Personal data policy

1. Controller and scope

Self-employed seller, professional income tax (NPD) payer: Базиев Борис Ахсарбекович. INN 151605961158. Vladikavkaz, Russia.

Official personal data contact: borisbazievv@mail.ru. This policy covers the website https://hidden-trials.pages.dev/, hosted on Cloudflare Pages, data required for in-game purchases and support requests. There are no forms, website accounts or embedded payment pages.

This version describes the known processing scope before sales launch. Actual storage locations, recipients, specific retention periods and processor arrangements still require approval. It does not certify completed compliance with Law No. 152-FZ.

2. Purposes, categories and grounds

Purchases and claims use SteamID, payment reference, date, amount and status, shard credit and spending records, and unlocked access information. The purposes are linking a transaction to an account, crediting currency, providing access and resolving disputes. Legal grounds depend on contract formation and performance and statutory duties within the applicable limits of Article 6 of Law No. 152-FZ.

Support processes email or Discord ID and username, message contents and voluntarily attached evidence. This is needed to reply, verify transactions and protect rights. A user-initiated request is not consent to advertising or unlimited processing. Where a separate purpose requires consent, it is obtained separately.

Payment and receipt processing uses necessary transaction details and the receipt delivery contact within statutory duties. The website does not receive Steam passwords, CVV, full card numbers or passport details; do not send them to support.

3. Website visits and external services

The code sets no cookies and uses no localStorage, analytics, advertising pixels or external fonts. The calculator operates in the browser without sending the entered amount to a server. Ordinary site loading does not send SteamID to Discord or Robokassa.

The website is already hosted on Cloudflare Pages. To deliver and protect pages, Cloudflare infrastructure may process visitor technical data: IP addresses, request times, URLs, browser details and technical logs. The actual processing depends on service configuration. Retention periods and server locations for this configuration have not been confirmed and are not established by this policy. See the provider’s Cloudflare privacy policy.

Discord is the primary external support channel, used at the requester’s initiative; the link opens a separate service. Do not post payment information in public channels. If Discord is unavailable or unsuitable for sharing data, use official email. Discord’s own processing follows its policy.

Robokassa is planned for external payments and necessary payment processing, but is not connected. In-game payment operations remain test-only and real payments are not accepted. Robocheki SMZ («Робочеки СМЗ») has been selected for future automatic receipts and is also not connected yet. Its actual legal entity, parties’ roles, data and sharing grounds must be determined before launch. Cloudflare, Discord, mail and game infrastructure must also appear in the actual processing map; they are not automatically declared commissioned processors.

4. Retention, security and international operations

Only data needed for the relevant purpose is processed. Once the purpose ends, data is deleted or anonymized unless a contract or lawful basis requires continued retention, subject to Article 21 of Law No. 152-FZ. The specific retention schedule for game records, support, receipts and logs is not yet approved.

For the live website and before real payments launch, access restrictions, security and deletion measures, database locations, external service arrangements, Roskomnadzor notifications under Articles 12 and 22 and localization under Article 18(5) must be assessed. Actual Cloudflare Pages and Discord use does not establish verified compliance with Russian requirements, including Law No. 152-FZ. Visiting this site is not consent to any international transfer.

5. Rights, requests and updates

Send requests for access, correction, blocking, deletion, cessation or withdrawal of consent where consent is the basis to borisbazievv@mail.ru. The scope of rights and exceptions follows law. Rights to contact Roskomnadzor or a court remain available.

A request may require the information specified in Article 14 of Law No. 152-FZ to associate the requester with the records; provide it only privately and as necessary. Information and access under Article 20 have a 10-working-day period, extendable by no more than 5 working days with a reasoned notice. Other actions use their own statutory deadlines rather than this period automatically.

This policy does not replace required notifications or operational compliance. The seller must publish a version matching the approved actual arrangements before paid sales begin.