Safety and boundaries

The limits are fixed, not configurable.

These are commitments about how Kairo behaves. They are enforced in the software and covered by automated tests, and no setting turns them off.

Never

What Kairo will not do

Defeat any protection

Kairo does not bypass captchas, paywalls, login walls, DRM, or anti-bot systems. Where a host requires human verification, Kairo opens a visible window so you can complete it yourself - it does not solve it, work around it, or pretend to be you.

Read your Steam account

No Steam credentials, cookies or ownership records are ever read. Games are matched by exact App ID only, never guessed from a title, and a manifest found on disk is never treated as evidence that you own anything.

Host game files

Kairo runs no game archives of its own. It shows metadata and links to independent services. That distinction does not make any given link authorised, safe or lawful where you are.

Touch your antivirus

Kairo never disables security software, never asks you to, and never adds exclusions for you. It only tells you when a release is known to conflict, so you can decide with full information.

Send data you did not send

Reports, rights notices and the optional install event are transmitted only when you submit them. Analytics are off unless you switch them on.

Grant you a licence

Kairo gives you no rights to any game, mod, artwork or archive. You need a lawful licence for anything you install, and that responsibility is yours.

Expect this

Windows will warn you when you run the installer

Kairo is not code-signed yet. A code-signing certificate is a paid, identity-verified credential, and until one is in place Windows treats the installer as coming from an unidentified publisher.

What you will see

A blue SmartScreen dialog saying "Windows protected your PC" and naming an unknown publisher. Running it requires clicking More info, then Run anyway.

Why we say so upfront

Because "just click through the warning" is exactly what malicious software asks for. You should be suspicious of that instruction - from anyone, including us. Verify what you are running.

How to check you have the real thing

Download only from the link on this site, which points at Kairo's official releases. Each release publishes a SHA-512 checksum alongside the installer, and the app's own updater verifies that checksum before installing anything. If a download came from somewhere else, treat it as untrusted.

Signing is a known gap and is tracked as a release blocker rather than quietly ignored.

Your machine

What Kairo changes on your PC

Installing games means writing files, and being clear about that is part of being trustworthy.

Local changes Kairo makes
AreaWhat happens
Library folderGames are extracted into a folder you choose. Each install records where it went.
Temporary folderArchives are downloaded here and removed after a successful install unless you keep them.
Desktop shortcutsCreated only when you leave that option ticked, and removed with the game.
Application dataSettings, the catalog copy, the queue and install logs live in your user profile.
Extraction toolsKairo uses bundled or installed archive tools. It does not modify system settings.
DeletionRemoving a game deletes its folder permanently. This does not use the Recycle Bin, and the dialog says so.

Keep your own backups

Large downloads, extraction, updates, mod deployment and profile changes all alter local files. Keep independent backups of saves and installations you care about - that is good practice with any tool, including this one.

Rights holders

If you own content that appears in the catalog

There is a dedicated, verified process. A credible notice can cause an entry to be disabled while the facts are checked, and detailed proof of ownership or authority is required before a final removal is confirmed.

  • Rights-holder blocks take precedence over anything already cached or published
  • Private claimant details are stripped before any catalog is published
  • Corrections and counter-notices are part of the process, and false claims are treated as abuse
Report

Found something wrong?

Broken links, wrong metadata, failed installs and security concerns can all be reported. Reports go to a private review queue, and you choose what to include.