Privacy Policy

1. General Provisions

This Privacy Policy has been developed in accordance with Federal Law No. 152-FZ "On Personal Data" and governs the collection, use, and protection of the personal data of users of https://drops.115.studio (the "Service").

By using the Service, the User expresses full and unconditional consent to this Privacy Policy.

Operator: Individual Entrepreneur Vadim Vladislavovich Alekseychuk (ИП Алексейчук Вадим Владиславович), Taxpayer Identification Number (INN) 261507738143.

2. Personal Data Processed

The Service processes the following categories of data:

2.1. Data obtained during authentication:

• Telegram ID;
• first and last name (from the Telegram profile);
• Twitch ID;
• Twitch username;
• Steam Trade Link;
• Twitch Access Token, Twitch Refresh Token.

2.2. Technical and behavioral data:

• IP address;
• device and browser type;
• user actions on the Website;
• minutes spent watching streams;
• information about the streamers watched.

2.3. Authentication data:

• Twitch OAuth2 tokens (stored in encrypted form).

3. Cookies and Tracking Technologies

The Service uses cookies and similar technologies:

• Cloudflare;
• Tencent EdgeOne;
• Telegram;
• PostHog.

Cookies are used for:

• authentication;
• analytics;
• security;
• improving the operation of the Service.

The User may restrict cookies through browser settings.

4. Purposes of Data Processing

Personal data is used for:

• providing access to functionality;
• authenticating users;
• participation in giveaways;
• recording and displaying virtual Drops;
• analyzing user behavior;
• preventing fraud;
• ensuring security;
• complying with legal requirements.

5. Legal Bases for Processing

Processing is based on:

• the User's consent;
• performance of the Terms of Use;
• the Operator's legitimate interests;
• the requirements of Russian Federation law.

6. Disclosure of Data to Third Parties

Data may be disclosed to:

6.1. Services:

• Cloudflare (platform infrastructure and network traffic processing);
• Tencent EdgeOne (CDN);
• PostHog (analytics);
• Telegram, Twitch (authentication);
• LIS-SKINS (delivery of CS2 and Dota 2 in-game items).

6.2. In other cases:

• to government authorities of the Russian Federation;
• when protecting the Operator's rights.

The User consents to the cross-border transfer of data.

7. Data Storage and Protection

• Data is stored in the Russian Federation (initial recording).
• Encryption is used (including for OAuth tokens).
• Access is restricted to authorized persons.
• Technical protection measures are used.

8. User Rights

The User has the right to:

• obtain information about the use of their data;
• request the correction, deletion, or anonymization of personal data;
• withdraw consent to the processing of personal data.

9. Data Deletion

The User may request data deletion through the Website's technical support.

The Operator may retain data if required by Russian Federation law.

10. Limitations of Liability

The Operator is not liable for:

• actions of third parties or third-party services;
• data leaks caused by the User or third parties;
• technical failures beyond the Operator's control.

11. Changes to the Policy

This Policy may be changed without notice. The current version is published on the Website.