Personal Data Processing Policy
This Privacy Policy ("Policy") is developed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Federal Law of the Russian Federation No. 152-FZ "On Personal Data".
This Policy applies to all personal data that the Operator may receive from Users while using mykreatool.com ("Service", "Website").
By using the Service, you agree to the terms of this Policy. If you disagree, please refrain from using the Service.
Name: MyKreaTool
Website: https://mykreatool.com
Data protection email: oz.ivan2020@gmail.com
Server location: Germany (European Union)
| Category | Data | When collected |
|---|---|---|
| Registration | Name, email address | Upon registration |
| Contact | Email address | When contacting support |
| User content | Uploaded files (video, audio, documents, images) | When using tools |
| Category | Data | Purpose |
|---|---|---|
| Technical | IP address, browser type/version, device type, OS, screen resolution | Service functionality |
| Cookies | Session IDs, consent preferences, analytics IDs | Functionality, analytics |
| Analytics | Pages viewed, time on site, traffic sources, clicks, scrolling | Service improvement |
We do not collect: passport data, payment card details, biometric data, health data, political or religious beliefs, criminal records.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Registration and authentication | Art. 6(1)(b) — performance of contract |
| Providing Service features | Art. 6(1)(b) — performance of contract |
| Analytics and improvement | Art. 6(1)(a) — consent |
| Security | Art. 6(1)(f) — legitimate interest |
| Sending login codes | Art. 6(1)(b) — performance of contract |
| Legal obligations | Art. 6(1)(c) — legal obligation |
| Type | Purpose | Retention |
|---|---|---|
| Essential | Authentication, session, consent | Up to 30 days |
| Analytics (Yandex Metrica) | Visitor statistics, session recordings | Up to 1 year |
| Analytics (Google Analytics) | Visitor statistics, traffic sources | Up to 2 years |
You can disable cookies in your browser settings. Disabling essential cookies may affect Service functionality.
We do not sell, rent, or share personal data for commercial purposes. Data may be shared with:
| Recipient | Purpose | Data type |
|---|---|---|
| Yandex (Metrica) | Web analytics | Anonymized visit data |
| Google (Analytics) | Web analytics | Anonymized visit data |
| Google (Gmail SMTP) | Sending login codes | Email address |
| Contabo GmbH (Germany) | Server hosting | All Service data |
Our servers are located in Germany (EU), ensuring GDPR-compliant data storage.
Analytics data may be processed on servers outside the EU. Such transfers rely on Standard Contractual Clauses and the respective services' data protection frameworks.
| Data category | Retention period |
|---|---|
| Account data | Duration of account + 30 days after deletion |
| Login codes | 10 minutes (auto-expiry) |
| Uploaded files (tools) | Processed in memory, deleted immediately after processing |
| Server logs | Up to 90 days |
We implement organizational and technical measures including: SSL/TLS encryption, secure server access controls, regular software updates, security monitoring, and incident response procedures.
Under GDPR, you have the right to:
To exercise your rights, email oz.ivan2020@gmail.com. We will respond within 30 days.
You may withdraw consent by emailing oz.ivan2020@gmail.com with the subject "Withdrawal of consent". We will cease processing and delete your data within 30 days, unless processing is required by law.
The Service is not intended for persons under 16. We do not knowingly collect data from children. If we learn that data has been provided by a child, we will promptly delete it.
We may update this Policy. The current version is always available at /privacy. Registered users will be notified of significant changes. Continued use of the Service constitutes acceptance of the updated Policy.