Privacy policy.

This policy explains how personal data is processed on the website kaletacms.com. It covers this website only – sites built with the Kaleta CMS are run by their own owners, who are responsible for their own privacy policies.

Who is responsible

The controller is Miroslav Kaleta, company ID (IČO) 04133579, Pod Rozhlednou 3199, 760 01 Zlín, Czech Republic. You can reach us at info@kaletacms.com.

What we process and why

Server logs

When you open a page, the web server records technical data about the request: IP address, date and time, the address requested, the referring page and the browser identification. We use them only to run the site and keep it secure (for example to detect attacks). The logs are kept by our hosting provider for a limited time and then deleted. Legal basis: our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).

Visit statistics without cookies

We count visits with Kaleta's built-in statistics. To count unique visitors, the site computes an anonymous fingerprint from your IP address, browser and a salt that changes every day. The fingerprint cannot be linked to you on another day and is deleted after one day. We keep only totals: visits and page views per day, pages viewed and the domains visitors came from. Legal basis: our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).

Showcase submissions

The Community page has a form for submitting a site built with Kaleta to the showcase. It asks for the site's address and name, a short description, optionally who built it, and your name and email address. We use these details only to handle the submission: to look at the site, to contact you about it and, if it is listed, to show the site with a screenshot, its description and the credit you gave. We never publish your name or email address. Legal basis: your consent, given with the checkboxes in the form (Art. 6(1)(a) GDPR).

The submission is stored in this site's administration, and we get a notification by email. We keep it until the submission is handled; the site deletes form submissions automatically after 24 months at the latest. You can withdraw your consent, ask us to delete the submission or ask us to remove a listed site at any time by writing to info@kaletacms.com.

Release news by email

You can sign up for emails about new Kaleta releases. We ask only for your email address. The sign-up uses double opt-in: you first get an email with a confirmation link, and we send you nothing else until you confirm. An unconfirmed sign-up is deleted automatically after 30 days. With your address we keep the date and language of the sign-up. We use the address only to send release news – nothing else – and we do not pass it on to anyone for their own purposes. Every email has an unsubscribe link; unsubscribing removes your address from the list at once. Otherwise we keep it for as long as you stay subscribed. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by unsubscribing or by writing to us.

Messages you send us

If you write to info@kaletacms.com or report a security issue, we use your email address and the content of your message to reply. We keep the correspondence as long as it is needed to deal with your request and for any follow-up. Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR).

Update checks by Kaleta installations

Installed Kaleta sites check for new versions at kaletacms.com/aktualizace.json, or at kaletacms.com/aktualizace-stable.json on the Stable channel; the version information itself is published on GitHub. Our server log records these requests like any other page request; we do not collect anything else about the installations.

Cookies and local storage

Reading this website sets no cookies. We use no analytics, advertising or tracking cookies, so the site shows no cookie bar. Only the following are stored in your browser, and only in the situations described:

• ka-jazyk (local storage, not a cookie) – when you pick a language in the language switcher, your browser remembers the choice so that the site opens in that language next time. It stays in your browser until you clear it and is never sent to us.
• ka_nahled (cookie) – set only when someone opens a signed preview link of a draft we shared; it keeps the preview while browsing the site and expires together with the link (at most 7 days).
• kaleta (session cookie) – set only when someone signs in to the administration of this site, never for visitors reading it. It is deleted when the browser is closed, and the sign-in ends after 8 hours without activity.

These are strictly necessary for a function you ask for, so they need no consent. You can delete them in your browser at any time.

Third parties

This website uses no advertising or tracking tools and loads no third-party scripts or fonts. The only forms on this site are the showcase submission and the release-news sign-up described above.

Downloads, source code, releases and issues are hosted on GitHub. When you follow a link to github.com, GitHub processes your data under its own privacy statement, which may include transfers outside the EU.

Who receives the data

Only we and the providers we need to run the site: our hosting provider (server, logs, showcase submissions and the subscriber list) and our email provider (messages, notifications and the release-news emails). They process the data on our behalf and only for these purposes. We do not sell or share personal data for marketing.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to object to processing based on our legitimate interest, and to data portability. Where we process data on the basis of your consent, you can withdraw it at any time; this does not affect processing that took place before. Write to info@kaletacms.com. You can also lodge a complaint with a supervisory authority – in the Czech Republic the Office for Personal Data Protection (uoou.gov.cz), or the authority in the EU country where you live or work.

Changes

We will update this policy when the way we process data changes. The date below shows the latest version.

Last updated: 13 October 2026