Privacy policy

Operator: the editors of the Don8Play project (the “Operator”).
Website: https://www.don8play.ru/
Contact address: support@don8play.ru

The Operator determines the purposes and the scope of the personal data it processes, in accordance with Article 3 of Law 152-FZ. Data is processed in line with the principles set out in Article 5 of Law 152-FZ: lawfulness, fairness, purpose limitation, data minimisation, accuracy and storage limitation.

The Operator processes the following categories of personal data:

• Email address: when you choose to send a request to support;
• IP address: recorded automatically with every HTTP request to the server;
• Cookie IDs (_ym_uid, _ym_d, _ga, _gid): set by the analytics services;
• User agent: the browser and operating system string sent automatically;
• Referrer (HTTP Referer): the address of the page from which you came to don8play.ru.

The Operator does not process special categories of data (Article 10 of Law 152-FZ) or biometric data (Article 11 of Law 152-FZ).

• Analytics cookie IDs (_ym_uid, _ga): 24 months from when they are set, after which the browser deletes them automatically.
• Server logs (IP address, user agent, referrer): 90 days, after which they are anonymised or deleted.
• Correspondence with support (email): 12 months from the date of the last message in the request.

When these periods end, the data is deleted or anonymised in a way that makes it impossible to restore the personal data (Article 21 of Law 152-FZ).

The Operator transfers data to the following third parties, operators of analytics services:

• Yandex LLC (Yandex Metrica): cookie IDs (_ym_uid, _ym_d), the IP address (truncated) and the user agent. Purpose: audience measurement and behavioural analytics. Yandex’s privacy policy: yandex.ru/legal/confidential/.
• Google LLC (Google Analytics): cookie IDs (_ga, _gid) and the IP address (truncated). Purpose: traffic analytics. Google’s privacy policy: policies.google.com/privacy.

No other personal data is transferred to third parties without the data subject’s consent, except where Russian law requires it.

In accordance with Article 19 of Law 152-FZ, the Operator takes the following measures:

• Technical: encrypted connections (TLS 1.2/1.3), access to server logs restricted by IP, HTTPS across the whole don8play.ru domain, regular updates of the server software.
• Organisational: access to the data only for people who need it for the editors’ work; separate access rights; periodic audits of the data being processed.

The data subject has the right to:

• Receive information about the processing of their data: which data, the purposes, the periods, the sources (Article 14(1) of Law 152-FZ);
• Require correction of inaccurate or incomplete data (Article 14(3)(2) of Law 152-FZ);
• Require deletion of the data if it is processed unlawfully or once the purpose of processing has been achieved (Article 14(3)(3) of Law 152-FZ);
• Withdraw consent to processing (Article 9(2) of Law 152-FZ); withdrawal does not affect the lawfulness of processing before it;
• Require that processing stops for the purposes of promoting goods, works or services (Article 15 of Law 152-FZ);
• Appeal against the Operator’s actions to the competent authority, the Federal Service for Supervision of Communications, Information Technology and Mass Media (Roskomnadzor): www.rkn.gov.ru.

How to exercise these rights: send a letter to support@don8play.ru with the subject “Request from a personal data subject”. In the letter, state what you are asking for, your contact email and the data the request concerns. The Operator handles requests within no more than 10 working days of receipt (Article 20 of Law 152-FZ).