Privacy
policy

Updated 17 September 2026

01Who processes your data

The data controller is Kirill Ovchinnikov, owner of ovchinnikow.com. You can reach me on Telegram: @KirillAlexandrovich2002.

02What the enquiry form collects

The form asks for your name and a contact — a phone number or a Telegram handle. Optionally: your company website and a few words about the project. If you used the price calculator, the estimate you put together is attached as well — that is a set of project parameters, not personal data. Nothing else is asked for, and nothing is required beyond the first two fields.

Alongside the form, some technical details of the enquiry itself are recorded: your IP address, your browser identification string, the page the form was sent from, the language version of the site, and how you reached the site — advertising tags (UTM parameters and an ad click identifier) or the domain of the site you came from. They exist to tell a genuine enquiry from an automated one, to see which page or campaign produced the enquiry, and to know whether you saw prices in roubles or in dollars. They are not used for anything else.

Like any web server, the site's server also keeps technical logs, and they cover every visitor, not only those who send the form: IP address, time of the request, the address of the page requested including any advertising tags in it, the address of the page you came from, and the browser identification string. If a request causes an error or the form is sent too often, the IP address and the request address go into the error log. The logs exist to protect the site against attacks and are kept for 14 days.

03Where enquiries go and how long they are kept

An enquiry is received by the site on a rented server in Russia, provided by the hosting company RUVDS (MT Finance LLC), and written to the enquiry log on that server. A copy of the enquiry is emailed to my mailbox on Yandex 360, the Yandex mail service, which stores it on servers in Russia.

The form data — your name, contact, website, project description and cost estimate — and the IP address, browser details, page address, visit source and site language stored with the enquiry are not transferred outside Russia. Visit data is processed abroad by Google Analytics — and only if you have agreed to it (section 05).

An enquiry is deleted from the log automatically 365 days after it was sent. There is one exception: while processing of an enquiry is unfinished because of a technical fault, the server does not delete it, so that it is not lost. It is deleted once processing completes. The emailed copy stays in the mailbox while the conversation is live and is deleted by hand no later than one year after the enquiry.

Server backups, which include the enquiry log, are kept for 14 days and then deleted automatically. Backups are also downloaded to my computer, where at most the eight most recent copies are kept, none older than 56 days; the rest are deleted. So an enquiry removed from the log also disappears from the backups as they are replaced.

Technical server logs are kept for a limited time: application logs for 30 days, web server logs for 14 days. An enquiry can end up in the application log if the spam filter mistook it for a mass mailing or if it failed to send — so that it can still be found and answered.

Data is not sold, not passed to third parties for their own purposes, and not used for mailings you did not ask for.

04Cookies

The site itself sets no cookies. Yandex.Metrica sets its own cookies and browser storage entries for every visitor — it uses them to tell a returning visit from a new one. Google Analytics sets its cookies only once you have agreed. See the next section for both.

In local browser storage the site keeps your answer to the analytics banner, so the banner does not reappear on every page. For as long as the tab is open it also keeps how you reached the site (advertising tags or the domain you came from) and the calculator estimate, so both can be attached to an enquiry, plus a technical marker used when you switch language.

05Visit statistics

Yandex.Metrica counts visits, with data processed on servers in Russia: which pages were opened, how long was spent, which device was used. Ordinary counting runs for every visitor. For it Metrica receives your IP address and browser details, and recognises a returning visit by an identifier in its cookie. This data does not leave Russia.

Session recording — pointer movement, scrolling, clicks — is enabled only with your consent, because that is a record of your behaviour rather than a summary statistic. The contents of the enquiry form are excluded from recordings: the restriction lives in the page code rather than in a dashboard setting, so it cannot be switched off by accident. Your name, phone number and message are never recorded.

Google Analytics loads only with your consent: it is operated by Google LLC and the data is processed on its servers outside Russia. Your IP address is anonymised. Your name, phone number and the text of your enquiry are never sent to any analytics service.

There is deliberately no hidden pixel that fires without JavaScript: your choice is stored in the browser and cannot be read without JavaScript, so such a pixel would fire in defiance of a refusal.

A refusal is remembered as firmly as consent: the question will not reappear and the site keeps working in full. To change your mind, clear this site's data in your browser settings and the banner will ask again.

06Where the site is hosted and how data is protected

The site runs on a rented server in Russia, provided by the hosting company RUVDS (MT Finance LLC). Data transmitted between your browser and the server is encrypted (HTTPS), and the certificate renews automatically. Access to the server is restricted and protected; service keys are kept in a file with restricted permissions and never go into the site's source code. The enquiry log and the backups on the server are closed to its other users, and the emailed copy of an enquiry is sent over an encrypted connection. The form is protected against automated submissions.

07Your rights

You can ask what data about you is held, have it corrected or deleted, or withdraw your consent to its processing. Write to me on Telegram — I will action the request within three working days and confirm. Deletion covers every copy of the enquiry: the enquiry log on the server, the emailed copy, the backups on the server and on my computer, and the application log if the enquiry ended up there. Withdrawing consent needs no reason. There is no fixed procedure and no forms to fill in: this is a one-person studio, and the request goes straight to the person who can carry it out.

08Children

The site is not aimed at children and does not knowingly collect their data. If you believe a child has sent an enquiry, tell me and I will delete it.

09Changes to this policy

If the site starts collecting something new, this page changes first and the date at the top changes with it. Previous versions are not kept — what is written here is what applies today.

10Consent

By sending the form you agree to your data being processed for the purposes described above. Without that the enquiry cannot be answered: there would be no way to reach you. Consent is voluntary: instead of using the form you can message me on Telegram directly.

Web server logs (section 02) are kept without consent, on the basis of the controller's legitimate interest: without them the site cannot be protected against attacks (clause 7, part 1, article 6 of Russian Federal Law No. 152-FZ “On Personal Data”).