Transparency

Open Source Client

The Kvar extension source code is fully open and auditable. We publish the telemetry schema so you can verify exactly what the extension transmits. The schema is structurally incapable of carrying code, prompts, or any executable content.

{ "eventId": "uuid", "serveToken": "string", "type": "rendered|viewable|view_tick|click", "ts": 1234567890, "visibilityMs": 1500, "focused": true }

Verifiable Receipts

Every impression is cryptographically signed. Advertisers can verify they got the impressions they paid for. Publishers can verify they were credited the correct split. The auction uses commit-reveal: we publish a hash of the auction parameters before revealing the winner, proving the result was not manipulated after the fact.

• HMAC-signed serve tokens binding every creative to a specific serve
• SHA-256 commit-reveal on auction parameters
• Signed impression receipts with campaign, price, and timestamp
• Public audit endpoint for every serve

Local Inspection Log

The extension maintains a local "what was sent" log that you can inspect anytime. Run the Kvar: Show Transparency Log command in VS Code to see every event, when it was sent, and exactly what payload it carried.

The only ad network where both sides can audit every cent.

Independent Security Review

We publish an annual independent security review of the extension and API. The report is available on this page once completed.