Personal data policy

1. Who processes your data

The controller is Artem Vladimirovich Boiur, an individual using the Russian professional income tax regime (self-employed) and owner of boiur.dev. This policy covers the BOIUR.DEV public website, estimate forms and client area. For questions about data processing, contact me at mail@boiur.dev.

2. Data and purposes

• Project estimates and replies. Your name, email, brief and project type are used to prepare an estimate and send a private result link. If provided, additional contacts, existing website addresses, references, budget and deadline preferences, and attached file names and content are also processed.
• Client area and project delivery. Names, email addresses, password hashes, sessions, email verification and recovery data, requests, materials, terms, milestones, manually recorded payments and activity history support account access, project delivery and support. The website does not accept payment card details; passwords are not stored in plain text.
• Website operation and security. Technical request details, including IP address, timestamp, page address and browser information, are used for diagnostics and abuse prevention.

Provide only information needed for the task. Do not attach passwords, identity documents, payment details or health information. Share other people’s data only where you have a lawful basis.

3. Grounds and methods of processing

Data is processed under Russian Federal Law No. 152-FZ on Personal Data: to prepare and perform a contract at your initiative (Article 6(1)(5)), meet legal obligations, protect the controller’s legitimate interests while respecting your rights (Article 6(1)(7)), or on separate consent where required. Visiting the website or reading this policy does not constitute blanket consent to processing or marketing.

Processing includes collection, recording, organisation, storage, correction, use, necessary service-related transfers, restriction and deletion. Software is used for processing; the developer also reviews requests and materials.

4. Access and transfers

Requests and materials are not published openly. The developer accesses them to work on your task. A private estimate link grants access to the request, materials and published results for 30 days after submission. Keep it confidential and share it only with people you intend to authorise. Viewing the page does not extend access.

The English client area runs on Cloudflare Workers, with account data in a separate D1 database and attachments in private R2 storage. Cloudflare Email Service sends system messages; incoming contact email is forwarded to the controller’s existing mailbox. Cloudflare may process data outside Russia; these resources are not restricted to a single jurisdiction. Accounts, files and sessions belong to this website only.

When you submit an estimate request, the developer receives an email at mail@boiur.dev with the information you supplied and a link to the protected admin area. You receive a confirmation email with your private link, and service messages when an estimate is published or your request is closed. Uploaded materials are accessed through the protected website rather than attached to email. Telegram notifications are not enabled for the English service.

If you contact the developer through an external messenger, that service also processes the message. You may choose another contact method. Ask the controller about recipients, processing locations and transfer grounds. External service rules do not replace the controller’s legal duties.

Publishing testimonials, materials or project details in a portfolio requires separate agreement. Data may be disclosed to authorities where legally required.

5. Browser storage and analytics

The website stores request links in your browser to display them under My requests. Clearing site data removes these browser links without deleting server records. Essential cookies are used to sign in.

With your permission, public pages use Google Analytics 4 to measure visits and page views. Google receives technical device and browser details, the canonical public page address and an analytics identifier stored in cookies for up to 180 days. Google may process this data outside your country. Analytics does not load before you allow it or after you decline. It excludes the client area, admin area, estimates and private links. Query strings, URL fragments, referrers, form contents, names, email addresses and attachments are not sent. Automatic interaction tracking, Google Signals and advertising personalisation are disabled. Change or withdraw your choice at any time using Analytics settings in the footer; withdrawal removes accessible analytics cookies. The site does not use Cloudflare Web Analytics, Yandex Metrica, Umami or session recording.

You can remove saved request links through your browser’s site-data settings. This does not delete the request or its files from the server. Removing sign-in cookies signs you out; contact mail@boiur.dev to request deletion of server records.

6. Storage and protection

Request data supports estimates, replies and project discussions. Guest links expire 30 days after submission; expiry stops guest access to the request and files but does not automatically delete server records or prevent the developer from continuing work. Account data supports project access; contract and payment data is kept for performance and legally required records. Recovery and verification credentials expire. Once the processing purpose is fulfilled, data is deleted within legally required periods unless another lawful basis applies.

Protection includes HTTPS, access restrictions, permission checks and backups. Estimate pages require a secret link; the client area requires authentication.

7. Your rights and requests

You may request information about processing, correct inaccurate data, seek restriction or deletion where applicable, withdraw consent and challenge processing with the relevant authority or court.

Contact me at mail@boiur.dev about personal data processing. Describe your enquiry and include your account or request details if relevant. Verification may be needed to protect your data. Requests are handled within statutory deadlines; processing may continue where an independent lawful basis exists.

8. Deleting data

Clearing your browser or signing out does not delete server records. Contact the controller to delete a request or account. Attachments, service records and backups are considered too. Data retained by law is not used for other purposes; the controller explains any continuing grounds in the reply.

9. Policy changes

The current version is available here and its revision date changes when updated. This policy does not authorise marketing or replace separate consent to publish materials.

This document is based on Russian Federal Law No. 152-FZ on Personal Data.