# Kibble installation contract: section 3 of 29 (guide version 3)

> This is **one section only**, not the whole contract. Complete document: https://www.usekibble.dev/AI/guide.md

## 3. What Kibble collects, and never collects {#collects}

### Collected, only after consent is granted

- Page views with the host, the path (no query string or fragment), a content id and type, and the page title.
- Referrer host and campaign source, medium and campaign (`utm_source`, `utm_medium`, `utm_campaign`) on landing. Which click identifier was present (for example gclid), never its value. Other query parameters are not collected.
- Active attention time, sections you mark (counted when at least half of the section is visible for one second; there is no scroll-depth tracking), clicks on elements you mark, form starts, field names and error codes.
- Availability searches (destination or property, intended dates, nights, guests) and product/cart/checkout identifiers and amounts.
- Confirmed outcomes: type, a hashed business reference, value and currency.
- Technical error class only (an uncaught script error, or a resource that failed to load). No message, stack or URL.
- Site-search phrases, sent in a separate request that carries no browser, visit or event identifier.

### Never collected

- IP addresses stored with events, names, emails, phone numbers, addresses or payment details.
- Form values, free text, exception messages, or raw query strings.
- Anything before consent: the default state is unknown and nothing is stored or sent. Events captured before a grant are never replayed.

END OF SECTION collects