data.

11. Security

We use reasonable measures to protect the website and the data we handle, but no system on the internet is completely secure.

12. Changes to This Policy

We may update this policy from time to time. The latest version is always on this page, with its effective date at the top.

13. Contact

Questions about this policy? Write to [email protected].