Policy · updated 18 August 2026
Privacy Policy
This Privacy Policy explains how Kavoreni handles information connected with this publication, its correspondence channels, and its static website. It applies to visitors in Indonesia and elsewhere who read the archive, submit the contact form, or communicate with the Jakarta desk. The document is written in plain, descriptive language so that a reader can understand what is collected, why it is collected, how long it is kept, and what choices remain available. Kavoreni is an independent editorial publication and does not operate a storefront, a subscription paywall, or a membership account system, which limits the categories of information the site is able to collect in the first place. Readers who prefer not to share any personal information may still read every published article without restriction.
1. Scope of this document
This policy covers four practical touchpoints: general browsing of the website, submission of the contact form on the Contact page, voluntary email correspondence sent to the addresses listed in the footer, and the technical server logs generated automatically whenever a page is requested. It does not cover the practices of any third-party website that a reader may reach by following an outbound link from an article, and it does not cover unsolicited correspondence sent to Kavoreni outside these channels, such as postal mail. Where an article references a published source, that source operates under its own separate privacy terms. This document is intended to be read together with the Cookie Policy and the Terms of Service, both linked from the site footer, since together the three documents describe the complete data practice of the publication.
2. Information the site receives
When a reader completes the contact form, the desk receives the name, email address, and message text that the reader chooses to type, along with any additional detail the reader voluntarily includes in the free-text field. No account is created as a result of this submission, and no password or profile is stored. Ordinary web server logs separately record technical values such as an IP address, browser type and version, the page requested, the date and time of the request, and an approximate network region derived from standard routing information; these logs are generated for every visitor automatically as part of normal web hosting operation, whether or not a form is submitted. Kavoreni does not ask readers to submit government identification numbers, financial account details, or health records through any part of the site, and any such information sent voluntarily in a message will not be retained beyond what is necessary to answer the correspondence.
3. Legal basis for processing
Where a reader submits the contact form, the processing of the name, email address, and message content relies on consent, since the reader takes a deliberate action to share that information for the specific purpose of receiving a reply. Where the site records ordinary technical server logs, the basis is legitimate interest in operating a reliable, secure, and measurable publication, an interest that is balanced against the limited and non-identifying nature of the data involved. Where a reader accepts optional cookies through the banner described in the Cookie Policy, the basis for that specific category is consent, and that consent can be withdrawn at any time without affecting the lawfulness of processing carried out before the withdrawal. Kavoreni does not rely on legal obligation or contractual necessity as a basis for processing, because the site does not sell goods or services that would require such a basis.
4. Retention periods
Routine contact-form messages, together with the reply correspondence they generate, are retained for up to twenty-four months from the date of the last exchange, after which they are deleted from the desk's mailbox during a periodic review. Server access logs are retained for a shorter period of approximately ninety days, a window chosen to allow investigation of technical issues or security anomalies without keeping identifying network information longer than necessary. Where a message concerns a correction request or an editorial dispute, the underlying correspondence may be kept for up to five years to preserve a record of how a published article was reviewed, consistent with ordinary editorial recordkeeping practice. Cookie preference records, described further in the Cookie Policy, persist in the reader's own browser for the lifespan stated for each cookie and are never transmitted to a permanent server-side profile.
5. Reader rights and how to exercise them
A reader may request access to the personal information Kavoreni holds about them, request correction of inaccurate details, request deletion of a stored message, request a copy of the information in a portable format, or object to a specific processing activity described in this policy. These requests can be made by writing to [email protected] with a clear description of the request and enough detail, such as the approximate date of a prior message, to allow the desk to locate the relevant record. The desk aims to acknowledge a rights request within five business days and to provide a substantive response within thirty calendar days, a period that may be extended by a further thirty days for a complex request, with notice given to the reader explaining the reason for the extension. There is no charge for a first request of this kind in a twelve-month period; a repeated or manifestly excessive request may be subject to a reasonable administrative response time.
