Skip to content
Last updated: October 2026

Privacy Policy

OpenCohost Kira is designed around a strict local-first philosophy. Your live streams, microphone audio, transcribed voice turns, and viewer chat interactions belong to you and remain on your personal hardware through the Kira core application. On our public website, we maintain transparent, privacy-respecting disclosures for performance analytics and session measurement.

Local-First Architecture & Kira Core

OpenCohost Kira is an open-source, self-hosted companion application. Unlike cloud-hosted AI services, Kira executes directly on your machine.

100% LOCAL

On-Device Voice & Audio (LiveAudio)

Voice detection (Silero VAD), Push-to-Talk, and speech-to-text transcription through LiveAudio operate locally. Audio data is not streamed, stored, or processed on OpenCohost servers.

ON-DEVICE

Local Speech Synthesis (TTS)

When using local voice pipelines such as Piper TTS, neural audio waveforms are synthesized locally using your system GPU and CPU. No voice synthesis data is transmitted across the internet.

LOCAL STORAGE

Stream Chat & Context Memory

Chat messages read from your live broadcast, topic agenda queues, profile settings, and persistent memory files stay in local storage on your workstation.

USER-CONFIGURED

Third-Party Cloud Providers (BYOK)

If you voluntarily configure third-party cloud LLM APIs (e.g. OpenAI, Anthropic, OpenRouter) or remote TTS fallbacks, prompt text and context leave your device directly to that provider under their respective terms and privacy policies.

The Kira core desktop application contains zero telemetry beacons, zero background usage tracking, and zero advertising libraries. We do not inspect your stream, your games, your hardware identifiers, or your conversation history.

Website Analytics (Vercel Analytics)

On our public documentation and marketing website (opencohost.com), we use Vercel Analytics to understand technical performance, delivery speed, and availability.

NO COOKIES

Cookieless Architecture

Vercel Analytics does not use cookies, does not persist identifiers across sessions, and does not store information in browser local storage.

PERFORMANCE

Core Web Vitals

We measure page loading performance metrics such as Largest Contentful Paint (LCP), Interaction to Next Paint (INP), and Cumulative Layout Shift (CLS) to diagnose site latency.

ANONYMOUS

Anonymized & Aggregated

Data points are aggregated at the server edge. No IP addresses, device serials, or individual browsing profiles are collected or shared.

Behavioral Analytics & Session Insights (Microsoft Clarity)

To ensure our documentation, diagrams, and downloads are legible and intuitive, we use Microsoft Clarity to observe website interactions.

Mandatory Microsoft Clarity Notice

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first-party and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

USABILITY

Interaction Heatmaps & Session Replay

Clarity records page navigation, scroll depths, and click patterns so we can pinpoint broken links, confusing layouts, and inaccessible user interface controls.

DATA MASKING

Automated PII Masking

Input fields, passwords, numbers, and user-entered text are automatically masked on the client side before telemetry packets leave your web browser.

FIRST-PARTY

First-Party Cookies & Identifiers

Clarity utilizes first-party browser cookies (such as _clck and _clsk) to distinguish unique browser sessions and compile continuous pageview recordings.

Cookies and Storage Details

The following table discloses the web cookies and tracking storage technologies used on opencohost.com. The Kira desktop software itself does not set or consume web browser cookies.

Cookie NameProviderPurposeDurationType
_clckMicrosoft ClarityPersists the unique Clarity user identifier and browser settings across visits.1 yearFirst-party Analytics
_clskMicrosoft ClarityConnects multiple page views in the same browser session into a single playback.1 dayFirst-party Analytics
CLIDMicrosoft ClarityIdentifies first-time site visits and tracks navigation flow for heatmap aggregation.1 yearFirst-party Analytics
MR / MUIDMicrosoft Advertising / ClarityUsed by Microsoft to measure synchronized browser telemetry and security validation.3 to 13 monthsThird-party Analytics

User Rights, Browser Controls & Opt-Out

You maintain complete sovereignty over your browsing data, cookies, and local files.

BROWSER

Browser Cookie Management

You can block, clear, or reject cookies at any time through your browser settings. Blocking cookies will not degrade your access to any documentation or software downloads on this site.

GPC / DNT

Do Not Track & Global Privacy Control

Our web servers respect browser-level privacy signals including Global Privacy Control (GPC) and Do Not Track (DNT) headers.

OPT-OUT

Microsoft Analytics Opt-Out

You can manage Microsoft telemetry and personalized advertising preferences across all Microsoft partner networks by visiting Microsoft account privacy settings.

NO DATA BROKERAGE

No Sale of Personal Data

OpenCohost does not sell, rent, monetize, or broker personal information. We do not require user accounts, emails, or payments to browse this website or download Kira.

Under the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and related privacy statutes, users possess the right to access, rectify, or erase personal data. Because we do not store customer databases or user credentials, we hold no personal profiles to disclose or delete.

Waitlist Communications & Double Opt-In Protection

When you voluntarily join the OpenCohost Kira waitlist, we collect and process your email address under strict purpose limitation.

DOUBLE OPT-IN

Double Opt-In Verification

We verify every waitlist submission with a cryptographic confirmation link sent to your inbox. Unconfirmed registrations expire automatically after 48 hours.

CRYPTOGRAPHIC RLS

Hashed Tokens (SHA-256)

Verification tokens are hashed with SHA-256 before storage in Supabase database tables protected with Row Level Security (RLS).

PURPOSE-BOUND

Purpose-Bound & Zero Spam

Your email is used solely to deliver transactional confirmations and early access invitations for Kira. We never sell, share, or monetize subscriber emails.

DATA DELETION

Unsubscribe & Deletion on Request

You can request immediate removal and deletion of your email from the waitlist database at any time by contacting the maintainers.

Waitlist data is managed using Supabase infrastructure with restricted service role access and transactional delivery via Resend. No advertising cookies or third-party trackers are connected to the waitlist.

Contact Information & Security Disclosures

OpenCohost is an open-source initiative developed publicly. If you have privacy inquiries, questions about our analytics implementation, or need to report a security vulnerability, please contact the maintainers directly.

Public bug reports, feature discussions, and documentation suggestions can be submitted via GitHub Issues in our repository. When reporting technical issues, please avoid sharing private logs, API keys, or personal stream data.