01
General provisions
This Privacy Policy (the “Policy”) describes what personal data is processed by Individual Entrepreneur Alexey Alexandrovich Sorochan (“anybit”, “we”) in connection with the operation of the website anybit.org and the enquiries we receive by email and messenger, and what rights the people whose data we process have.
The Policy has been prepared in accordance with Russian Federal Law No. 152-FZ “On Personal Data” of 27 July 2006 and is the operator’s publicly available document.
The Policy applies to anybit.org and all of its sections, including portfolio and product pages. It does not apply to third-party websites and services we link to: they have their own data processing rules.
By using the website or sending us an enquiry, you confirm that you have read the Policy. If you do not agree with it, please do not use the website or send us messages.
This is an English translation provided for convenience. If it differs from the Russian version, the Russian version prevails.
02
Definitions
- Personal data — any information relating to a directly or indirectly identified person.
- Processing — any action performed on personal data: collection, recording, storage, rectification, use, transfer, anonymisation, blocking, deletion, destruction.
- Operator — anybit: we determine the purposes of processing, the scope of the data and what is done with it.
- Data subject — you: a website visitor or the author of an enquiry.
- Website — the set of pages available at anybit.org.
- Enquiry — an email, a messenger message or any other message you send us on your own initiative.
03
What data we process
The website has no contact forms, registration or user accounts — on its own it does not ask you for any data. Processing starts when you write to us, when the server delivers a page to you and when the web analytics counter fires on a page.
Enquiry data — what you tell us yourself
- your name, or however you introduced yourself;
- your email address, Telegram account or phone number, if you provided them;
- your company name and position, if you are writing on behalf of an organisation;
- the content of the correspondence and any files you attached.
Technical data — what is recorded automatically
- IP address, browser and operating system details (User-Agent);
- date and time of the request, the address of the requested page, the referring address (Referer).
This data ends up in the hosting provider’s server logs. It is needed to keep the website running, diagnose failures and protect against attacks. We do not use it for profiling and do not link it to a specific person.
Web analytics data — visit statistics
- a random browser identifier stored in a cookie — it lets a repeat visit be told apart from a first one;
- pages viewed, time on site, scrolling, clicks on external links;
- traffic source: search engine, a link on another website, direct visit;
- device type, operating system, browser, language and screen resolution;
- approximate location — country, region and city, determined from the IP address.
This data is collected by the Google Analytics counter. We look at it as aggregated reports — how many people opened a page, where they came from, on which devices — and do not try to establish who exactly visited the website.
Data in the course of cooperation
If talks turn into a contract, we process the company’s details, the contacts of responsible employees and the data needed to sign and perform the documents. This processing takes place outside the website and on the basis of the contract.
We do not process special categories of personal data (health, beliefs, criminal records, etc.) or biometric data. We do not accept payment details through the website and do not ask you to send them.
04
Purposes and legal grounds
We process data only for the purposes below and only to the extent actually needed for them.
Reply to an enquiry and discuss a project
Your consent, expressed by sending the enquiry; steps taken at your request before entering into a contract (Art. 6(1)(5) of Law 152-FZ)
Enter into and perform a contract
A contract to which you are a party or a beneficiary (Art. 6(1)(5) of Law 152-FZ)
Keep the website running and secure
The operator’s legitimate interests: service availability, failure diagnostics, protection against attacks (Art. 6(1)(7) of Law 152-FZ)
Analyse traffic and improve the website
The operator’s legitimate interests: understanding which materials are useful to visitors and where they come from (Art. 6(1)(7) of Law 152-FZ). You can opt out at any time — see section 6
Comply with the law
Accounting and tax obligations, responses to lawful requests from public authorities (Art. 6(1)(2) of Law 152-FZ)
We do not use personal data for ad targeting, do not make decisions with legal consequences based solely on automated processing, and do not send bulk mailings without separate consent.
05
Where we get data from
- directly from you — an email to hello@anybit.org, a Telegram message, contacts exchanged at a meeting or through a referral;
- automatically — server logs and the Google Analytics counter when you view pages of the website;
- from your organisation — if a company representative gave us employees’ contacts as part of a project.
We do not buy contact databases, do not collect personal data from public sources for mailings and do not receive it from third parties for marketing purposes.
06
Cookies and third-party services
For traffic statistics, the website uses a Google Analytics 4 counter. It stores two cookies in your browser:
_ga
A random identifier that lets the counter tell a repeat visit from a new one. Kept for up to 2 years
_ga_CMDSK43WDY
The state of the current session: when it started and how many pages have been viewed. Kept for up to 2 years
The website sets no other cookies. There are no advertising pixels, social media trackers or other analytics systems on the website, and the browser’s local storage is not used for tracking.
