Last updated: 29 July 2026
Privacy Policy
This page explains what personal data is processed for ryzhov.website, connect.ryzhov.website, apt.ryzhov.website, and the related owner tools.
Controller and Contact
The website is operated by Artem Ryzhov. For privacy questions or requests, use the privacy request page or email artem@ryzhov.website.
Purposes, Legal Bases, and Retention
| Purpose | Personal data | Legal basis | Retention |
|---|---|---|---|
| Contact, hiring, and collaboration messages | Name, email, optional company/reason/link/message, and limited technical metadata such as IP address and user agent for abuse diagnostics. | Steps before a possible contract and legitimate interest in replying and preventing abuse. | Normally no longer than needed to handle the conversation, unless the conversation becomes part of an active project or legal record. |
| Account login and owner tools | Login provider identifier, email, display name, optional profile photo, and a session identifier stored server-side. | Legitimate interest in access control and account security. | Session cookies use the selected session lifetime. Account records remain while the feature is used or until deletion is requested where legally possible. |
| Live browser-call requests | For normal requests: name, email, reason, media preference, timestamps, state, duration, and approximate traffic. For private invite links: invite link id, timestamps, state, duration, and approximate traffic. | Legitimate interest in direct communication and abuse control. | Call history is designed for short operational retention, currently up to 45 days. Audio/video is not recorded. |
| Web Push alerts for the owner phone | Push subscription endpoint and browser-generated subscription keys. | Consent and explicit owner action to enable alerts. | Until the owner disables alerts, the browser subscription becomes invalid, or cleanup removes expired records. |
| Open-source support redirects | The website redirects to Rabobank payment-request pages for selected voluntary amounts. The website does not implement payment tracking or a completion callback. | User request to navigate to the selected support option. | No payment records are stored by this website for this redirect. |
| Privacy-preserving analytics | Hostname, normalized path without query string, status code/class, bytes, response time, broad referrer category, broad client category, and anonymous backend outcome events such as contact success, call state, newsletter confirmation, and support/profile redirects. Analytics records do not include IP addresses, cookies, persistent visitor IDs, names, email addresses, messages, tokens, full user agents, full referrers, SDP/ICE data, or conversation content. A bounded aggregate-only summary may be processed by OpenAI to draft an optional report narrative; raw logs and the analytics database are not supplied. A copy of each private generated PDF report may be sent by email to the owner mailbox. | Legitimate interest in understanding service usage and reliability without tracking people. | Raw analytics input is retained for about 7 days. Anonymous daily/hourly aggregates are retained for up to 24 months. Private generated PDF reports are retained for 13 months. |
| Security, diagnostics, and rate limiting | Restricted server security logs may include IP address, request line, status, referrer, user agent, and timestamps for abuse investigation and rate limiting. | Legitimate interest in operating and securing the services. | Restricted security logs are retained for about 14 days. |
Recipients and Processors
Depending on the feature used, data may be processed by the VPS hosting provider, local Redis and mail services, MongoDB Atlas for account/blog data, GitHub or Google for OAuth login, browser push services for Web Push, Rabobank after a support link is selected, and OpenAI for an optional narrative generated only from bounded privacy-minimal aggregate counters.
No personal data is sold.
Security and Minimization
Normal call logs should not contain audio, video, SDP, ICE candidates, full session IDs, access tokens, or complete message bodies. The call feature is designed without recording.
Analytics is separated from restricted security logging. Analytics records are intentionally aggregated without IP addresses, cookies, persistent IDs, full user agents, full referrers, or query strings.
Your Rights
You may request access, correction, deletion, restriction, portability, objection to processing, and withdrawal of consent where consent is used. You may also lodge a complaint with the Dutch Data Protection Authority.