Privacy Policy
Last updated: August 2026
Qurtoo (qurtoo.com) is operated by Kief Studio LLC, Shrewsbury, Massachusetts. This policy explains how we collect and use information when you visit or use the site.
What we collect
Account data: If you sign in, authentication is handled by Keycloak (auth.ltfi.ai). We store your email, display name, and subscription status in our application database so we can provide your account and paid features.
Payments: Paid plans are processed by Stripe. We store your Stripe customer ID and subscription tier/status. Card numbers never touch our servers -- Stripe hosts checkout.
Analytics: We use privacy-respecting, server-side or aggregate analytics where configured. We do not run third-party advertising pixels or retargeting tags on Qurtoo.
Theme preference: Light/dark mode is stored in your browser
via localStorage key q-theme. That data never leaves
your device.
Session cookies: When you sign in, Auth.js sets secure, HttpOnly session cookies so we can keep you logged in. These are required for account features and are not used for advertising.
What we don't do
- We don't sell your data
- We don't run advertising or retargeting trackers
- We don't share email addresses with third parties for marketing
- We don't load third-party web fonts from Google (fonts are self-hosted)
Third-party services
- Cloudflare -- DNS, CDN, TLS termination, and DDoS protection
- Keycloak (auth.ltfi.ai) -- identity provider for sign-in
- Stripe -- subscription billing and customer portal
- Hosting -- application and PostgreSQL database on infrastructure operated by Kief Studio / LTFI
Data retention
Account and subscription records are kept while your account is active and for a reasonable period afterward for billing, security, and legal obligations. You can request deletion by contacting us.
Contact
Questions about this policy? Email [email protected], use kief.studio/contact, or write [email protected] for security matters.