Legal

Privacy

Last updated: 7 July 2026

The short version. KoliStat's products are local-first. Bedevere Desktop and the Bedevere web app open your files and run your queries entirely on your own device — your data, files, and queries are never sent to us. We run no advertising trackers and we don't sell data. The longer version is below.

Who we are

“KoliStat” is a trading name of Massimo Meneghello, an individual based in the United Kingdom, who is the data controller for the limited personal data described here. This notice covers Bedevere and Bedevere Desktop, the @kolistat/bedevere-wise library, the other tools listed on this site, and the marketing site at kolistat.com. You can reach us any time via the contact page or at contact@kolistat.com.

Bedevere Desktop

Bedevere Desktop is local-first by design. The files you open and the queries you run are processed entirely on your own device. The application does not transmit your data, files, queries, or usage to KoliStat — there is no account, no sign-in, and it works fully offline.

In the current beta, the application collects no error or performance telemetry. If a future version introduces optional error or performance reporting, what it collects and how to control it will be described on this page, and covered by an updated version of this notice. Any such reporting would be optional and off unless you choose to enable it.

The Bedevere web app

The Bedevere web app at bedeverewise.app (and the @kolistat/bedevere-wise component it is built from) runs DuckDB compiled to WebAssembly directly in your browser. The files you open and the SQL you run stay on your device — nothing is uploaded to a server. The app itself is delivered as static files through our hosting provider (see below).

The marketing site (kolistat.com)

This website is a set of static pages. We want to be precise about what it does and does not do:

No analytics product and no third-party trackers. We do not run Google Analytics, Cloudflare Web Analytics, or any comparable client-side analytics on this site, and we embed no advertising or social-media trackers.
No cookies set by us. The only browser storage we use is a single localStorage value that remembers your light/dark theme preference. It stays in your browser and is never sent anywhere.
Hosting. The site is served through Cloudflare, our content-delivery and hosting provider. To deliver and protect the site, Cloudflare processes standard request metadata (such as your IP address, the time of the request, and your browser's user-agent) on our behalf, and provides us with aggregate, IP-anonymised traffic statistics. We do not receive any information that identifies you personally from this.
Downloads. Application downloads, such as the Bedevere Desktop installer, are hosted on GitHub. When you download a file, GitHub processes the request under its own privacy statement.

What we do not do

We do not sell or rent personal data, we do not use it for advertising, and we do not track you across other websites or build profiles about you.

Service providers

We keep the list of third parties short and name them plainly: Cloudflare (hosting, CDN, and DNS), GitHub (source hosting and application downloads), and npm (distribution of the open-source library). If you email us, your message is processed by our email provider so that we can reply. Each of these is an established provider operating under its own privacy policy.

Your rights

Because the products are local-first, in practice we hold little or no personal data about you — typically only the contents of any message you choose to send us. Under UK data-protection law (the UK GDPR and the Data Protection Act 2018) you have rights of access, rectification, erasure, restriction, portability, and objection over any personal data we do hold. To exercise them, email contact@kolistat.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Retention and international transfers

We keep correspondence only for as long as we need it to help you and to keep our own records. Our providers (Cloudflare, GitHub) retain request and download logs according to their own policies, and may process data on servers outside the United Kingdom under the safeguards described in those policies.

Children

Our products and this site are not directed at children, and we do not knowingly collect personal data from them.

Security

If you believe you have found a security issue, please see security.txt for how to report it responsibly.

Changes to this notice

If our data practices change — for example, if Bedevere Desktop later gains optional error reporting — we will update this page and revise the “last updated” date above.

Contact

KoliStat (a trading name of Massimo Meneghello), United Kingdom. Privacy enquiries: contact@kolistat.com or the contact page. This notice, and any matter arising from it, is governed by the law of England and Wales.