The only thing the website keeps in the browser’s local storage (localStorage) is the language you chose — an entry named lang with the value ru or en — so that the website opens in that language on your next visit. The entry appears only if you switch the language, contains no identifiers, is not sent to the server and is deleted together with the website’s data in your browser settings.
You can opt out of analytics in any of these ways: block cookies for anybit.org in your browser settings, install the official Google Analytics Opt-out browser add-on or turn on a tracker blocker. The website keeps working fully.
In addition, the pages call external services, and such a call technically reveals your IP address and browser details to them:
- Google Analytics (googletagmanager.com, google-analytics.com) — traffic statistics. The data is processed by Google LLC, which means it is transferred outside the Russian Federation. According to Google, Google Analytics 4 does not store IP addresses: the address is used to determine approximate location and is then discarded.
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — font loading. The request is processed by Google LLC, which means technical data is transferred outside the Russian Federation. If you do not want this, you can block these domains in your browser — the website will keep working and fall back to a system font.
- Hosting provider — hosting the website and keeping server logs.
- Telegram — if you message us there, the conversation is processed under Telegram’s terms.
- Email service — receiving and storing messages sent to hello@anybit.org.
These services operate under their own rules, and we do not control how they process data. We try to keep their number to a minimum and do not add external components unless necessary.
07
Retention periods
We keep data exactly as long as needed for the purpose for which it was obtained.
Correspondence on an enquiry that did not lead to a contract
Up to 3 years from the date of the last message
Data related to a contract
The term of the contract plus 5 years after it ends — accounting and tax requirements
Server logs
Up to 12 months, or a shorter period set by the hosting provider
Google Analytics data
Event-level data — no longer than 14 months, as set in the counter settings. Aggregated reports without identifiers are not limited by this period. Cookies in the browser — up to 2 years from the last visit
Once the purpose of processing has been achieved or you have withdrawn your consent, we destroy or anonymise the data within 30 days, unless the law requires us to keep it longer. If retention is required by law, we stop any other use of the data and keep it only to the extent of that obligation.
08
Disclosure to third parties
We do not sell personal data and do not pass it on to third parties for their own marketing purposes.
Disclosure is possible only in these cases:
- to infrastructure providers — hosting, email, messenger, web analytics — to the extent needed for the relevant service to work;
- to contractors and consultants engaged in your project — subject to a confidentiality undertaking and only to the extent necessary;
- to public authorities — upon a lawful and duly executed request;
- in connection with protecting our rights — when recovering a debt or resolving a dispute.
Cross-border transfer takes place only to the extent described in section 6 and is related to the operation of external services, not to any transfer of data initiated by us.
09
How we protect data
We apply legal, organisational and technical measures proportionate to the scale of processing:
- access to data only for staff who need it for their work, and only to the extent necessary;
- the website is served over HTTPS; work and email accounts are protected by a password policy and two-factor authentication;
- disk encryption on work devices and regular software updates;
- backups of work correspondence and documents;
- a person responsible for organising personal data processing has been appointed;
- confidentiality undertakings with staff and contractors.
No security measure provides an absolute guarantee. Data transmitted over the internet — for example, an email — travels over open communication channels, and the risk of interception cannot be completely ruled out.
10
Your rights
With respect to your personal data, you have the right to:
- obtain confirmation that your data is being processed and information about the processing: legal grounds, purposes, scope of data, periods and to whom it was disclosed (Art. 14 of Law 152-FZ);
- demand that your data be corrected if it is incomplete or inaccurate;
- demand that your data be blocked or destroyed if it was obtained unlawfully or is not needed for the stated purpose;
- withdraw your consent to processing at any time;
- object to processing for marketing purposes;
- opt out of web analytics — see section 6 for how;
- appeal against our actions to Roskomnadzor (the Russian data protection authority) or in court.
To exercise any of these rights, write to hello@anybit.org with the subject “Personal data”. Tell us who the request concerns and which contact you used when corresponding with us — otherwise we will not be able to identify you.
We reply within 10 working days of receiving the request. This period may be extended by no more than 5 working days, in which case we will explain why.
11
Minors
The website is intended for company representatives and is not meant for children. We do not knowingly collect data from people under 18. If such data has reached us by mistake, write to hello@anybit.org and we will delete it.
12
Changes to this policy
We may update the Policy — for example, if the set of services on the website or the legal requirements change. The current version is always available on this page, and its date is shown at the top of the document.
We will additionally notify the people we are actively corresponding with or have a contract with about material changes. By continuing to use the website after a new version has been published, you accept it.
13
Company details and contacts
Operator: Individual Entrepreneur Alexey Alexandrovich Sorochan
Taxpayer ID (INN): 632135171257 · OGRNIP: 318774600120860
Correspondence address: digital@productlab.one; postal address available on request
Person responsible for organising personal data processing: Alexey Alexandrovich Sorochan
Email: hello@anybit.org
Telegram: @sorochan