Privacy Policy

Version dated September 28, 2026

1. About this Policy

1.1. This Privacy Policy explains what personal data we process on f4studio.com (the “Site”), why, on what legal basis, how long we keep it and how you can opt out. It is our policy on the processing of personal data under Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” (“Law 152-FZ”). Everything about cookies and how to turn off statistics is in section 5.

1.2. Who we are. F4 Studio is run by Individual Entrepreneur Dmitrii Shamilevich Isaev (ИП Исаев Дмитрий Шамилевич), a sole proprietor registered in Russia; INN (taxpayer number) 165607538865, OGRNIP (state registration number) 325169000076149; address: Apt. 29, 8 Sadovaya St., Osinovo village, Zelenodolsk Municipal District, Republic of Tatarstan, 422527, Russia (422527, Республика Татарстан, Зеленодольский муниципальный район, с. Осиново, ул. Садовая, д. 8, кв. 29). He is the operator of your personal data — in Russian law, the person who decides why and how it is processed. “We”, “us” and “our” in this Policy mean the operator. For questions about your personal data, requests and withdrawal of consent, email help@f4studio.com or write to the address above (section 9).

1.3. The Site has no accounts, sign-ups or payments. We get your name and contact details only if you send us a request or contact us using the details on the Site. About other visitors we know only what visit statistics and server logs collect — no names or contact details.

1.4. Russian law applies. We and our servers are in Russia. Whatever country you are in, the data you send through the Site comes to Russia and is processed under the laws of the Russian Federation (section 7).

1.5. Our Russian-language site f4studio.ru is run by us in the same way: requests from both sites go to the same server and the same request-tracking system, for the same purposes and on the same terms. Its policy in Russian also describes the processing on this Site. If the two policies ever differ on how data from this Site is processed, we apply the one that better protects you.

1.6. The two sites open each other based on your browser language. If your browser settings suggest you read Russian, the same page on f4studio.ru may open instead of the Site, and vice versa; the page address, the ad tags in it and the address of the page you came from are passed along. Bots and visitors coming from search engines are not redirected unless they have chosen a language. You can switch with the “Русский” or “English” link; your choice is remembered in your browser (clause 5.1).

2. Requests and messages

2.1. Purpose: preparing, entering into and performing a contract — replying to your request or message, discussing your project, preparing a proposal, signing and performing a contract. For the same purpose we tell requests from spam and look at which page and which source a request came from.

2.2. Whose data: people who send a request on the Site or contact us directly using the details on the Site — on Telegram, by email or by phone — and clients we sign a contract with.

2.3. What data:

from the request form — your name, phone number, email address and any project details you choose to share;
with the request — the IP address and browser details it was sent from, the address of the page it was sent from, the address of the page on another website you came from (referrer) and ad tags (utm);
when you contact us directly — your Telegram username, the name and photo in your Telegram profile, your email address or phone number, our correspondence with any files you send, and what you tell us by phone. We do not record calls;
if we sign a contract — your full name, and if you are the contracting party yourself, the details needed for the contract and payments (taxpayer number, registered address, identity document details, bank account) — only as much as the contract requires.

2.4. Legal bases:

request form data — your consent (clause 1, part 1, Article 6 of Law 152-FZ). You give it by ticking a separate box in the form; the request cannot be sent without it. Its text is in the Consent to the Processing of Personal Data;
direct contact and contract details — entering into a contract at your request and performing it (clause 5, part 1, Article 6 of Law 152-FZ).

2.5. Where your request goes: to the Site’s server, where it waits in a queue until it is passed to our request-tracking system. Once passed, it is deleted from the Site’s server at once; if the tracking system did not accept it, after 30 days. The server, the tracking system and our email are in Russia (section 7).

2.6. What we do with the data: collection, recording, systematization, accumulation, storage, rectification (updating, modification), retrieval, use, transfer (provision, access) — only to the persons and in the cases listed in section 6, depersonalization, blocking, deletion, destruction. Processing is mixed — with and without automation.

2.7. How long: request data — until the purpose is achieved, but no longer than one year from the request or until you withdraw consent; correspondence — no longer than one year from the last message. After that, your name, contact details, request text and correspondence are destroyed; the tracking system keeps only depersonalized information about the request — its source, ad tags and stages. If we sign a contract, the data it needs is kept for the term of the contract and for the document retention periods set by Russian accounting and tax laws.

3. Visit statistics

3.1. Purpose: analyzing traffic to the Site and measuring how well our advertising works — understanding how visitors find and use the Site and which sources and ads bring them, so that we can improve the Site and our ads. We never use statistics for calls, emails, mailings or decisions about you.

