This is an English translation for convenience. The Russian version is legally binding: Русская версия.

Personal data processing policy of debussy.pro

Personal data operator: ИП Пучкин Вячеслав Витальевич, INN 590584994669, OGRNIP 319595800074701, address: г. Пермь, Пермский край, e-mail: debussy.pro@mail.ru. Website: https://debussy.pro. The policy applies to all data the service receives from visitors and users and is drawn up in accordance with Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”.

The service is developed, supported and maintained by one person — ИП Пучкин Вячеслав Витальевич, who is also responsible for the processing of personal data.

1. What data is processed

• Photos uploaded by the user. There may be people in them. Photos are not used to identify people and are not biometric data in the sense of the law. Photo metadata (location, camera model) is not stored: the original file is deleted after processing, and a re-saved copy without metadata is kept.
• Browser code — a random identifier by which the service recognises the user's browser without registration. Stored in the browser's memory (localStorage) and on the server.
• Account data: created and purchased photos, the plan and its term, invitations, published photos, likes and comments.
• VK ID or Yandex ID sign-in data (if the user signs in): the VK or Yandex account number, the first name (without surname) and a link to the profile photo. E-mail, phone and friends list are not requested.
• E-mail for the receipt — at payment.
• Messages from the “Write to the author” form: message type, subject, e-mail for the reply, text, the page it was sent from and the browser name.
• Technical server logs: IP address, time and address of the request, browser name.
• Yandex Metrica data: cookies and visitor identifier, IP address, browser and device information, addresses of viewed pages and where the visitor came from, actions on the website (navigation, clicks, scrolling), and session recording (Webvisor) — without the contents of fields with e-mails, comments and messages.

2. Purposes of processing

• Operation of the service: creating music, a score and a video from a photo, storing them and showing them to the user and to those they shared the link with.
• Account: access to your photos and purchases, including on another device after signing in.
• Feed: showing photos published by the user, likes and comments.
• Payment and sending receipts.
• Replying to users' messages.
• Security and reliability of the service: protection against abuse, finding errors.
• Traffic statistics and improving the website (Yandex Metrica).

3. Legal grounds

Performance of the agreement with the user (public offer), the user's consent to the processing of personal data (text of the consent), performance of obligations established by law (including issuing receipts under Federal Law No. 54-FZ).

4. Retention periods

• Photos and everything created from them: without signing in — 30 days from upload (published in the feed — while they are in the feed and for 30 more days after being unpublished); after signing in with VK ID or Yandex ID — indefinitely, until the user deletes the photo or withdraws consent. A photo can be deleted at any time.
• Technical server logs — up to 14 days.
• Account and sign-in data — while the user uses the service or until a deletion request.
• Payment information — for the periods established by tax and accounting legislation.
• Messages from the “Write to the author” form — while needed for the reply, then deleted; earlier — on request.

5. Data transfer

Personal data, including photos, is not sold or transferred to third parties, except in the following cases:

• payment: the acquiring bank TBank JSC receives the payment data and the e-mail for the receipt (photos are not transferred);
• storage: data is stored on a hosting provider's server in Russia;
• traffic statistics: Yandex LLC (Yandex Metrica) receives the data listed in section 1 as Yandex Metrica data and processes it under its own rules; photos, e-mails and messages are not transferred;
• cases expressly provided by law (for example, a request from an authorised state body).

Photos the user publishes in the feed, their name and profile photo, as well as their likes and comments, are visible to all visitors of the website — by the user's own decision. A person who buys someone else's photo as a gift to its author shares their name with the author by their own decision (after signing in — from the profile, otherwise “Guest” with a number), and if the photo is in the feed, their name and profile photo appear in its comments with a gift note; with the “Anonymous” option — “Anonymous” instead of the name and photo. The user's profile is private until they make it public: a public profile (name, profile photo, number of followers and photos) is visible to everyone via its link, a private one — only to the followers whose requests the user approved. If another user makes a remix of the user's photo (the same photo in another genre), the comments to the remix show the name of the author of the original photo with a link to their profile. Photos are not used to train neural networks.

Data is stored and processed in the Russian Federation. There is no cross-border transfer of personal data. When a composition is downloaded as MP3, the user's browser loads an open audio-encoding library from cdnjs.cloudflare.com; no user data is transferred to Cloudflare, except technical information any website receives when a file is loaded (IP address).

6. Cookies and analytics

The website uses the Yandex Metrica counter (with Webvisor and click map): it stores cookies in the browser and sends Yandex LLC anonymised information about visits — to understand how visitors use the website and to improve it. No other cookies, counters or analytics systems are used. Cookies can be disabled in the browser settings, and data collection by Metrica — with the “Yandex Metrica Opt-out” add-on (yandex.ru/support/metrica/general/opt-out.html). The browser's memory (localStorage) keeps the browser code, the e-mail for the receipt (so it doesn't have to be entered again), display settings and the chosen language. They can be cleared in the browser settings; photos and purchases made without signing in with VK ID or Yandex ID will then become unavailable in that browser.

7. Data protection

Data is stored on a server in Russia, and only the operator has access to it. The connection to the website is encrypted (HTTPS). Photo addresses contain random identifiers that cannot be guessed, and photo pages are closed to search engines.

8. User's rights

The user has the right to find out what data about them is processed, to demand its correction, blocking or deletion, to withdraw consent to processing and to appeal the operator's actions to Roskomnadzor or a court. To do so, it is enough to write to debussy.pro@mail.ru or via the “Write to the author” form on the website. The reply comes within 10 business days. The user can delete their photos in the profile and unpublish them from the photo's menu.

9. Changes

The operator may change the policy; a new version takes effect from the moment it is published on this page.