GitRiverPrivacy Policy
Last updated: September 21, 2026
1. Data Controller
The data controller is KRUGLOV ALEKSEI ALEKSEEVICH, individual entrepreneur registered in the Russian Federation, OGRNIP 325774600559571, INN 771506235482, address: 127576, Russia, Moscow, Altufyevskoe shosse 91, bldg. 1 - the rights holder of the GitRiver software. The controller processes personal data in accordance with Federal Law No. 152-FZ "On Personal Data" of the Russian Federation.
2. Data Collection
Upon registration, we collect: email address and username. When purchasing a subscription (the Pro and Max editions): the data needed to process the payment or to issue an invoice - card payments are processed by the T-Bank payment system, and we do not store bank card details. When using support: content of support requests. When you download release bundle files or follow the link to the image registry, we count the clicks: the day, version and file type are stored, and instead of your address - its irreversible fingerprint salted with a key of the day, which is discarded the next day together with that key. These records contain neither an address nor any link to your account; the counting is done by the site itself, and this data is not shared with third parties. When you browse the site with the analytics counters on (see section 6), de-identified details of the page view are collected: page address, referrer, device and browser details, IP address and on-page actions. The collection is done by third-party analytics counters - Yandex.Metrica; only aggregate reports are available to us, and once switched off the counters are not loaded and collect nothing.
3. Purposes of Processing
Personal data is processed for: providing access to the dashboard and services; processing orders and issuing licenses; sending notifications about order and license status; providing technical support; compliance with applicable legislation. While the analytics counters are on (see section 6), data is also processed to measure site traffic and how usable its pages are.
4. Data Storage
Personal data is stored on servers located in the Russian Federation in accordance with 152-FZ requirements. Data retention period: for the duration of the account and 3 years after deletion (in accordance with tax legislation requirements for payment data). Downloader fingerprints are kept for one day and are then replaced by an anonymous daily total - the number of downloads and the number of distinct visitors - from which no one can be identified.
5. Data Sharing
We do not share personal data with third parties, except: T-Bank - for payment processing; hosting provider - for server hosting; upon request from authorized government agencies in accordance with applicable law. In addition, de-identified details of site visits are received by: Yandex LLC - via the Yandex.Metrica service. These details are sent only while the analytics counters are on (see section 6) and stop as soon as you switch them off.
6. Cookies
Strictly necessary cookies maintain the authorization session: they are always active, and without them signing in is impossible. Analytics cookies are set by the traffic counters - Yandex.Metrica (_ym_uid, _ym_d, _ym_isad, _ym_visorc); they tell a returning visit from a new one and show which pages are used. If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland (we tell this by your device's time zone), or if your browser sends a Global Privacy Control signal, the counters are loaded only after you allow them. Elsewhere they are set until you switch them off. Either way you can change your choice at any time with the "Cookies" button in the site footer; once switched off, the counters are not loaded at all and the cookies they already set can be removed in your browser. Session recording is not used for visitors in the United States. Declining analytics cookies does not limit how the site works.
7. Data Subject Rights
You have the right to: obtain information about the processing of your personal data; request correction, blocking, or deletion of personal data; withdraw consent to data processing. To exercise your rights, send a request to support@gitriver.ru.
8. Security
We implement organizational and technical measures to protect personal data: password encryption (Argon2), data transmission over HTTPS/TLS, access control, regular software updates.