Cookie Policy

1.1. This Cookie and Similar Technology Policy (the “Policy”) governs cookies and similar technologies used when visiting https://replaybox.ru/ and its pages (the “Website”).

1.2. The Website owner and personal data controller is individual entrepreneur Pavel Nikolaevich Strukov. INN: 771314210244. OGRNIP: 324774600166372. Address: 127591, Russian Federation, Moscow, 69 Dubninskaya Street, Building 2, Apartment 126. Email: support@replaybox.ru

1.3. This person is referred to below as the “Operator”.

1.4. The Policy applies together with the Operator's Personal Data Processing Policy at https://replaybox.ru/legal/privacy.

1.5. Some information obtained using cookies and similar technologies may, alone or combined with other information, directly or indirectly identify a User. In that case, it is processed in accordance with Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”.

1.6. Analytics technologies are not used before User consent is obtained. Refusing analytics cookies does not restrict access to the Website's core features.

1.7. The Operator does not use cookies to make decisions with legal consequences for the User based solely on automated processing.

2.1. A User is an individual visiting the Website or using its features.

2.2. Cookies are small pieces of data that the Website or connected services store on or retrieve from the User's device when the Website is visited.

2.3. Similar technologies include local information storage and processing technologies, including localStorage, sessionStorage, software identifiers, pixels, tags and other technical tools.

2.4. Essential cookies are needed for authentication, security, remembering User choices and operating requested Website features.

2.5. Analytics cookies and similar technologies are used to measure Website traffic, analyze User activity and improve the Website.

2.6. Consent is the User's freely given, specific, informed, conscious and unambiguous expression of intent, made by choosing the corresponding button in the cookie management interface.

3.1. Cookies and similar technologies may process:

• IP address;
• Website visit date and time;
• visited page address;
• the referring page address;
• browser information and settings;
• operating system type and version;
• device type and screen resolution;
• approximate region inferred from the IP address;
• technical browser, device and session identifiers;
• Website activity, including navigation, clicks, scrolling and page viewing duration;
• information about ad blockers;
• data needed to authenticate and maintain a user session;
• the User's selected cookie preferences;
• technical results of automated request protection checks.

3.2. The Operator does not aim to process special categories of personal data, criminal record information or biometric personal data through cookies.

3.3. Users should not provide personal data through page addresses, URL parameters, UTM tags or other technical parameters that analytics services may receive.

4.1. Essential cookies

4.1.1. Essential cookies are used without separate User consent where processing is necessary to conclude or perform a contract at the User's initiative, ensure Website security or pursue the Operator's legitimate interests, provided the User's rights and freedoms are not infringed.

4.1.2. The Website uses the following essential cookies:

4.1.3. The replaybox_session cookie is set after User authentication.

4.1.4. Disabling essential cookies through the browser may prevent authentication, preference storage or use of some Website features.

4.1.5. Manually changing the Website language creates a replaybox_language cookie with the value ru or en for 6 calendar months. It stores only the selected language. Automatic selection uses an offline IP-to-country database without sending the IP address to a third-party geolocation service; if the country is unknown, browser language is used. The device's precise location is not requested. Automatic selection does not create a replaybox_language cookie. The User may change language with the Website switcher or delete this cookie through the browser.

4.2. Analytics cookies

4.2.1. With User consent, the Operator uses Yandex Metrica, provided by YANDEX LLC, including Webvisor, click maps, scroll maps, navigation tracking and traffic measurement.

4.2.2. Yandex Metrica may process Website visit, device, browser, operating system, IP address, referral source and page activity information.

4.2.3. The main analytics cookies that may be used on the Website are:

4.2.4. Additional cookies, localStorage and sessionStorage entries may be used depending on the browser, region, counter settings and Yandex Metrica features.

The current list of Yandex Metrica technologies, purposes and retention periods is available at https://yandex.ru/support/metrica/ru/general/cookie-usage

4.2.5. Cookie lifetimes and retention periods for analytics information obtained through them may differ.

4.2.6. Webvisor may record Website activity, including navigation, clicks, scrolling and interface interactions. The Operator takes steps to exclude passwords, authentication field contents, email addresses, messages, payment data and other directly identifying information from recordings.

4.2.7. The Operator does not permit intentional transfer to Yandex Metrica of surnames, first names, patronymics, email addresses, phone numbers, passwords, payment details or other directly identifying information unless separately provided for by the service's features, the Personal Data Processing Policy and appropriate legal grounds.

Yandex Metrica Terms of Use: https://yandex.ru/legal/metrica_termsofuse/ru/

4.3. Functional and marketing cookies

4.3.1. As of this Policy's publication date, the Operator does not use separate functional or marketing cookies.

4.3.2. Before introducing them, the Operator will update this Policy and, where legally required, obtain separate User consent before processing begins.

