# Privacy Policy Canonical URL: https://kintoolkit.com/privacy Effective date: October 23, 2026 KinToolkit is operated by Cedar Jay Ventures, LLC (“we,” “us,” or “our”). This policy describes information handled through kintoolkit.com and our public discovery resources. Contact us at [cedarjayventures@gmail.com](mailto:cedarjayventures@gmail.com) with privacy questions or requests. ## Calculator information KinToolkit helps adult caregivers locate medicine-label information without creating an account. Public label-reference URLs identify a medicine bottle, concentration and printed weight or age band. Selecting or sharing one of these pages includes that public band in the URL; it is not a private record. Your browser history, anyone receiving the link, and the hosting provider may see that URL. Do not put a child’s name, exact measurements, medical history or other personal information into a link. Our public catalog and browser discovery tool list educational resources. They do not accept child details or return personalized doses. Please do not include a child's name, medical history, or other sensitive information in URLs or support messages. Our remote label-reference tools at [/api/mcp](/api/mcp) accept bounded public brand, ingredient and bottle-audience filters, or a public product identifier, exact bottle concentration, and published label-band identifier. They do not accept free-form questions. These tools return the corresponding label reference and do not accept names, exact patient ages or weights, or medical histories. Our server and hosting provider process the request body to answer the call, together with technical request information. KinToolkit does not send MCP arguments or returned directions to PostHog. Your AI assistant or MCP client may also process the information you provide under its own privacy policy. Do not send personal health information to these tools. We send limited MCP operational records from our server to PostHog to understand use and diagnose reliability problems. Each record contains the protocol operation or supported tool name, technical outcome category, an allowlisted technical error category, a coarse self-reported software client family, metadata availability and source, allowlisted protocol revision and HTTP method, header-consistency and input-validation categories, HTTP status, processing time, a test-traffic marker, and a random identifier for that request. These records exclude request and response bodies, tool arguments, returned values, medicine names, concentrations, label bands, caller IP addresses, raw user-agent strings, raw client names and versions, headers, referrers, and query strings. They do not use a persistent client identifier, and person profiles are disabled for these events. PostHog receives the records through our server’s network connection. A finite software-name allowlist covers common assistants, editors, scanners, SDK clients and KinToolkit examples. Generic MCP-client claims do not identify the application or user. Unrecognized names remain other; absent or invalid metadata remains unknown. Metadata and validation categories describe technical shape only, never the supplied values. They are inferred only from exact allowlisted protocol client names; raw names and versions are discarded. These claims are not verified identities, and openai does not distinguish ChatGPT from API clients. Older clients usually identify themselves only at initialization; later requests remain unknown unless they include protocol client metadata. We do not join requests into sessions or infer a person from a client family. See the [developer guide](/developers) for the MCP interface and error handling. ## Information collected when you visit or contact us Our hosting and service providers process technical information needed to deliver and protect the website, such as network addresses, request information, browser details, and timestamps. We use PostHog to understand website usage. The deployed site records pageviews, calculator use with the selected medicine type, use of its copy-link sharing feature, and explicit help, label-zoom, bookmark, Amazon and pediatrician-link actions. We also collect numeric page-performance metrics and filtered browser-error types and application stack locations; error messages and DOM attribution are removed. Before browser analytics are sent, label-reference URLs are reduced to their medicine page, page titles are generalized, and URL fragments and non-allowlisted query parameters are removed. The analytics library also processes browser and device information and persistent identifiers. We do not include selected label bands, child age or weight, concentration or displayed directions in the calculator event payload. Hosting and security systems may process network addresses and maintain counters to detect and limit excessive traffic. This abuse protection is separate from browser analytics and the MCP operational records described above. Our hosting provider, Vercel, processes the network information needed to receive and protect MCP requests. Session recordings and heatmaps are enabled across the website. Recording preserves public interface text and styling while masking marked sensitive text and blocking inputs and embedded media; console and network capture are disabled. Calculator selections, bottle variants, dosing-result regions and published label guides are blocked from recordings. Heatmap coordinates from label-selection and result URLs are removed before transmission. Automatic interaction capture remains disabled. This does not mean all website traffic is anonymous: the name or address of a medicine page can itself reveal health-related interests. If you email us, we receive your email address and whatever information you provide. We use it to answer your request and maintain necessary correspondence. Do not use support email for urgent medical questions. ## How information is used and shared We use information to provide and secure the site, diagnose problems, understand which resources are useful, respond to requests, and meet applicable legal obligations. Service providers process information to support those purposes, including website hosting through Vercel, domain/DNS services through Cloudflare, analytics through PostHog, and email services. We may disclose information when required by law or reasonably necessary to protect people, enforce lawful rights, or investigate abuse. If the business is transferred, relevant information may be transferred subject to applicable law and appropriate notice. ## Browser storage and your choices Our analytics library uses browser persistence, which can include cookies and local storage, to recognize visits. Browser controls let you block or clear cookies and local storage. Clearing storage does not necessarily remove information already received by a service provider. Contact us about access, correction, deletion, or other privacy rights available under applicable law. We may need proportionate information to verify a request, and some information may be retained where law permits or requires it. ## External sites, purchases, and appointments KinToolkit links to manufacturers, Amazon, and independent healthcare services, including appointment booking through Square. When you follow a link, the destination's privacy policy applies. Affiliate or referral links may identify KinToolkit as the source of a visit, and we may receive compensation for qualifying purchases or bookings. We do not receive your payment-card details through the KinToolkit calculator. If you access KinToolkit through an AI assistant or other third-party service, information you give that service is governed by its own policies. KinToolkit's public discovery resources do not require access to your assistant account or conversations. ## Retention, security, and international processing We keep information for the purposes described here, subject to applicable legal requirements. Retention depends on the type of information, operational need, and provider settings. We use reasonable safeguards, but no online system is completely secure. Our service providers may process information in the United States and other countries where they operate. ## Children KinToolkit is intended for adult caregivers, not for children to use independently. We do not ask children to create accounts or submit identifying information. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action. ## Changes and contact We will post revisions here with an updated effective date and provide additional notice where required. Privacy requests: [cedarjayventures@gmail.com](mailto:cedarjayventures@gmail.com). Mailing contact: Cedar Jay Ventures, LLC, 1111b South Governors Ave, STE 34330, Dover, DE 19904, United States.