Vika TaylorProduct page demoDesign demo · KUROGANE is not a real companyMMXXVIYouTube
KUROGANE Return to the wok

KUROGANE

Privacy.

Last updated: 17 September 2026

The short version

There is nothing here to sign up for: no account, no newsletter, no working checkout, no payment. The contact form sends nothing itself: it only opens your own email app. The only visitor data collected is Google Analytics, run through Cloudflare Zaraz, and only if you press Accept. Fonts, images and the product film are served from this site rather than from a third party, and the build video on the front page loads nothing from YouTube until you press play, so nothing about you reaches anyone else before you ask for it. No ads, no data selling, no other trackers.

1. Who runs this site

This site (https://kurogane.vikataylor.com/) is published by Vika Taylor, an independent designer and creator based in Kyiv, Ukraine, acting as an individual and not through a company. KUROGANE is a front-end design demo built to accompany a video on the YouTube channel @VikaTaylor. The brand, the workshop and the wok are invented, and nothing on this site is for sale: no price is shown and no payment is taken.

For anything on this page, including any request under section 5, write to vika.taylor.one@gmail.com. That address is the only way to exercise any right described here. No data protection officer is appointed: the scale and nature of the processing below does not require one under GDPR Art. 37.

The contact section of the front page shows the same address. There is no separate address for the fictional brand.

2. What is collected, and why

The site itself collects nothing. Every page is static HTML. There is no account to create, no login, no newsletter, no comment field and no upload. If you never accept analytics, this site learns nothing about you beyond what your browser has to reveal to receive the page at all, which is described in section 2c.

a. The contact form. The form on the front page sends nothing itself, and there is no server behind it. When you press the button, the page checks that the three fields are filled and that the email looks like an email, then asks your browser to open your own email app with a new message to vika.taylor.one@gmail.com. The subject names this site; the body holds your message, your name and the email address you typed. Nothing leaves your device until you press Send in your email app, and then it travels through your own email provider like any other email you write. If you send it, the message is kept in that mailbox, which Google runs, only to answer you, and it is deleted if you ask. The page stores nothing. Legal basis for handling your email: your request to be answered, GDPR Art. 6(1)(b), or my legitimate interest in answering, Art. 6(1)(f).

b. The order pages. /order/review, /order/success and /order/cancelled are three static pages with no form, no field and no payment processor: they collect nothing. The Place order button is an ordinary link from one page to the next. The demo order number on the success page is generated inside your browser from the clock and a random number; it is never sent anywhere and never stored. The line under the order button on the front page reads "Demo checkout, no payment taken" for the same reason: no payment processor is connected and none is named.

c. Request logs at the host. The site is served by Cloudflare. As with any host, the request is processed before a consent question can be asked, because that processing is how the page reaches your browser at all: IP address, user agent, the URL requested and a timestamp. This happens whatever you later choose on the banner, and there is no version of visiting a website where it does not. It is used for delivery, caching and abuse protection. Legal basis: legitimate interest, GDPR Art. 6(1)(f). It is not analytics, it is not joined to the analytics data below, and no report is built from it here.

d. Analytics, and only after you accept. Google Analytics 4 (measurement ID G-VFPV5MZNL2) is the only analytics tool on this site, and it runs through Cloudflare Zaraz, a Cloudflare service that runs such tools on Cloudflare's servers instead of in your browser. Before you click Accept, and after you decline, this page sends nothing to Zaraz, so nothing reaches Google. After you click Accept, /consent.js starts Zaraz, served from this site under /cdn-cgi/zaraz/. Zaraz tells Cloudflare the page address and title, the referring page, your screen and window size, colour depth, character set and time-zone offset, and Cloudflare's servers pass Google the page view, this site's events, your browser's user-agent, your IP address and a random ID kept in a cookie. Your browser makes no request to Google for any of this. Google uses the IP address to estimate an approximate location and states that Google Analytics 4 does not log or store IP addresses.

After you accept, the site tells Google, through Zaraz, that analytics_storage is granted and that the advertising signals, ad_storage, ad_user_data and ad_personalization, are denied, because the banner asks about analytics and nothing else. There is no advertising tag, no remarketing tag and no conversion tag on this origin.

Once accepted, it records the pages viewed, the referring source, an approximate location derived from the IP address (a country or a region, never an address), device and browser type, and how long the visit lasts. The purpose is narrow: to see whether anyone watches the demo and where they came from. Legal basis: your consent, GDPR Art. 6(1)(a).

Nothing else. No profiling, no advertising, no cross-site tracking, no fingerprinting, and no data sold or shared with anyone.

3. Cookies and local storage

This site's own code sets no cookies. The cookies listed here are set by Cloudflare Zaraz, and only after you accept; the other entries sit in your browser's own storage.

You can change or withdraw your choice at any time with the control. It sits in the footer of every page on this site, including the front page where the banner is shown, and it reopens the same banner with the same two buttons, so withdrawing consent is exactly as easy as giving it, which is what GDPR Art. 7(3) requires. The banner links back to this page, so the control is always one click away from wherever you were asked.

If you declined, there is nothing to delete: Zaraz never ran and no analytics cookie was ever written. If you accepted earlier and have changed your mind, press Cookie settings and choose Decline. It takes effect at once, without a reload: the page stops sending anything to Zaraz and deletes the _zaraz_ entry, and from the next page load Zaraz does not start at all. The Zaraz cookies are HttpOnly, so no page can delete them; they stay until they expire or you clear them, and nothing on this site reads them while your choice is Decline. The page also deletes what the earlier set-up could leave until September 2026: the cookies _ga, _ga_VFPV5MZNL2, _gid and any _gat cookie, and the storage entry _gcl_ls. You can check all of this in your browser’s storage panel, and clear cookies and site data for vikataylor.com from your browser settings without asking anyone.

4. Third parties

That is the whole list. There is no payment provider, no email service, no chat widget, no analytics beyond the one measurement ID above, no advertising network and no CDN outside this origin. Fonts (Plus Jakarta Sans and Inter), images, the hero video and the still of the build video are all served from this site, so no request for them leaves it. The YouTube player described above is the only embedded one. The channel links in section 1, in the header and in the footer, and the red YouTube button on the front page are ordinary links, and nothing loads from YouTube unless you follow one.

Both companies above are based in the United States and data may be processed outside the EU and the UK. The transfer mechanisms they rely on are described in their own policies, linked above.

5. Your rights

If you are in the EU, the UK, or anywhere with comparable law, you have the right to access the data held about you, to have it corrected, to have it deleted, to object to processing, to withdraw consent, to receive a copy in a portable format, and to complain to your local data protection authority.

For analytics, withdrawing consent is the Cookie settings control in section 3, which also describes exactly what happens when you use it. For everything else, email vika.taylor.one@gmail.com: that address is the only channel, there is no portal, and a reply comes within 30 days. The contact form on the front page is simply a way to start an email to it. Be aware that the analytics data described in section 2d carries no name, no account and no email, so a request about it can usually only be answered in general terms.

6. California residents

No personal information is sold or shared, in the CCPA sense or any other. The right to know what is collected and the right to request deletion are exercised the same way as section 5: the email address above.

7. Children

This site is not directed at children under 16 and does not knowingly collect their data.

8. Changes to this page

Changes are dated at the top. Any change that alters what is collected or who receives it will also invalidate the consent choice stored in your browser, so the banner asks again rather than treating an old click as an answer to a new question. Either way the stored choice expires by itself after 180 days.

Return to the wok Vika Taylor portfolio