6. Named processors and service providers
Kavoreni's website is hosted on infrastructure provided by a commercial web-hosting company, which processes server logs solely to keep the site available and secure and does not use that information for its own independent purposes. Where the site enables an analytics cookie as described in the Cookie Policy, aggregated traffic measurement may be processed by a standard third-party analytics provider acting under a data-processing agreement, limited to non-identifying counts such as page views and general device category. Outbound correspondence sent from the contact form is delivered through a conventional business email service. Kavoreni does not share reader information with data brokers, does not sell personal information to third parties, and does not use reader messages for unrelated marketing communications.
7. Cookies and similar technologies
The website uses a small number of cookies, summarised here and described in full detail, including exact names and lifespans, in the separate Cookie Policy linked from the footer of every page. In short, a session cookie supports basic page behaviour and expires when the browser session ends; an optional analytics cookie named kavoreni_analytics may remain for up to ninety days if a reader accepts that category; and a preference cookie named kavoreni_preferences may remain for up to one hundred eighty days to remember the reader's banner selection. No cookie used by this site is designed to build an advertising profile of an individual reader, and Kavoreni does not operate third-party advertising cookies or cross-site tracking pixels.
8. International transfers
Because the website's hosting and, where applicable, its analytics provider may operate infrastructure located outside Indonesia, including in jurisdictions within the European Economic Area, Singapore, or the United States, a limited transfer of technical server information may occur as an ordinary consequence of internet routing and cloud infrastructure. Where such a transfer takes place, Kavoreni relies on the receiving provider's standard contractual safeguards, such as standard contractual clauses or an equivalent recognised transfer mechanism, and selects providers that maintain documented security and confidentiality commitments. No reader information is transferred to a jurisdiction for the purpose of avoiding applicable data-protection standards, and the categories of data involved in any transfer remain limited to those described in Section 2 of this policy.
9. Complaints and contact procedure
A reader with a question or concern about this policy, or about how their information has been handled, is encouraged to write first to [email protected], describing the concern in as much detail as possible so the desk can investigate promptly. The desk aims to send an initial acknowledgement within five business days and a full response within thirty calendar days, consistent with the timelines described in Section 5. If a reader remains dissatisfied after receiving a response from the desk, they retain the right to raise the matter with Indonesia's competent personal-data-protection authority or with the relevant supervisory body in their own country of residence, without needing prior authorisation from Kavoreni to do so. Kavoreni will cooperate with a lawful inquiry from a supervisory authority and will retain records of any complaint, together with its resolution, for up to five years for accountability purposes.
10. Children and the publication
Kavoreni's editorial content is written for an adult general readership and the site does not knowingly collect personal information from a child. The contact form does not request an age declaration, but the subject matter and tone of the publication are directed at adults, and Kavoreni asks a parent or guardian who believes a child has submitted personal information through the site to contact [email protected] so that the message can be reviewed and removed if appropriate. The publication does not knowingly build any record specifically associated with a minor and does not target advertising, were any introduced in future, at a child audience.
11. Security measures
Kavoreni applies reasonable technical and organisational safeguards proportionate to the limited categories of information it processes, including transport encryption for the website connection, access restrictions on the desk's email account, and periodic review of retained correspondence to remove records that are no longer necessary. No online service can guarantee complete protection against every possible security incident, and Kavoreni asks readers not to include highly sensitive information, such as financial account numbers, in a contact-form message. Where a security incident is identified that is likely to create a meaningful risk to a reader whose information was affected, the desk will take reasonable steps to notify the affected reader and, where legally required, the relevant supervisory authority within the timeframe set out in applicable law.
12. Revision history
This policy is reviewed periodically to keep its description of data practice accurate as the publication's tools evolve. The version dated 18 August 2026 clarified the retention periods described in Section 4 and expanded the description of named processors in Section 6. An earlier version dated 2 February 2026 introduced the current structure of numbered sections and added the explicit international-transfer language now found in Section 8. A version dated 14 November 2025 first published this policy alongside the launch of the contact form referenced in Section 2. Kavoreni will update the date shown at the top of this page whenever a substantive change is made and, where a change is significant, will note it briefly in this section.