1. General provisions
This policy explains what personal data the website techteastudio.cc receives, why it is needed, who receives it, how long it is kept and how you can control it.
The policy covers every page of the site: the Russian and English versions, the /ronald page and the request form. It does not cover third-party sites and services that the site links to, such as Telegram and GitHub: they have their own rules.
The policy is written under Russian Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" (the Law) and published under Article 18.1(2) of the Law. This English text is a translation. The Russian version at /ru/privacy is the legally binding one; if the two differ, the Russian text applies.
Terms
- Site: techteastudio.cc with all its pages.
- Operator, we: the person named in section 2. The operator decides why and how personal data is processed and is responsible for it.
- Visitor, you: a person who opens the site or sends a request.
- Personal data: any information that relates, directly or indirectly, to an identified or identifiable person.
- Processing: any action with personal data, such as collecting, recording, storing, using, transferring or deleting it.
- Processor: a company that processes personal data on the operator's behalf (Article 6(3) of the Law).
- Cross-border transfer: a transfer of personal data to the territory of a foreign country, to a foreign person or authority.
2. Operator
The site is run by Tech Tea Studio. The personal data operator is the studio Tech Tea Studio.
The operator organises the processing of personal data personally and is responsible for it.
3. What data we process
From the request form
- your name, up to 100 characters;
- the email address for our answer;
- the message text, 10 to 5,000 characters;
- files, if you attach them: up to 5 files, 10 MB in total (PDF, Word and RTF documents, Excel spreadsheets, PowerPoint presentations, OpenDocument files, text files and images);
- the date and time the request was sent;
- the mark that consent was given and the language of the page the request was sent from.
You give this data voluntarily. Without a name, an email address and a message we cannot answer the request.
Please do not send information about health, racial or ethnic origin, political views, religious or philosophical beliefs, intimate life or criminal records, biometric data, or other people's personal data without their consent, in the message or in files. We do not need it to answer a request.
Technical data
- the IP address the form was sent from and the time it was sent: we use them to limit the number of requests from one address;
- server log entries for every request to the site: the IP address the request came from, the request method, the address of the page on the site, the date and time, and messages about server errors, such as a request email that could not be sent;
- the data of every request to the site that passes through Cloudflare (section 6): the IP address, the browser and device details the browser sends with the request, the address of the page, the date and time.
What we do not collect
The site itself sets no cookies and asks for no registration. The server does not store requests: it holds the text and files in memory only while it sends the email and never writes them to disk. Your choice to pause the animation on the home page, the look settings and the location from the /ronald page are not sent to our server, see section 10.
4. Purposes, legal grounds and periods
We process data only for the purposes below and only as much as they require. For each purpose we list the data, whose data it is, the legal ground and the retention period.
4.1. Answering requests, discussing and concluding a contract
- Data: name, email address, message text, files, date and time of sending, the consent mark and the page language.
- Whose data: visitors who have sent a request.
- Legal ground: your consent (Article 6(1)(1) of the Law), which you give by ticking the box in the request form. The consent is a separate document: Consent to personal data processing. If you want to conclude a contract with us, the ground is also the need to conclude it at your request (Article 6(1)(5) of the Law).
- Period: as long as needed to answer and discuss the task, but no longer than 3 years after your last message. If a contract has been concluded and it requires keeping the data longer, we keep it as long as the contract requires.
4.2. Protecting the form from abuse
- Data: IP address and the time the form was sent.
- Whose data: visitors who send the form.
- Legal ground: the operator's legitimate interest in protecting the form from spam and automated sending (Article 6(1)(7) of the Law). This does not infringe your rights: the address is used only to count requests.
- Period: 10 minutes, in the server's memory only.
4.3. Keeping the site working and secure
- Data: server log entries and the data of requests that pass through Cloudflare: IP address, browser details, request method, page address, date and time.
- Whose data: all visitors of the site.
- Legal ground: the operator's legitimate interest in keeping the site working, finding errors and fending off attacks (Article 6(1)(7) of the Law).
- Period: server logs are kept for 30 days; the data at Cloudflare is kept for the periods in section 7.
4.4. Consent
Consent for purpose 4.1 covers the data from the request form (section 3), the actions in section 5 and the transfer of the request data to the processors in the USA, Cloudflare and Resend (section 6). It is valid until the purpose is achieved, but no longer than 3 years after your last message, or until you withdraw it. You can withdraw consent at any time by writing to us (section 9). After that we stop processing and destroy the data unless we have another ground the Law allows, such as a contract with you.
5. How we process data
We perform these actions with the data: collection, recording, storage, use, transfer (provision and access), blocking, deletion and destruction.
Processing is automated: it uses the site's server, the Cloudflare network, the Resend email sending service and the operator's mailbox.
We do not disseminate your data, that is, we do not disclose it to an unlimited number of people, and we do not sell it. We make no decisions with legal consequences for you based solely on automated processing.
6. Who receives the data
The Cloudflare network
The site works through the Cloudflare network, which protects it from attacks and delivers its pages. The network is provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Every request to the site, including a request from the form with its files, first passes through Cloudflare's servers and only then reaches the site's server. Cloudflare processes the data on the operator's behalf under its Data Processing Addendum.
Cloudflare receives the IP address and browser details with every request, the addresses of the pages you open and everything you send through the request form. If a page fails to load because of a network error, the browser may send Cloudflare a report about that error.
