What we collect
Privacy, without the boilerplate.
Three things here collect something: a measurement tool, a basket, and a door that leads out to Amazon. Each one is written out below — what it takes, where it goes, and what to say if you want it gone. None of this is a promise about a future version of the site. It is a description of the one that is running.
What is measured
One analytics tool, on our own address.
The site uses PostHog to count how it is used. Your browser sends those counts to kbeauty.market/ingest — an address on this site — and this site passes them on to PostHog's servers in the United States. That hop exists because ad blockers filter the posthog.com domains and quietly delete about a third of the traffic, not because the destination is worth hiding. It is named here, and it is named in the code.
Pages
Which pages you open, in what order, and when you leave one.
Presses
PostHog’s autocapture records that something was pressed and what it was — the element, and the words printed on it. Not what you type into a box.
The basket
Adding a line sends one event and removing a line sends another, each carrying the product, its price, the quantity and how many lines the basket now holds. Those two are the only events this shop names for itself. Everything else on this list is PostHog’s own.
Faults and speed
Errors the page throws, the standard web-vitals timings, and how long things took to load.
Where the pointer went
Click and movement positions, which build the heat maps we read to see what people are trying to press.
Roughly where you are
The IP address the request arrives with. PostHog resolves it to a country and a region. We have not switched that off, so it is worth saying plainly rather than leaving it to be inferred.
A number for the browser
A random id, kept in your browser’s local storage and in a cookie, so that two visits from the same browser count as one visitor instead of two. It is a number. There is nothing on this site to attach a name to it, because there is nowhere to sign in.
Not the drafts
The design directions parked at /alt are internal. Events from them are thrown away in your browser, before anything is sent.
PostHog is the only place any of that goes. There is no Google Analytics on this site, no advertising pixel and no ad-network tag. Nothing measured here is sold, and none of it is used to follow you onto somebody else’s site.
Session recordings
The screen is recorded. That belongs in a heading.
PostHog's session replay is switched on for this shop, so a visit can be played back afterwards as a film of the page: what was on screen, where the pointer moved, what was pressed, and how long each step took. We watch them to find the places where the shop confuses people, which is the only thing they are any use for while nobody can check out.
What is masked
Anything typed into an input is replaced before the recording leaves your browser. That is PostHog’s default and we have not changed it.
What is not
The page as drawn. If it was on the screen, it is in the recording.
The console
Messages the page logs are recorded alongside the picture, which is how a fault gets matched to the moment it happened.
How long they last
PostHog is set to delete a recording thirty days after it is made.
Third parties
One embed, and it plays video.
Every clip on a product page is its creator's, embedded from TikTok rather than copied here — which is the honest way to use somebody else's work, and it also means your browser talks to TikTok. What happens inside that frame is TikTok's, under TikTok's privacy notice rather than this one.
Late, on purpose
Nothing is requested from TikTok until a clip is about to come into view. Leave a product page before you scroll that far and your browser never spoke to them.
The still pictures
A clip’s poster frame comes from TikTok’s CDN, and the product photographs are the brands’ own files, referenced where they sit rather than copied here. Both are a request to a host that is not ours.
The typefaces
Built into the site and served from it. Nothing is fetched from Google when a page loads.
The basket
The basket is one cookie, and it holds an id.
Adding something to your order creates a basket on our own backend and writes that basket's id into a cookie. The cookie is the id and nothing else — no name, no address, no email, because nothing on this site has ever asked for one.
The cookie
Named kb_cart_id. No expiry is set on it, so your browser drops it when it closes. That is deliberate: an abandoned basket that outlives the visit is a stale quote, and the carriage on this shop is charged per order rather than per item.
What sits on our side
The basket itself — the products, the quantities and the prices you picked — in our own database, filed under that id and under nothing else.
No accounts
There is nowhere to sign in, no password held here, and no profile. The shop knows a basket, not a person.
No payment details
No payment provider is connected to this shop yet, so an order cannot be paid for and a card number has never had anywhere to go. The site says as much to the browser: its permissions policy switches the payment interface off, along with the camera, the microphone and location.
The second door
Leaving here for Amazon.
As an Amazon Associate, kbeauty.market earns from qualifying purchases. Some products carry a Buy on Amazon button, put there because the same item is listed on Amazon and you ought to be able to choose. Pressing it takes you off this site.
The tag on the link
The link carries an Associates tag. It identifies this shop, not you, and it is how Amazon knows which shop sent the visit. The link is also set to send no referrer, so Amazon is not told which page of ours you came from. Until the Associates account is live the link goes out plain, with no tag on it at all.
Once you are there
You are on Amazon. The browsing, the basket, the card and the privacy notice are all theirs: what happens on amazon.com is governed by Amazon’s own privacy notice, and none of it comes back to us.
What we are told
Commissions, in aggregate — items, quantities, an amount earned. Amazon never tells us who bought, and there is nothing here that could match a purchase to a visit.
Why the door is there
A buying service that pretends the alternative does not exist is not being straight with you. When Amazon is the better way to get a thing, the door is on the page.
Asking
Ask, and it goes.
Write to us. It reaches a person rather than a support queue, which is the only reason this section can promise anything at all.
Writing to us
Sending that email hands us your address and whatever you put in it. We use it to answer you. There is no mailing list here to be added to.
Having something removed
Say what you want gone. Nothing here is filed under a name, so we cannot look you up — what we can do is delete a recording, or a browser’s events, if you can point at them: the page, roughly when, and anything else you remember. Ask and we will go and look.
Correcting this page
If a line above does not match what you can see the site doing, that is worth an email too. This page was written from the code, and code changes.
Written on 19 August 2026, from the site that was running that day.