Privacy policy

Who is responsible

Aleksandr Matiunin, a self-employed individual in Russia, operates matiunin.com and is responsible for processing personal data received through its contact form. This policy covers enquiries submitted through this website. External project websites have their own policies.

What the form collects

The form collects your message, required reply email, interface language, request identifier, delivery status, dates, and consent version and time. These records are transmitted or created on the server only when you submit the final step. The first step does not send your message to the server. Only required fields are needed; please do not include sensitive personal information.

Purposes and legal grounds

Your enquiry is processed with explicit consent given by clicking “I agree” at the final step. This button confirms your consent and sends your message. Sending a message does not subscribe you to marketing. You may withdraw consent through the contact form. Necessary security processing may rely on legitimate interests only where applicable law allows.

Service providers

Timeweb hosts the website and forwards contact requests. Bluehost runs the private application backend. Messages are delivered to the owner through Google Workspace. Cloudflare supplies Turnstile protection. These providers process information needed to deliver their services under their applicable terms and privacy policies.

Bot protection and browser storage

Turnstile starts only when you submit the final step. It processes technical browser and connection signals, including IP address, and may improve bot detection according to Cloudflare’s policy. The form does not send your message or reply email to Turnstile.

The website itself uses no cookies, local storage, analytics or advertising. Cloudflare may process technical signals and use storage as described in its own policy.

How long information is kept

Application records are deleted 30 days after submission by an hourly cleanup, so deletion may take up to one extra hour. Rate-limit records contain an IP-derived hash, expire after one hour and are deleted hourly: maximum retention is two hours. These scheduled deletion periods apply during normal service operation.

Mailbox copies remain while the enquiry or subsequent correspondence is being handled, and afterwards only as necessary for obligations or legal claims. Mail is not automatically deleted after 30 days. Infrastructure logs and backups follow the providers’ separate retention arrangements.

Security and automated checks

HTTPS protects data in transit, and server access is restricted. An IP-derived hash reduces direct exposure of the address; it is not anonymous data. Automated anti-abuse checks may block a submission. The site does not make automated decisions producing legal or similarly significant effects about you.

International processing

Timeweb processes website data in Russia; Bluehost operates the backend in the United States. Google Workspace and Cloudflare may process information internationally. Protections and rights can differ between countries; applicable law and provider terms govern the arrangements. Consent does not waive mandatory data-localization requirements, notification obligations or your rights.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction of processing or a portable copy of your data, and object to processing. You may also complain to the competent supervisory authority. The availability and scope of these rights depend on the circumstances and applicable legal requirements.

Contact and updates

Use the website’s contact form and write “Privacy” in your message to raise a privacy question or exercise your rights. Verification that you control the reply email may be needed to protect your information. This policy may be updated when the service or processing changes; the date above identifies this version.