Privacy Policy

1. General provisions

This Policy describes what data the Cold Arms site (the “Site”) collects, why it is needed and how the Site's owner (the “Operator”) handles it. Operator's contact for personal data matters: quaswex8@gmail.com.

By using the Site and creating an account, you confirm that you have read this Policy. The Operator processes personal data on the grounds provided by applicable law, including performance of the terms of service (account, login, access recovery), the Operator's legitimate interests (security, protection against abuse) and the user's consent where it is required (for example, analytics cookies). The fact of review is recorded at registration (checkbox, date, document version).

2. What data we collect

We follow the principle of minimization — we collect only what the Site cannot work without:

• At registration: email address and nickname. We do not request your full name, phone, address or documents.
• When signing in with Google: only the data you allowed Google to share (usually your email address and profile name).
• Technical data: IP address, device and browser type at account login — to protect against hacking and abuse.
• Content: comments, predictions and other materials you post on the Site.
• Cookies: see section 5.

Your email address is not shown to other users of the Site and is used only for the purposes stated in this Policy.

3. Why we process data

• creating and running an account, logging in to the Site;
• confirming your email address and recovering access (emails with links);
• notifications about Site events (replies to comments, favorite athletes);
• moderation of user content;
• anonymized traffic statistics for the Site's development;
• security: detecting hacking and abuse.

We do not sell data, do not share it with ad networks and do not use it for mailings you did not subscribe to.

M.I.R.A. predictions are generated by automatically processing sports data published on the Site (athlete and fight statistics), not users' personal data. Decisions producing legal effects for users are not made solely on the basis of automated processing of personal data.

4. Who else sees the data

Data is shared with third parties only to the extent necessary for the Site to operate:

• Email service (SMTP provider Brevo) — receives your address to deliver service emails (email confirmation, password reset);
• Hosting provider — runs the servers where the database is stored;
• Web analytics service (Yandex.Metrica) — receives anonymized visit data (see section 5).

5. Cookies

The Site uses two kinds of cookies. Strictly necessary — for logging in and maintaining the session; they are always set, and without them authorization is impossible. Analytics (Yandex.Metrica) — for anonymized traffic statistics; they are used on the basis of your consent expressed via the cookie notice on the Site. You can disable cookies in your browser settings, but account login will then stop working.

6. Where data is stored and international transfer

Data is stored in the infrastructure of the hosting provider chosen by the Operator. Personal data may be processed and stored in the countries where the Operator's infrastructure or the service providers it uses are located (for example, the Brevo email service — in the European Union). In doing so, the Operator takes reasonable measures to ensure an adequate level of data protection.

7. Retention periods

• account data — while the account exists;
• after account deletion, data is deleted or anonymized within 30 days;
• security logs (login events, IP) — up to 90 days;
• service tokens (email confirmation, password reset) — until they expire.

8. Security

The Operator takes reasonable technical and organizational measures to protect personal data from loss, unauthorized access, alteration and disclosure. At the same time, absolute security of data transmission over the Internet cannot be guaranteed.

9. Your rights

You have the right to:

• obtain a copy of your data;
• correct inaccurate data;
• delete data (including full account deletion);
• restrict processing;
• object to processing where it is based on the Operator's legitimate interest;
• withdraw consent where processing is based on consent — without affecting the lawfulness of processing before withdrawal.

To exercise your rights, write to quaswex8@gmail.com. The request is processed within 30 days; to verify your identity we may ask you to write from the email linked to your account.

10. Age

The Site is not intended for persons under 16; we do not knowingly collect children's data. If the Operator becomes aware that personal data was provided by a person under the required age without the necessary consent of a legal guardian, such data may be deleted.

11. Changes to the Policy

When the Policy changes, the new revision is published on this page with an updated date. Material changes take effect for new registrations upon publication.