3.2. Whose data: visitors to the Site, except those who have turned statistics off (clause 5.4).

3.3. Statistics are collected by the Yandex Metrica service. What data: identifiers in cookies and browser storage, including a visitor ID (ClientID); IP address and approximate location based on it; browser and device details; visit details — pages viewed, date and time, referrer and ad tags, including the Yandex Direct click ID (yclid); clicks on the pages (click map). Session replay (Webvisor) is not used on the Site: we do not record your mouse movements or replay your visits, and Metrica does not record what you type into the request form. Statistics contain no names or contact details.

3.4. Legal basis: our legitimate interest (clause 7, part 1, Article 6 of Law 152-FZ) — we can only run the Site and spend money on ads sensibly if we know how the Site is used and where visitors come from. That is why statistics work from your first visit without asking for consent. Your rights and freedoms are not affected, because:

statistics contain no names or contact details, and we do not try to find out who you are from them — except in the case in clause 3.5, which requires your consent;
Metrica does not record what you type into the request form, and there is no other information about you on the pages of the Site;
statistics are not used for calls, emails, mailings or decisions about you;
the Site tells you about statistics on your first visit, and you can turn them off with one click — the Site works just the same without them (clause 5.4);
only those who need statistics for their work have access to them, and retention is limited (clause 3.7).

3.5. Statistics and your request. If you send a request and consent to the processing of its data, your visitor ID (ClientID) and Yandex Direct click ID (yclid), if your browser has them, are sent to us with the request. With them, we can tell YANDEX LLC which visit and which ad click led to the request and how it ended — without your name or contact details. The basis is your consent (clause 1, part 1, Article 6 of Law 152-FZ); the terms are in the Consent to the Processing of Personal Data. If you have turned statistics off, these identifiers are not sent.

3.6. What we do with the data: collection, recording, systematization, accumulation, storage, rectification (updating, modification), retrieval, use, transfer (provision, access) to YANDEX LLC (clause 6.1), depersonalization, deletion, destruction. Processing is automated.

3.7. How long: Metrica cookies stay in your browser for up to one year; collected data is kept in Yandex Metrica for no longer than two years. Identifiers received with a request are destroyed together with its data (clause 2.7).

4. Server logs

4.1. Purpose: keeping the Site working and secure — finding and fixing failures, detecting and investigating attacks and abuse.

4.2. Whose and what data: the server records every request to the Site — IP address, date and time, the address of the requested page, the referring page and browser details. Logs contain no names, contact details or anything you type into the request form.

4.3. Legal basis: our legitimate interest (clause 7, part 1, Article 6 of Law 152-FZ) — without logs we cannot keep the Site running and protected. Your rights and freedoms are not affected: logs hold only technical details, are used only for this purpose and are kept briefly.

4.4. What we do with the data: collection, recording, storage, use, depersonalization, deletion, destruction. Processing is automated. Logs are not shared with anyone except where the law requires. They are kept for no longer than 14 days and then deleted.

5.1. Cookies and browser storage entries are small pieces of data a website saves in your browser to remember something or to recognize the browser on your next visit. The Site uses three kinds:

technical — the Site’s own entries: “f4-notice” — that you closed the cookie notice, for one year, so it is not shown again; “f4-metrika-off” — that you turned statistics off, together with the visitor ID the browser had before that, until you turn statistics back on or clear the Site’s data in your browser; “f4-lang” — the language you chose with the “Русский” or “English” link or by coming from f4studio.ru, until you choose another one or clear the Site’s data; “f4-referrer” — the address of the page you came from when the Site opened instead of f4studio.ru (clause 1.6), until the page loads and at most until you close the tab; technical data of the Yandex SmartCaptcha service — only when you send a request;
statistics — Yandex Metrica cookies: “_ym_uid” (visitor ID), “_ym_d” (date of first visit) and “_ym_fa” — up to one year; service cookies “_ym_isad”, “_ym_hostIndex”, “_ym_metrika_enabled” and other cookies starting with “_ym” — from one visit to one day; and Metrica entries in browser storage with the same prefix (section 3);
advertising — the “f4-visit” entry: the address of the page you came from, ad tags and the Yandex Direct click ID (yclid), for 90 days from your last visit. It stays only in your browser and reaches us only if you send a request and consent to the processing of its data.

5.2. The Site itself sets no cookies — only browser storage entries; cookies on the Site’s domain are set by Yandex Metrica. Cookies on Yandex’s own domains are processed by YANDEX LLC under its Privacy Policy.

5.3. On your first visit, the Site tells you that it uses cookies for statistics and links here. The “OK” button in that notice only closes it.

5.4. How to turn off statistics:

with the “Turn off statistics” button below. The Site will remember your choice in your browser, delete Metrica cookies from its domain and stop loading Metrica in this browser. The choice applies to this Site; on f4studio.ru, statistics are turned off separately — there is the same button there. If you clear the Site’s data in your browser, your choice is cleared too — then turn statistics off again;
with the Yandex Metrica opt-out add-on, which stops Metrica from collecting data on all websites;
in your browser settings: block or delete cookies and site data, turn on tracking protection or open the Site in a private window. Your browser’s help explains how. The Site works without cookies; only the cookie notice will keep coming back.

