Privacy Policy yooma.su

The operator is IP Emelyanov Aleksey Alekseevich, TIN 507901601620, OGRNIP 324508100159341. Contact email for personal-data inquiries: support@yooma.su. Postal address is provided upon written request. Operator's website: https://yooma.su.

This Policy is drafted in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and applies to all data the Operator receives about the User through use of yooma.su and its related services.

3.1. Data transmitted automatically:

• IP address;
• information from cookies;
• browser, operating system, and device details;
• time and duration of the visit, pages visited;
• referrer (source page).

3.2. Data the User provides voluntarily:

• Steam identifier (steam_id), display name, and avatar — obtained automatically via Steam OpenID;
• email address — when paying for services, for sending the receipt and payment-related correspondence;
• Steam trade URL — when configuring the profile to receive in-game items;
• personal profile URL, privacy settings, displayed nickname and its styling;
• payment details (amount, chosen payment method) — when topping up the balance.

3.3. The Operator does NOT collect: surname, first name, patronymic, passport data, bank-card numbers, SNILS, or the User's TIN. Bank-card details are processed by the chosen payment gateway, not the Operator.

• identifying the User and granting access to site functionality;
• processing payments and topping up the in-game balance;
• providing in-game items and services;
• technical support and feedback;
• web analytics and improving site performance (with explicit consent);
• error collection and analysis to fix failures (with explicit consent);
• fraud prevention and payment security;
• informing the User about news, promotions, and service updates (upon subscription).

• consent of the data subject (Art. 6 §1 cl. 1 of 152-FZ) — for analytics, cookies, marketing, and cross-border transfer;
• performance of the offer agreement (Art. 6 §1 cl. 5 of 152-FZ) — for processing payments and providing services;
• legitimate interests of the Operator (Art. 6 §1 cl. 7 of 152-FZ) — for fraud prevention and security.

6.1. Payment services (T-Bank, Robokassa, FreeKassa, CloudPayments, and others depending on the chosen method) — receive the email and payment amount needed to complete the transaction.

6.2. Yandex Metrica (LLC Yandex, Russian Federation) — anonymized data about visits and site behavior; transfer occurs only after the User's explicit consent.

6.3. Error-tracking service Glitchtip hosted at errors.yooma.su (server located in the United Kingdom, IP 51.89.117.193) — fragments of failed requests, session identifier, and user identifier; transfer occurs only after the User's explicit consent.

6.4. State authorities of the Russian Federation — upon a lawful request in the manner established by law.

6.5. Personal data is not transferred to or sold to any other third parties.

Transfer of data to the Glitchtip service at errors.yooma.su (United Kingdom) is carried out on the basis of the User's prior consent in accordance with Art. 12 of 152-FZ. The United Kingdom is included in the list of states providing adequate protection of the rights of personal-data subjects. The transfer is anonymized and does not include surname, first name, patronymic, or contact details.

The site uses cookies of two categories:

• technical cookies (authentication session, language choice, interface settings) — required for the site to function and do not require consent;
• analytical cookies (Yandex Metrica) — collect anonymized visit data and are loaded only after explicit consent through the cookie banner.

The User may decline analytical cookies in the banner upon entering the site, and may also disable cookies in the browser settings. In that case some site features may not function correctly.

• authentication data (steam_id, profile) — until the User deletes the account, plus 30 days of technical buffer;
• email used for payments — up to 3 years from the last payment (for accounting purposes);
• payment data — up to 5 years from the transaction (required by 402-FZ "On Accounting");
• Yandex Metrica analytics logs and cookies — up to 25 months;
• error data in Glitchtip — up to 90 days.

Upon expiration of the retention period, data is anonymized or destroyed.

The User is entitled to:

• obtain information about the processing of their data, the purposes, and the methods used (Art. 14 of 152-FZ);
• demand correction, blocking, or destruction of inaccurate or unlawfully obtained data;
• withdraw consent to processing at any time (Art. 9 §2 of 152-FZ); withdrawal of consent has no retroactive effect and does not affect the lawfulness of processing carried out before the withdrawal;
• file a complaint with Roskomnadzor or in court.

To exercise these rights, the User sends a written request to support@yooma.su, indicating the steam_id or email used on the site. A reply is provided within 10 working days.

The Operator applies technical and organizational measures to protect data: TLS encryption, access restrictions, audit logs, regular backups. In the event of unauthorized access or a data leak, the Operator sends an initial notification to Roskomnadzor within 24 hours of identifying the incident and a follow-up notification on the results of the internal investigation within 72 hours (Art. 21 of 152-FZ as amended in 2022). Affected subjects are notified in the manner established by law.

The Operator may amend this Policy. The current version is always available at https://yooma.su/privacy. The date of the most recent revision is indicated at the top of the document. Material changes are accompanied by a renewed request for the User's consent.

For all matters relating to personal-data processing: support@yooma.su.