Privacy Policy
This is a convenience translation. The Service is operated from the Russian Federation and this Policy is governed by Russian law (Federal Law No. 152-FZ «On Personal Data»); in case of any discrepancy the Russian-language version prevails.
1. General provisions
This Privacy Policy (the «Policy») defines how the personal data of users of the ShikiMatch service (the «Service») is processed and protected, and applies to all information that makschocomint@gmail.com (the «Operator») may obtain about a user while they use the Service.
The Policy is drawn up in accordance with Federal Law No. 152-FZ of 27.07.2006 «On Personal Data». By using the Service and/or signing in, the user confirms their consent to the terms of this Policy. If the user does not agree with the terms, they must refrain from using the Service.
2. Key concepts
- Personal data — any information relating, directly or indirectly, to a determined natural person (the data subject).
- Processing of personal data — any action with personal data: collection, recording, storage, use, anonymization, deletion.
- Operator — the person organizing and carrying out the processing of personal data.
3. What data we process
The Service works on the basis of publicly available Shikimori data that the user has made public themselves. When signing in and using the Service, the following are processed:
- the public nickname, identifier and avatar of the Shikimori profile, and the link to the profile;
- the user’s public anime list: scores, watch statuses and the related characteristics of the anime;
- technical data: IP address, cookies, browser type and version, device data, and the date and time of access to the Service;
- with consent to analytics — Yandex.Metrica data on page visits, transitions, clicks, scrolling, referral source, the approximate technical environment, and Session Replay recordings without the deliberate collection of passwords, payment details or other directly identifying information.
The Operator does not request or store the password to the Shikimori account. Authorization is performed via the OAuth protocol on the Shikimori side. The Operator does not process special categories of personal data.
4. Purposes of processing personal data
- providing the Service’s features: determining the viewer class, computing compatibility, matching users by taste, generating recommendations and daily collections;
- identifying the user during authorization;
- matching users by taste compatibility (“Match”): if you have signed in to the Service and accepted this Policy, your nickname, avatar, viewer class and match percentage may be shown to other signed-in users in those results. Profiles known to the Service only from public Shikimori data are never shown in match results. You may opt out at any time — see “Rights of the data subject”;
- ensuring the operability, security and protection of the Service against abuse;
- improving the quality of the Service and analysing its use, including visit statistics, click maps, Session Replay and e-commerce in Yandex.Metrica where the user has given consent.
5. Legal grounds for processing
Personal data is processed on the basis of the data subject’s consent (Art. 6 of Federal Law No. 152-FZ), and also because the processed Shikimori profile data is publicly available and was disclosed by the user themselves (Art. 8 of Federal Law No. 152-FZ).
6. Cookies
The Service uses cookies and similar technologies. Technically necessary cookies are applied:
- storing the chosen visual theme;
- maintaining the authorization session;
- saving your choice regarding the use of cookies.
The user may decline optional cookies in the pop-up notice. Analytics cookies and the Yandex.Metrica code are loaded only after choosing «Allow analytics». If the user chooses «Essential only», Metrica is not loaded.
For analytics we use Yandex.Metrica, Session Replay, click maps, link tracking and e-commerce events via `dataLayer`. The user may also delete the saved choice and cookies in their browser settings or use the Yandex.Metrica Blocker; if cookies are fully disabled, certain features of the Service may become unavailable.
7. Transfer of personal data to third parties
The Operator does not transfer personal data to third parties, except in cases provided for by the legislation of the Russian Federation, or where it is necessary for the functioning of the Service (for example, obtaining publicly available data from the Shikimori API). The Operator takes reasonable measures to protect the data against unauthorized access.
With the user’s consent to analytics, technical data about visits is transferred to Yandex.Metrica. In that case Yandex processes the data as a party acting on the Operator’s behalf, to provide statistics and reports on the Service.
8. Retention periods
Personal data is stored no longer than the purposes of its processing require, or until the user withdraws consent or their data is deleted upon request. Technical logs are kept for a limited period necessary to ensure security.
9. Rights of the data subject
The user has the right to:
- obtain information about the processing of their personal data, its clarification, blocking or deletion;
- withdraw consent to the processing of personal data;
- demand the cessation of processing and the deletion of their data from the Service;
- appeal the Operator’s actions to the authorized body for the protection of data subjects’ rights (Roskomnadzor) or through the courts.
To exercise their rights, the user may send a request to the Operator’s email address: makschocomint@gmail.com.
10. Protection of personal data
The Operator applies the necessary legal, organizational and technical measures to protect personal data: transferring data over the secure HTTPS protocol, restricting access to data, limiting the rate of requests and controlling the integrity of information.
11. Cross-border transfer and place of processing
Personal data is processed on servers used by the Operator and the services it engages, including Yandex.Metrica where analytics consent is given. In the case of cross-border data transfer, the Operator ensures compliance with the requirements of Federal Law No. 152-FZ.
12. Changes to the Policy
The Operator has the right to make changes to this Policy. The current revision is always available on this page. Continued use of the Service after changes are made constitutes agreement with the new revision of the Policy.
13. Contacts
For questions about the processing of personal data, you can contact the Operator at: makschocomint@gmail.com.