What this site collects, and what it doesn’t.

What the website collects

The site is a set of static pages served by Cloudflare. Like any web host, Cloudflare may record standard technical information about requests, such as IP address, user agent, and the pages requested, to operate and protect the service; see Cloudflare’s privacy policy.

Traffic counts (Cloudflare Web Analytics). To see how many people visit and which pages they read, each page loads a small script from Cloudflare that reports the page address, the referring site, your country, browser and device type, and how quickly the page loaded. It sets no cookies, stores nothing on your device, and does not build a profile of you or follow you to other sites, so it runs without asking for consent. See Cloudflare’s privacy policy.

Cookies and similar tools

When you first visit, a notice asks whether we may use cookies. Until you accept, no cookie-based marketing tool loads and no cookie from it is set. Your answer is kept in your browser for twelve months so we do not ask on every visit. The site does not use advertising or analytics cookies and does not sell visitor data.

Marketing (HubSpot). If you accept marketing, HubSpot sets cookies such as hubspotutk and __hstc so that, if you later contact us, we can connect that message with your earlier visits and keep the conversation in one place. See HubSpot’s privacy policy.

You can change or withdraw your choices at any time from the “Cookie settings” link in the footer. Withdrawing stops further collection; data already recorded is kept for the period each provider states. You can also block or delete cookies in your browser settings.

When you contact us

If you use the contact form, we receive your name, company if you give it, email address, and message. The site does not store them: the message is passed to Resend, the service we use to deliver it, and arrives as an email to the founders. Before it is sent, Cloudflare Turnstile checks that the form was filled in by a person rather than a script, in the same way as on the sightings map below, and the message is checked for spam by TypeSafe AI’s model; TypeSafe states that it does not train its models on customer data.

If you write to hello@krima.ai, we receive your email address, your name if you include it, and whatever you choose to tell us. We use that information to respond to you and, if we go on to work together, to carry out the engagement. We do not sell it or share it with third parties for marketing.

The van sightings map

If you add a sighting on the Spot the Sprinter page, we store the map position you chose, the state it falls in, and any note you type. If you attach a photo, we store it and show it publicly beside the sighting; please leave out people and number plates you do not have permission to share. Those details and the photo are shown publicly to other visitors, and we receive them by email, through Resend, when the sighting is added. Before a note is published, its text (not your photo or location) is sent to TypeSafe AI, whose model checks it against our community rules; TypeSafe states that it does not train its models on customer data. A note that breaks the rules is refused and not stored, and a borderline one is kept hidden until we review it. To limit abuse we also store a one-way hash of your IP address for a short period; we cannot turn it back into your address. If you use the “Use my location” button, your browser asks your permission first, and the coordinates are used only to place the pin. Before a sighting is saved, Cloudflare Turnstile checks that it was sent by a person rather than a script; it looks at signals from your browser, usually without showing anything, and does not track you across sites. See Cloudflare’s privacy policy.

Your choices

You can ask us at any time what information we hold from your correspondence and ask us to delete it, unless we need to keep it for a contract or a legal obligation.

Changes

If the site starts using any other tool that collects visitor information, this page will say so before it goes live.