Privacy Policy

1. Scope and controller

This Policy applies to the personal website bigvova.com. The controller of technical data is the individual website owner operating the project under the name bigVova. The main public contact channel appears at the end of this document.

This Policy describes the current website. It must be updated, together with any required consent mechanisms, before accounts, comments, newsletters, forms, analytics, or similar features are introduced.

2. Data processed

2.1. Technical request data

When you open the website, server infrastructure may automatically receive your IP address, request date and time, requested URL, request method and response status, browser and device information (User-Agent), referring page (Referer), Accept-Language header, and technical proxy or CDN headers.

2.2. Preferences and local storage

• lang cookie — selected website language;
• lang_explicit cookie — records a manual language choice;
• bigvova_cookies_consent cookie — response to the cookie notice;
• theme in localStorage — selected color theme;
• bigvova_cookies_consent_v1 in localStorage — local copy of the cookie choice;
• bigvova_lang_hint_dismissed_v2:<languages> in localStorage — dismissal of a specific language suggestion.

localStorage values remain in the browser and are not normally sent to the server automatically. The Cookie Policy explains their purpose and available controls.

2.3. Data not currently requested

The website does not request your name, telephone number, postal address, payment details, identity documents, or similar information through user forms. It does not perform advertising profiling or sell visitor data.

3. Purposes and legal grounds

• delivering pages and maintaining technical operation;
• security, error diagnosis, and abuse prevention;
• selecting the interface language and retaining preferences;
• approximately detecting a country for the regional set of social links;
• meeting legal obligations and protecting legitimate interests and legal claims.

Processing is limited to what is necessary to operate the website, meet applicable obligations, and pursue legitimate interests in security and availability. Where applicable law requires consent for a local record or feature, you may give or withdraw that consent through the website interface and browser settings.

4. Region detection

To vary the social-link list, the website may use a country code supplied by a CDN or proxy, a trusted infrastructure header, or an approximate local GeoIP lookup of the public IP address. It does not request a precise street address or GPS coordinates.

If a connection is detected as Russian, VK, GitHub, and Telegram remain in the general social-icon list, while X, Facebook, and Instagram are hidden. Other and undetermined regions receive the full social-icon set. A separate website-status button opens VK for a Russian IP address and Telegram for other IP addresses.

Detection is not guaranteed to be accurate. A VPN, proxy, corporate network, mobile carrier, or database error may produce a different link set. The result is used only for regional interface configuration, not advertising or user profiling.

5. Retention and security

Technical requests may be recorded in web-server, reverse-proxy, hosting-provider, or CDN logs. Retention depends on technical necessity, security requirements, and infrastructure settings; records should be deleted or overwritten when no longer needed.

The Administrator uses reasonable organizational and technical safeguards, including access restrictions, software updates, encrypted connections for public deployment, and data minimization. No transmission or storage method is completely secure.

6. Providers and external services

Technical data may be available to hosting, CDN, network-security, and infrastructure providers only as needed to perform their services, and to public authorities where disclosure is legally required. The Administrator does not sell visitor data.

Before you click an external link, this website does not intentionally transmit data to a social platform for the purpose of opening the linked profile. After you follow a link, your browser connects to the external service, which independently determines its processing rules. Available links may vary by region.

Infrastructure or providers located outside your country may involve international processing. Before enabling such infrastructure, the Administrator must assess applicable notification, localization, contractual safeguard, and cross-border transfer requirements.

7. Your rights

Depending on applicable law, you may request information, access, correction, blocking, deletion, or restriction; object to processing; withdraw consent; and complain to a competent supervisory authority.

A request may require enough information to reasonably verify the requester and locate relevant records. Where the website has no data capable of identifying a visitor, some requests may be technically impossible to fulfill.

8. Children

The website is not specifically directed at children and does not knowingly request personal data from them. A feature requiring parental or guardian consent must not be launched without an appropriate mechanism.

9. International visitors

Visitors in the European Economic Area, the United Kingdom, and other jurisdictions retain rights provided by applicable local law. Processing is limited to technical website purposes, and the website does not make decisions producing legal effects solely through automated profiling.

10. Changes and contact

This Policy may change when features, infrastructure providers, or applicable law change. A new version applies from the date shown at the top of the page.