Privacy policy

The personal data controller is Arina Petrovna Prokuryakova (Прокурякова Арина Петровна), a self-employed person paying the professional income tax in Russia, taxpayer number (INN) 344815413410. In this text she is referred to as "I". For any questions about personal data, write to ohkurrva@gmail.com.

This policy applies to the website ohkurrva.art. It follows Russian Federal Law No. 152-FZ "On Personal Data" and, for visitors from the European Union, the EU General Data Protection Regulation (GDPR).

From a request: your name or nickname, a contact, the description of the order and characters, reference links and files, the chosen options, a promo code or subscriber profile, and the currency. Stored together with the request: the dates it was created and edited, the number of edits and cancellations, the versions of the Terms of service and of this policy in force on the request date, and a record of your consent.

When you look up an order by code: if the code is wrong, I store the IP address and a hash of the entered code to prevent guessing other people's codes.

In your browser: cookies with the language and currency you chose. The site also keeps your language, currency, colour theme and your order codes in your browser's storage — these entries stay on your device and are not sent to me.

The site does not use visitor analytics or advertising trackers.

• To review your request, contact you, complete the order and deliver the files.
• To show the order on the public queue board. The board shows no contact, and the name is shortened to its first letter.
• To take the history of your orders — the number of orders, cancellations and edits — into account for individual terms and discounts.
• To protect the site from guessing order codes.
• To remember the language and currency you chose.

Under 152-FZ — your consent, which you give with the checkbox in the request form, and the performance of the contract you enter into by sending a request.

Under the GDPR — performance of a contract (Art. 6(1)(b)), consent (Art. 6(1)(a)) and my legitimate interest in protecting the site from abuse (Art. 6(1)(f)).

Request data is stored on my server in Russia. Only I have access to it. The site transfers data over a secure HTTPS connection.

• References and attachments are deleted 3 months after the order is completed.
• The rest of the request data is kept until you withdraw your consent: it is needed to take your order history into account.
• Records of wrongly entered codes are deleted after 7 days.
• Language and currency cookies stay in your browser for up to one year.

I do not sell data or share it for advertising. Some of it may be accessed by:

• Lava.top — if you pay through this service. It processes payment data under its own rules.
• Google — I deliver finished files through Google Drive.
• Public authorities — only when the law expressly requires it.

Google and Lava.top servers may be located outside Russia, so such a transfer may be cross-border.

You can find out what data of yours I process, ask me to correct or delete it, withdraw your consent and object to processing. Visitors from the EU may also receive their data in a portable format and complain to the supervisory authority of their country; in Russia a complaint can be sent to Roskomnadzor.

Write to ohkurrva@gmail.com and include the order code or the contact from your request so I can find your data. I will reply within 10 working days.

You can withdraw your consent by writing to ohkurrva@gmail.com. After that I will delete your data within 30 days, except for what I must keep by law — for example, receipt records in the "My Tax" (Мой налог) service. If the order is not finished yet, I will not be able to complete it without the data.

If you are under 18, send a request with the consent of a parent or another legal guardian.

A new version is published on this page with a new date. Each request keeps the version of the policy in force on the date it was sent.

If you press “Accept” in the cookie banner, the site counts anonymous visit statistics; if you press “Decline”, or your browser sends GPC or DNT, visit statistics are not counted. What is counted: which sections and buttons you opened, how far and how long you scrolled, where you came from (the referrer domain and utm tags), which step of the order form you stopped at and in which field an error occurred (the field name, not its value), the chosen site language and the browser language, the device class, system and browser, the screen width, the page load speed, the type of script error, the label of the experiment the page takes part in, and the country. The device class, system and browser are derived by the server from the User-Agent header at the moment of receipt, and the header itself is not stored; the country is derived from the IP address, and the IP itself is not stored. Not stored: field values and the text of the order, click coordinates, the IP, the User-Agent and any statistics cookie. The random visitor number used to recognise returns is described in the “Returns” section below. Detailed events are kept for 30 days, after which only daily totals not tied to a page load remain, for 25 months. If you press a link to a paid network, the number of the feed post you came from and the domain of the site you went to are saved, without the rest of the link address; the scroll depth on the Terms, the offer and the policy is part of the overall scroll depth, and the retention periods are the same: 30 days and 25 months. Separately, the site counts how many times “Accept” and “Decline” were pressed per day: a single number per day and per choice, with no device, country, source or identifier; it is not counted with GPC or DNT or from the device of the site owner, and is kept for 25 months. The server is located in Russia.

If you pressed “Accept” in the cookie banner, the site saves a random number in your browser (in localStorage) to recognise you when you return. The number is not linked to orders and contains no name, email or other information about you. Raw records with this number are kept for 30 days; the daily totals contain no number, only counts: how many visitors there were and how many of them returned. The number is not saved if you pressed “Decline” or your browser sends GPC or DNT. Your choice is stored in a separate cookie, ohkurrva_returns. If you withdraw consent, the number and the records under it are deleted immediately. You can erase the number at any time with the “Forget me” button on this page: it immediately deletes the number in your browser and the records under it on the server.

When you open your order by its link and collection is switched on, the site stores one mark: the time the order was last opened. Not stored: the IP address, the browser string (User-Agent), the device class, the language, the country, the time on the page, cursor movements, the number of openings, going to payment, downloading files and the order code. Each new opening replaces the previous mark. The mark is visible only to me, the artist, in the order card; it does not enter the general visit statistics. It is kept as long as the order exists and is deleted together with it. The mark is not recorded if you pressed “Decline” in the cookie banner or your browser sends GPC or DNT. If you made no choice in the cookie banner, the mark is recorded. Records of this kind do not store the IP address; requests with a wrong order code go to the general log that protects against code guessing.

If you send a review of a finished order and tick the separate consent checkbox, the review may be shown on the site. What is published: the rating, the text of the review and the signature, which is your name in a mask, for example “A*** K***”. What is not published: your contact and the order details. A review appears on the site only after the artist has checked it. A sent review can be edited within 7 days of sending, while it is not yet published; a published review cannot be edited.