Resend, the email sending service
The site's server passes a request from the form to Resend, which delivers it as an email to the operator's mailbox. The service is provided by Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA. It processes the data on the operator's behalf under its Data Processing Addendum.
Resend receives all the data of a request: name, email address, message text, files, date and time of sending, the consent mark and the page language.
Cross-border transfer
Passing data to Cloudflare and Resend is a cross-border transfer to the USA. Cloudflare also processes requests in the data centres of its network in many countries, usually in the one nearest to you. The USA is not on the list of foreign countries that adequately protect the rights of data subjects; Roskomnadzor, the Russian data protection authority, approves that list.
The data of a request goes abroad only when you send a request after ticking the consent box in the form. Cloudflare receives the technical data of requests every time the site is opened: the site cannot work without it.
The operator's mailbox
The email with the request arrives in the operator's mailbox and is stored by the operator's mail provider.
Hosting
The site's server is hosted by a hosting provider. The server keeps request logs; requests and files are not stored on it.
State authorities
We give data to state authorities only in cases the law expressly provides for.
We give your data to no one else.
7. Retention and destruction
- Requests and files in the operator's mailbox: as long as needed to answer and discuss the task, but no longer than 3 years after your last message, unless a concluded contract requires keeping them longer.
- IP address for protecting the form: 10 minutes in the server's memory. It is never written to disk.
- Server logs: 30 days, then deleted.
- Copies of emails at Resend: Resend keeps sent emails and the delivery log for the period set by the plan of the operator's account, and then deletes them.
- Request data at Cloudflare: Cloudflare keeps request logs for the periods set by its rules and the operator's plan, and then deletes them.
When the purpose of processing is achieved or you withdraw consent, we destroy the data within 30 days unless we have another lawful ground to keep it. If the data cannot be destroyed within that time, we block it and destroy it within 6 months, unless a federal law sets another period.
If we find that data is processed unlawfully, we stop that processing within 3 working days. If it cannot be made lawful, we destroy the data within 10 working days.
To destroy data, we delete the emails with the request and files from the mailbox, including the trash, and the entries from the server logs. We confirm destruction in the manner set by Roskomnadzor Order No. 179 of 28 October 2022.
8. How we protect data
We take the legal, organisational and technical measures that Article 19 of the Law requires to protect data from unlawful access, alteration, deletion, copying and dissemination. At present these are:
- the site is served only over HTTPS, so form data leaves your browser encrypted;
- the server also passes requests to Resend over a secure HTTPS connection;
- the server holds the text and files of a request in memory only while it sends the email and never writes them to disk;
- the form accepts only documents, spreadsheets, presentations, text and images, checks every file and rejects files with macros, scripts or files inside, and files protected with a password;
- the number of requests from one address and from the site as a whole is limited, so the form cannot be used for automated sending;
- the site works through the Cloudflare network, which fends off network attacks, and the server rejects typical requests from vulnerability scanners;
- only the operator has access to the mailbox with the requests.
9. Your rights
9.1. What you can do
- find out whether we process your data and get the information listed in Article 14(7) of the Law: what data and where it came from, why and on what ground we process it, how we do it, who we give it to, how long we keep it, who processes it on our behalf and whether it is transferred to other countries;
- demand that we correct, block or destroy data that is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose (Article 14(1) of the Law);
- withdraw your consent to processing (Article 9(2) of the Law);
- demand that we stop processing (Article 21(5.1) of the Law), except where the Law allows it to continue;
- appeal against our actions or inaction to Roskomnadzor or a court (Article 17 of the Law).
All of this is free of charge.
9.2. How to use your rights
Write to us through the request form on the home page. Please write from the email address you gave in your request: this lets us check that the data is yours, and we will answer to that address.
A formal request under Article 14(3) of the Law must contain:
- the number of the main identity document of you or your representative, its date of issue and the authority that issued it;
- information confirming your relationship with us, such as the date of your request and the email address given in it, or other information confirming that we process your data;
- your signature or the signature of your representative.
Such a request can be sent as an electronic document signed with an electronic signature.
9.3. Response times
- information about your data: within 10 working days of receiving the request. The period can be extended by no more than 5 working days if we send you a notice with the reasons;
- correcting data: within 7 working days after you confirm that it is incomplete, inaccurate or outdated;
- destroying data that was unlawfully obtained or is not needed for the purpose: within 7 working days after you confirm this;
- stopping processing at your demand: within 10 working days. The period can be extended by no more than 5 working days if we send you a notice with the reasons;
- after you withdraw consent: we stop processing and destroy the data within 30 days unless there is another lawful ground.
You can ask for the information again no earlier than 30 days after the first request, or sooner if our first answer was incomplete.
11. Children
The site and the request form are meant for adults, and we do not knowingly collect data of minors. If you are under 18, please ask a parent or another legal representative to write to us. If we learn that we have received a minor's data without the consent of their legal representative, we will delete it.
12. Changes to this policy
This version is in effect since Oct 1, 2026. We update the policy when the law or the way the site works changes. A new version is published on this page and takes effect on the date stated in it. We keep earlier versions and will send them on request.
13. Contacts
Operator: the studio Tech Tea Studio.
You can send a question about personal data through the request form on the home page.