Privacy
Last updated: May 3, 2026
This Privacy Policy explains how CiteKit collects, uses, and protects information when you visit citekit.com or use the free tools on the site (the “Service”). By using the Service, you agree to the practices described below.
Information we collect
Information you enter into the tools. The CiteKit citation, bibliography, and schema generators run entirely in your browser. Information you enter into a generator (URLs, author names, titles, dates, and so on) is processed to produce a citation and is not stored on our servers or linked to your identity.
Information you send us directly. If you contact us by email or through a support form, we receive whatever information you choose to send, including your email address and the contents of your message.
Information collected automatically. When you visit the Service, our servers and third-party tools automatically collect:
- IP address and approximate geographic location.
- Browser type, operating system, and device information.
- Pages visited, referring URL, and time of access.
- Anonymous usage data (e.g., which generator was used, which citation styles were selected).
Cookies and tracking
We use cookies and similar technologies to operate the Service, understand how visitors use it, and serve advertising. Categories include strictly necessary cookies, analytics cookies (Google Analytics), and advertising cookies (Google AdSense). For full detail on which cookies are used and how to manage them, see our Cookie Policy.
How we use information
- To operate, maintain, and improve the Service.
- To understand how visitors use the Service in aggregate.
- To respond to inquiries and provide support.
- To display relevant advertising.
- To detect, prevent, and address technical issues, fraud, or abuse.
- To comply with legal obligations.
We don’t sell personal information.
Sharing of information
Service providers. We use third-party services to operate the Service, including hosting, Google Analytics for analytics, and Google AdSense for advertising. These providers receive only what they need to perform their functions and are bound by their own privacy policies.
Legal requirements. We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of others.
Business transfers. If CiteKit is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
Your rights
Depending on where you live, you may have the right to:
- Request a copy of the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of personal information.
- Object to certain processing.
- Withdraw consent where processing is based on consent.
If you’re in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you’re in Quebec, under Law 25. If you’re in the European Economic Area, the United Kingdom, or California, you have rights under the GDPR, UK GDPR, or CCPA respectively.
To exercise any of these rights, email [email protected].
Data retention
We retain personal information only as long as necessary to provide the Service, comply with legal obligations, or resolve disputes. Server logs are typically retained for 90 days. Google Analytics data follows its default retention setting (currently 14 months).
Data security
We use reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission over the internet is fully secure, however, and we can’t guarantee absolute security.
International data transfers
The Service is operated from Canada. If you access it from outside Canada, your information may be transferred to, stored, and processed in Canada or in any country where our service providers maintain facilities. By using the Service, you consent to those transfers.
Children’s privacy
The Service is not directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we’ll delete it.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent changes.
Contact
Questions about this Privacy Policy or our data practices? Email [email protected].