Privacy Policy

Last updated: 2026-04-22

1. Operator details

The operator processing your personal data within the meaning of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (hereinafter — 152-FZ) is:

Full name:
Золотов Никита Сергеевич
Legal status:
Самозанятый (НПД)
Contact email:
nikita@uxzolotov.ru
Officer responsible for personal data processing (Art. 22.1 of 152-FZ):
nikita@uxzolotov.ru
Roskomnadzor PD operators registry number:
Registration notification filed / pending publication.

The operator provides unrestricted access to the current version of this Privacy Policy (Art. 18.1 para. 2 of 152-FZ).

2. Data we collect

When you use the website review form, we collect the following categories of data:

  • Website or product URL — a field you fill in the form;
  • Contact — Telegram handle or email you provide in the form for us to reply;
  • Optional improvement goal — a free-form comment (up to 1000 characters);
  • Technical data — IP address, User-Agent, referer, timestamp of the submission (collected automatically by the web server for security and abuse prevention);
  • Anonymised behavioural data — page views, clicks, scroll depth, session recordings via Yandex Metrika WebVisor (only if you accepted analytics cookies).

We do not collect special categories of personal data (race, political views, health, biometrics) or personal data of minors.

3. Purposes of processing

  • Processing your website review request and replying to you through the contact you provided;
  • Performing the audit services and delivering the result;
  • Aggregated analysis of how the website is used to improve it (only with analytics consent);
  • Compliance with statutory obligations of the operator.
  • Your consent to the processing of your personal data — given by ticking the consent checkbox in the form (Art. 9 of 152-FZ);
  • Performance of a contract to which you are a party or taking steps at your request prior to entering into a contract (Art. 6 para. 1 cl. 5 of 152-FZ);
  • Legitimate interests of the operator in ensuring the security and proper operation of the website.

5. Retention periods

Form submissions (URL, contact, comment):
up to 3 years from the date of the last interaction, then they are deleted or anonymised.
Technical logs (IP, User-Agent):
up to 90 days.
Analytics data (Yandex Metrika):
as defined by Yandex Metrika retention policy; the underlying cookies — up to 1 year.
Consent and preferences cookies (`theme`, `cookie_consent`):
1 year.

If you withdraw your consent or ask us to delete the data, we destroy or anonymise it within 30 days unless retention is required by law.

6. Transfer to third parties

We do not sell or rent your personal data. We may transfer your data to the following processors strictly for the purposes listed above:

  • Hosting provider — physical storage of the website and submission database on servers located in the Russian Federation;
  • LLC "Yandex" (Yandex Metrika) — website usage analytics; see Yandex Metrika Terms of Use.

7. Cross-border data transfer

The operator does not perform cross-border transfer of your personal data to foreign countries. Fonts used by the website are self-hosted on the operator's infrastructure, so no IP address of the visitor is sent to Google Fonts or any other foreign CDN. Yandex Metrika is a Russian service, its servers are located in the Russian Federation.

Should cross-border transfer become necessary in the future, the operator will notify Roskomnadzor in accordance with Art. 12 of 152-FZ and update this Policy before initiating the transfer.

8. Cookies

The website uses the following cookies:

theme(functional)
Stores the selected theme (light / dark). Lifetime: 1 year. No consent required — strictly necessary for the requested feature.
cookie_consent(functional)
Stores your choice regarding analytics cookies (accepted / declined). Lifetime: 1 year. No consent required — strictly necessary to remember your decision.
_ym_uid(analytics — Yandex Metrika)
Anonymous visitor identifier. Lifetime: 1 year. Set only after you accept analytics cookies.
_ym_d(analytics — Yandex Metrika)
Date of first visit. Lifetime: 1 year. Set only after you accept analytics cookies.
_ym_isad(analytics — Yandex Metrika)
Flag indicating the presence of an ad blocker. Lifetime: 2 days. Set only after you accept analytics cookies.
_ym_visorc(analytics — Yandex Metrika)
WebVisor session identifier for anonymous session recording. Lifetime: 30 minutes. Set only after you accept analytics cookies.

You can withdraw analytics cookies consent at any time by clearing the `cookie_consent` cookie in your browser or by clicking "Decline" in the cookie banner on your next visit.

9. Analytics

This website uses Yandex Metrika for aggregated usage statistics (page views, click events, scroll depth, anonymous session recording via WebVisor). Analytics cookies are loaded only after you accept them in the cookie banner. You can find details of Yandex Metrika processing at metrika.yandex.com/about/privacy.

10. Your rights as a data subject

In accordance with Articles 14 and 21 of 152-FZ you have the right to:

  • Access your personal data and obtain information about their processing;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your data if it is no longer necessary for the processing purposes or if you withdraw consent;
  • Withdraw your consent at any time;
  • Request restriction of processing or object to processing;
  • File a complaint with Roskomnadzor as the supervisory authority.

11. How to exercise your rights and delete your data

To exercise any of the rights listed in section 10, send an email to the address below. Please include in your request:

  • Your full name or the identifier you used when submitting the form;
  • The contact you provided in the form (Telegram handle or email);
  • The right you wish to exercise (access / correction / deletion / withdrawal of consent);
  • A brief description of the request.

Send the request to: nikita@uxzolotov.ru.

The operator reviews the request and responds within 30 calendar days of receipt (Art. 14 and 20 of 152-FZ). After your data is deleted or anonymised you will receive a confirmation to the same contact.

12. Security measures

To protect personal data from unauthorised access, modification, disclosure or destruction, the operator applies organisational and technical measures including:

  • TLS/HTTPS for all connections between the user and the website;
  • HSTS header to prevent downgrade attacks;
  • Restricted access to the submission database — only the operator has access credentials;
  • Data minimisation — the form collects only fields strictly needed for the review;
  • Regular backups and monitoring of the infrastructure.

13. Changes to this Policy

The operator may update this Policy. The current version is always available at this page. Material changes are announced by updating the "Last updated" date at the top of the document.

14. Contact

For any questions about this Policy or the processing of your data, contact us at nikita@uxzolotov.ru.

Back to home