5.1. Registration, access recovery and individual plan request pages may use Cloudflare Turnstile to protect the Website, accounts and Users against bots, automated requests, credential guessing and other abuse.

5.2. Turnstile may process:

• the User's IP address;
• technical HTTP request parameters;
• browser and device information;
• information about actions required to pass verification;
• a one-time verification token;
• verification result;
• the Website address where verification occurred.

5.3. Processing this information is necessary for security, abuse prevention, entering into a contract at the User's initiative and providing requested registration or access recovery features.

5.4. Refusing verification may make the protected action, such as registration or access recovery through the relevant form, unavailable.

5.5. The Operator does not use Turnstile for its own advertising or User marketing profiling.

Service documentation: https://developers.cloudflare.com/turnstile/

6.1. On the first Website visit, the User is shown a cookie management interface.

6.2. The interface contains:

• brief information about essential and analytics technologies;
• a link to this Policy;
• an “Accept analytics cookies” button;
• a “Reject non-essential” button;
• a “Customize” button.

6.3. Analytics tools must not load or transmit data until the User presses a button expressing consent.

6.4. Silence, continued browsing, closing the banner or inaction does not constitute consent to analytics technologies.

6.5. Refusing analytics cookies does not prevent use of the Website's core features.

6.6. Consent is obtained separately from acceptance of the User Agreement, public offer, personal data processing policy and other documents.

6.7. The Operator may retain records of consent or withdrawal, including date, time, Policy version and selected settings, to the extent needed to demonstrate legal compliance.

6.8. Consent lasts no longer than 12 months or until withdrawal, whichever occurs first.

6.9. Consent may be requested again sooner if technologies, processing purposes, recipients or this Policy change materially.

7.1. Users may change preferences or withdraw consent at any time through “Cookie settings” in the Website footer.

7.2. After consent is withdrawn:

• further loading of analytics tools stops;
• further collection of analytics information stops;
• Operator-controlled analytics cookies are deleted where technically possible;
• a withdrawal record is retained to the extent necessary for legal compliance.

7.3. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

7.4. De-identified, aggregate statistics that do not identify an individual User may be retained after withdrawal.

7.5. Users may also delete or block cookies through their browsers. Cookie management procedures vary by browser.

7.6. Deleting cookies may sign the User out, reset preferences and display the cookie management interface again.

8.1. Information obtained through analytics technologies may be transferred to YANDEX LLC, which processes the relevant personal data on the Operator's instructions and under Yandex Metrica's terms.

8.2. Technical information needed to protect against automated requests is sent to Cloudflare Turnstile.

8.3. The Operator does not sell cookie-derived information or provide it to third parties for their own marketing.

8.4. Information may also be transferred:

• at the request of a court or authorized government authority;
• where expressly provided by Russian legislation;
• to the Operator's contractors responsible for Website operation and security, under an appropriate contract and only to the necessary extent.

8.5. Cookies are stored primarily on the User's device. Information obtained through them may be processed in the Operator's and engaged processors' information systems.

8.6. When collecting Russian citizens' personal data, the Operator ensures compliance with requirements to use databases located in the Russian Federation.

8.7. Personal data is not transferred across borders without completing preliminary requirements and procedures established by Russian legislation. Details of actual cross-border transfers, where applicable, appear in the Personal Data Processing Policy.

9.1. The Operator takes necessary legal, organizational and technical measures to protect processed information against unauthorized or accidental access, alteration, blocking, copying, disclosure, dissemination, destruction and other unlawful actions.

9.2. Such measures may include:

• access controls;
• secure HTTPS connections;
• HttpOnly, Secure and SameSite cookie attributes where technically applicable;
• access controls for analytics systems;
• retention limits;
• software updates;
• security event logging;
• backup and recovery;
• oversight of engaged processors.

9.3. Users must keep their devices secure and must not share account access credentials with third parties.

10.1. The User may:

• obtain information about processing of their personal data;
• withdraw consent to analytics technologies;
• request correction, blocking or destruction of personal data where lawful grounds exist;
• object to processing where provided by law;
• challenge the Operator's actions or inaction before Roskomnadzor or a court;
• use browser tools to block and delete cookies.

10.2. Users may exercise their rights by contacting support@replaybox.ru.

10.3. Requests should preferably include information allowing the Operator to identify their substance and verify the applicant's identity without collecting excessive personal data.

11.1. The Operator may change this Policy following changes in legislation, technologies, processed information or Website operation.

11.2. A new version takes effect upon publication unless it specifies a different date.

11.3. The Operator obtains consent again if processing purposes or optional technologies change materially.

The current Policy is always available at https://replaybox.ru/legal/cookies

Individual entrepreneur Pavel Nikolaevich Strukov. INN: 771314210244. OGRNIP: 324774600166372. Address: 127591, Russian Federation, Moscow, 69 Dubninskaya Street, Building 2, Apartment 126. Email: support@replaybox.ru.