This notice describes what personal data each jkca.me surface collects, why, and how long it is kept. The site has no user accounts; data collection is per-surface and minimized.

What each surface collects

jkca.me — request logs (IP, user-agent, path) for abuse and diagnostics; no cookies beyond any session cookie required for CSRF protection. The featured Mac apps are distributed separately and do not send their application data through jkca.me request paths.
book.jkca.me — name, email, timezone, and optional meeting notes you submit when booking a slot. These are written to the operator's calendar for the duration of the meeting plus reasonable retention. Booking confirmations, cancellations, reschedules, and owner notifications may be sent through the site's transactional email provider. IP is hashed per session for abuse prevention, not logged in plaintext.
dashboard.jkca.me / docs.jkca.me / collab.jkca.me — Cloudflare Access identity attributes (such as email and authentication status), request logs, document/session metadata, and any content you create or upload inside the protected workspace. Collaboration state is retained as needed to operate the workspace and audit access.
drive.jkca.me / *.drive.jkca.me — Cloudflare Access identity attributes, tenant membership records, allowed domains, uploaded files, folder/file metadata, preview/download audit events, and operator actions. Drive files remain available until deleted by an authorized operator or workspace member, subject to any tenant retention rules configured for that workspace.
handoff.jkca.me — uploaded files (encrypted at rest), recipient email addresses, and a one-time access token. Notification emails may be sent through the site's transactional email provider. Files and tokens are deleted after 24 hours or first successful download, whichever is first.
meet.jkca.me — display name you enter, WebRTC connection metadata, and any chat messages during the meeting. Audio and video streams are peer-routed through a media server and not recorded by the site. Chat messages persist only for the duration of the room.
qr.jkca.me — the URL or text you submit is used only to render the QR response and is not stored. Request logs (IP, user-agent, path) may be retained for abuse and diagnostics like other public surfaces.
short.jkca.me — destination URL you submit, creation timestamp, and the short code issued. Creator IP is retained for abuse investigation.
sign.jkca.me — uploaded PDF, signer identity as you enter it, the drawn signature, and a signed-document artifact. Invitation, resend, completion, and document-recall emails may be sent through the site's transactional email provider. Retained for 24 hours for download; not retained long-term by the site.
talk.jkca.me — Cloudflare Access identity attributes, device/session metadata needed to relay chat, and message ciphertext. The site does not hold message plaintext.

Requests, consent, and withdrawal

This notice describes what each surface collects and how long it keeps it. It is not legal advice and does not claim a counsel-approved GDPR lawful basis. If you want a copy, correction, or deletion of data the site still holds, email abuse@jkca.me. Not submitting a form is not the same as withdrawing a request or consent already given; write to that address for an existing record.

Your rights

You may request a copy, correction, or deletion of any data the site holds about you by emailing abuse@jkca.me. Because retention is short and there are no accounts, most requests amount to waiting for the retention window to lapse; the site will confirm deletion where manual intervention is required.

Cookies and analytics

The site uses session cookies where required for CSRF protection on surfaces that accept submissions. Cloudflare Access may set authentication cookies on protected surfaces. It does not use third-party advertising trackers. Cloudflare Web Analytics may be used for aggregate traffic insight; it does not set cross-site cookies. The public activity bar reports Cloudflare visit sessions for jkca.me, not unique people or raw request totals. Only aggregate period counts are stored for that projection; it does not store IP addresses, user agents, request paths, or per-visitor identifiers.

Processors and third parties

Cloudflare serves every surface as CDN/edge and provides Access authentication for protected surfaces. book.jkca.me syncs to Google Calendar for the operator. Transactional email for Book, Sign, and Handoff may be sent through Resend. meet.jkca.me routes real-time media through a WebRTC media server. These processors receive only the data needed to provide their part of the service.

Transfers

The site is operated from the United States. The processors named above may also handle data in the United States. This paragraph describes where processing happens. Using the site from another country is not treated here as consent to an international transfer.

Contact

Privacy questions or requests: abuse@jkca.me.