Privacy Policy

1. General

This Privacy Policy describes how personal data of users of kodhub.net (the "Site") is collected, used, stored and protected.

By using the Site you agree to the terms of this Policy. If you disagree, please stop using the Site.

2. What data we collect

Data you provide:

• Email address — when placing an order or registering
• Name — during registration (optional)
• Contact data — when you reach out to support

Data collected automatically:

• IP address
• Browser type and version, operating system
• Pages you visit on the Site
• Date and time of visit
• Cookies (see section 6)

3. Purposes of processing

• Fulfilling orders — delivering digital goods to your email
• Support — answering requests and resolving order issues
• Security — preventing fraud and abuse
• Service improvement — analyzing Site usage to improve quality
• Notifications — informing you about order status (transactional messages only)

4. Data storage and protection

We take reasonable technical and organizational measures to protect your data from unauthorized access, modification, disclosure or destruction.

• Data is stored on secure servers
• Data in transit is encrypted (HTTPS/TLS)
• Access to data is restricted and granted on a need-to-know basis
• Passwords are stored hashed

Data is retained for the period required to fulfill the purposes set out in this Policy, or until the account is deleted.

5. Sharing with third parties

We do not sell or share your data with third parties, except:

• Payment providers — to process payments. We do not store card data.
• Analytics services — for Site usage analysis (anonymized data).
• By legal requirement — where required to comply with the law or to protect our rights.

6. Cookies

The Site uses cookies to ensure proper operation, authenticate users and collect usage statistics.

• Essential — required for the Site to work (authentication, language preferences)
• Analytical — to understand how users interact with the Site

You can disable cookies in your browser settings, but this may affect Site functionality.

7. Your rights

You have the right to:

• Request information about the data we store
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent to data processing

To exercise these rights, send a request to [email protected]. We respond within 14 business days.

8. Policy changes

We may update this Policy. The current version is always available on this page. Continued use of the Site after changes means you agree with the updated Policy.

9. Recipients of data

We share your data with the following processors (152-FZ Art. 6 §3, GDPR Art. 28):

• GiftAPI (RU) — supplier — выдача цифровых ключей и кодов. Legal basis: договор
• Resend (US) — доставка email-уведомлений (коды активации, magic-link). Legal basis: договор
• Sentry (EU/US) — обработка технических ошибок (PII redacted). Legal basis: законный интерес
• Yandex Metrika (RU) — анонимная аналитика посещаемости. Legal basis: согласие (cookie banner)
• Cloudflare (US) — DNS, CDN, email-routing для [email protected]. Legal basis: договор

10. Cross-border transfer

Some processors are located outside the Russian Federation. The transfer is carried out on the basis of your consent (152-FZ Art. 12). Foreign processors: Resend (US), Sentry (EU/US), Cloudflare (US).

11. Retention periods

• Personal data: 3 года с момента последней активности
• Order data: 3 года (НК РФ ст.252 — первичные документы)
• Consent log: 3 года
• Technical logs: 90 дней
• Backups: 14 дней (off-site, шифрованные)

12. Contacts

For questions related to personal-data processing, contact: [email protected]