Privacy policy: KOL — Katam's Overlay

Last updated: 4 October 2026

KOL is a Windows utility that shows overlays for volume, microphones, the media player and (optionally) Discord voice channels and chats, WhatsApp chats, and YouTube Music / YouTube, plus small tools: ScratchPad notes, a clipboard history, a web browser card and cards that show part of your screen. It has no accounts, no advertising and no analytics, and it does not send any data to its developer.

What KOL reads on your PC (only locally)

• Volume and mute state of your audio devices and applications, and the state of VoiceMeeter if you use it.
• The title, artist, album and playback position of media that Windows reports as playing (for the media player), and names of open applications (for the Mixer and notifications).
• If you choose the optional Discord feature: KOL runs its own copy of Discord's website on your PC, which you log in to yourself. From it KOL reads your server and channel names, who is in the voice channels of the servers you choose (with their mute and deafen state), and the recent messages of the channels and DMs you choose to follow - only to show them on your screen - and it types the replies you write on a card. Your own mute and deafen state can also be read from the Discord desktop app through a connection on your own PC. KOL itself never saves message text or sends it anywhere else.
• If you choose the optional WhatsApp feature: KOL runs its own copy of WhatsApp Web on your PC, which you link to your phone yourself by scanning a QR code. KOL reads your chat list and the recent messages of the chats you choose to watch, only to show them on your screen, and types the replies you write on a chat card. When you open the WhatsApp window while a card holds text you did not send, KOL leaves that text in the chat's message box as a draft, without sending it. KOL itself never saves message text or sends it anywhere else.
• If you choose the optional YouTube feature: KOL runs its own copy of YouTube Music and YouTube on your PC, which you sign in to with your Google account yourself. KOL reads what is playing, your queue, playlists and liked songs, only to show them in its player and cards. If you send YouTube's sound to a chosen output, its page opens the microphone for a moment so that Windows tells it the names of your outputs, and closes it at once; nothing is recorded or sent.
• If you turn on the Clipboard history (off by default): the text you copy, each time Windows says the clipboard changed - text only, never pictures or files, and never what a password manager marks private (KOL checks that mark before it reads anything). After a paste from the card, KOL holds what you had copied before for a moment and puts it back - text only, and never a copy with that mark. Off, KOL doesn't look at the clipboard at all.

What KOL stores (only on your PC)

• Your settings (positions, colours, pins, shortcuts, chosen devices) in a settings file in KOL's local data folder.
• A cache of lyrics you have looked up, and small diagnostic log files in your temporary folder and KOL's local data folder.
• If you use WhatsApp: the WhatsApp Web session (so you stay linked - like WhatsApp Web in a browser, it keeps WhatsApp's own copy of recent chats) and a list of your chat names, in KOL's local data folder; the names of the chats you watch, and of the chat cards on screen when KOL closes (so they come back after a restart), in your settings. To end the link at any time, remove it under Linked devices in WhatsApp on your phone (it shows as a Windows / Edge browser).
• If you use Discord: the Discord website session (so you stay logged in), and lists of your servers, voice channels, followable chats and the names of people seen in voice channels, in KOL's local data folder; the people, chats and alert choices you pick, the chat cards on screen when KOL closes, and - if the voice activity card is on screen then - its last lines (up to 20: time, who, what happened), in your settings, so they come back after a restart. To end it at any time, log out of that session under Settings > Devices in Discord.
• If you use YouTube: the YouTube / Google session (so you stay signed in), and the song or video you were on with its position (so it can continue after a restart), in KOL's local data folder and your settings. To end it at any time, sign out in that YouTube window or remove the session in your Google account's security settings.
• If you use the Web card: its sign-ins, cookies and history stay in its own profile in KOL's local data folder, and the address it was on when KOL quit is kept in your settings (so it can come back there after a restart). Closing the card with its x removes that address. KOL adds one small script to the Web card's and YouTube's pages so that Esc works like the card's x: it only notices an Esc the page didn't use and tells the card. It reads nothing else, and nothing leaves your PC.
• WhatsApp, Discord, YouTube and the Web card share one browser in KOL's local data folder, each in a separate profile of its own (its own session and storage).
• If you use ScratchPad: your notes and to-dos in Documents\Kol-Notes (or the folder you choose in Settings), as plain files you can open, edit or delete; text you have typed but not yet saved or sent, in KOL's local data folder until you save, send or clear it. KOL's log records only that a note was saved, never its text.
• If you use Selected cards: KOL shows a copy of the part of the screen or window you choose, only on your own screen, and never saves it, except a picture you freeze, which is kept in KOL's local data folder until you close that card. While a card keeps a minimized window live, KOL notes that window's handle, process and position in the same folder so it can always put it back (no title, no picture).
• If you turn on the Clipboard history (off by default): the last 25 texts you copy, in KOL's memory only, gone when KOL quits; pinned clips (up to 10) are kept in KOL's local data folder in a file only your Windows account can read (Windows' data protection), unless you turn that off. What a password manager marks private is never read. Clear all deletes the list and that file at once. KOL's log records only how many characters were kept or why a copy was skipped, never the text or the app it came from. No clip is sent anywhere or shown to any web page.
• Uninstalling KOL and deleting its local data folder removes all of the above.

What KOL sends over the internet

• Lyrics: only after you turn lyrics on, KOL sends the artist, track title, album and track length of the current song to lrclib.net to get its lyrics. That service's own privacy policy applies to that request.
• Track search: when you use the search box, the text you type is passed to the music service you pick, in your browser or app, like any link you open yourself.
• WhatsApp: only after you turn WhatsApp on, KOL's copy of WhatsApp Web connects to WhatsApp's own servers, exactly as WhatsApp Web does in a browser, and sends the replies you write on a chat card. When you accept a WhatsApp call on KOL's call card, that page uses your microphone (and your camera for a video call) for that call only, exactly as WhatsApp Web does; KOL doesn't record the call. WhatsApp's own privacy policy applies to that connection.
• Discord: only after you turn Discord on, KOL's copy of Discord's website connects to Discord's own servers, exactly as Discord does in a browser, and sends the replies you write on a card. Discord's own privacy policy applies to that connection. Reading your own mute state from the Discord app uses only your own PC (127.0.0.1).
• YouTube: only after you turn YouTube on, KOL's copy of YouTube Music and YouTube connects to YouTube's and Google's own servers, exactly as they do in a browser. Google's own privacy policy applies to that connection.
• Web card: only while you use it, it connects to the websites you open, exactly as a browser does. It starts on Wikipedia (or the home page you choose in Settings), and words you type in its address box are searched with Google. Those sites' own privacy policies apply.
• ScratchPad's Ask Claude opens the Claude app or claude.ai in your browser with your text filled in; nothing is sent until you press send there, and Anthropic's own privacy policy applies from then on. Run (off unless you turn it on) runs the command you confirmed in a PowerShell window on your PC; what that command does is up to you.
• Nothing else.

This website

• This website (www.katamproject.com) is a set of static pages. It has no cookies, no analytics and no trackers, and it loads nothing from other sites.
• If you choose a language, that choice is kept only in your own browser (its local storage), so the site opens in that language next time. It is never sent to us.
• The pages are served by Cloudflare. Like any web host, Cloudflare keeps standard technical records of each request (such as the IP address and browser type) and may receive reports from your browser when a page fails to load, to keep the service working. Cloudflare's own privacy policy applies to those.

Sharing and selling

KOL does not sell, share or transfer your data to anyone else. KOL is not directed at children and collects no personal data about anyone.

Changes

If this policy changes, the new version will be published here and with the app update, with a new date at the top.

Contact

Write to support@katamproject.com.