5.5. To have statistics already collected deleted, email us (section 9) your visitor ID — it is shown above, next to the button, if Metrica has run in your browser. Within 10 working days we will ask YANDEX LLC to delete the data collected under this ID. On f4studio.ru your browser has a different ID — it is shown on that site’s policy page.

6. Who we share data with

6.1. We do not sell personal data and share it only in the cases named in this Policy or required by law. On our behalf and on our instructions (part 3, Article 6 of Law 152-FZ), data is processed by:

YANDEX LLC (ООО «Яндекс»), 16 Lva Tolstogo St., Moscow, 119021, Russia — visit statistics in Yandex Metrica, under its Terms of Use; YANDEX LLC may involve companies of its group. It receives the visitor and click IDs with the outcome of a request with your consent (clause 3.5) and uses them in Yandex Direct to show our ads under its own rules;
Yandex.Cloud LLC (ООО «Яндекс.Облако»), 16 Lva Tolstogo St., Moscow, 119021, Russia — spam protection of the request form with Yandex SmartCaptcha. The service loads in the form only after you tick the consent box; it receives your IP address and technical data about your browser and device, keeps them for up to 60 days and also uses them to improve the service — under its notice.

6.2. We disclose data to public authorities only where the law requires it.

7. Where data is stored and how it is protected

7.1. We record, systematize, accumulate, store, rectify and retrieve personal data — of Russian citizens and of everyone else — using databases in Russia (part 5, Article 18 of Law 152-FZ): the Site’s server, our request-tracking system and our email run in the АО «ИОТ» data center in the Moscow Region, Russia. We are in Russia and process data under Russian law; if you visit the Site or send a request from another country, your data comes to Russia.

7.2. We take legal, organizational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying and disclosure (Articles 18.1 and 19 of Law 152-FZ):

as an individual entrepreneur, the operator personally organizes the processing of personal data and is responsible for it;
the Site and the request form work only over HTTPS — data is sent encrypted;
only those who need data for their work have access to it, through personal accounts;
a request stays on the Site’s server only until it is passed to the tracking system, and server logs contain no names or contact details;
the number of requests from one address is limited, and bots are filtered out by SmartCaptcha;
the Site does not use session replay, so what you type into the form is not recorded.

8. General terms

8.1. We process only the data needed for the purposes in sections 2–4 and do not use it for anything else. We do not process special categories of personal data or biometric data: please do not include information about your health, ethnicity, beliefs, criminal record and the like in requests or messages.

8.2. If you share information about another person — for example, a colleague’s contact details — you confirm that you are entitled to do so.

8.3. The Site and our services are intended for adults and businesses. If you are under 18, please do not send a request.

8.4. Processing stops when its purpose is achieved or the retention period ends, when consent is withdrawn and there is no other basis for processing, when unlawful processing is found and cannot be remedied, or when the operator stops business as an individual entrepreneur. The data is then destroyed or depersonalized within the time limits set by Article 21 of Law 152-FZ; if it cannot be destroyed in time, we block it and destroy it within six months at the latest, unless federal law sets a different period.

8.5. The Site links to resources run by others — Telegram, social networks, Yandex services. When you follow such a link, you reach another operator that processes data under its own rules; this Policy does not apply to it, except in the cases in section 6.

9. Your rights

9.1. You can get information about the processing of your personal data (part 7, Article 14 of Law 152-FZ); require us to rectify, block or destroy it if it is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose; withdraw your consent; require us to stop processing; and complain about our actions or inaction to Roskomnadzor (the Russian personal data authority) or to a court.

9.2. After you withdraw consent, we stop processing your request data and destroy it within 30 days unless we have another basis — for example, a contract with you. We will fulfill a demand to stop processing within 10 working days, except where the law allows us to continue without consent (clauses 2–11, part 1, Article 6; part 2, Article 10; part 2, Article 11 of Law 152-FZ). You can opt out of statistics yourself at any time (clause 5.4).

9.3. Send requests and withdrawal of consent to help@f4studio.com or by post to our address (clause 1.2). Emails to support@f4studio.com, the address named in earlier versions, reach us too. You can write in English or Russian; we will reply in the language you wrote in, within 10 working days. We may extend this by up to 5 working days and will tell you why. So that we find your data and do not give it to a stranger, tell us how to find it (part 3, Article 14 of Law 152-FZ): the date of your request and the contact details in it, your Telegram username or your visitor ID (clause 5.5). If that is not enough, we will ask you to confirm the data is yours — for example, by writing from the contact details in your request.

10. Changes to this Policy

10.1. We may change this Policy. A new version applies from its publication on this page; the version date is shown under the title.

10.2. A new version does not change the terms of consents already given: each applies in the version in which it was given. If new processing needs your consent, we will ask for it separately.