Legal · applies to this whole site
Privacy notice
What this site collects when you send an enquiry, why, how long it is kept and how to have it deleted. Written to be read, not to be scrolled past.
1. Scope
This notice covers maincode.pro. There is no account system, no newsletter and no advertising network on this site. The only place you can submit anything is the enquiry form, and this notice is mostly about that.
The Russian-language site at maincode.ru is operated by the same controller but has its own notice, written to Russian law.
2. What is collected
2.1. What you type
- Name — whatever you enter; a first name or a nickname is fine.
- Contact — an email address, phone number or messenger handle. Your choice which.
- Your message — the description of your problem. Please do not paste credentials, personal data of third parties, or anything you are contractually forbidden to share. If you need to show me something sensitive, ask for an NDA first.
2.2. What is recorded automatically
The list below is exhaustive. Nothing else is stored.
- IP address of the request that submitted the form;
- User-Agent — the browser string, which includes browser, operating system and device type;
- the page the form was sent from, and the date and time;
- campaign parameters — utm_source, utm_medium, utm_campaign, utm_content, utm_term and ad-click identifiers, if you arrived from an advertisement;
- the referring address your browser reports, and the first page you opened, if you arrived from an advertisement.
These exist for two reasons: to tell a human apart from an automated submission, and to know which page brought the enquiry. They are stored next to the enquiry and are not used to build a profile of you.
2.3. Cookies
This site sets no cookies and runs no analytics counter. Your theme preference is kept in your browser's local storage on your own device and never leaves it. Campaign parameters live in session storage for the duration of your visit and are attached to the enquiry only if you actually send one.
3. Why it is processed and on what basis
- To reply to you and discuss the work — because you asked me to, by submitting the form. Under the GDPR this is consent, and where a project follows, steps taken at your request prior to entering into a contract.
- To keep the correspondence and project history — performance of a contract, once there is one.
- To keep the form from being abused — the technical fields exist so that automated submissions can be filtered. This is a legitimate interest, and a narrow one.
4. Who else sees it
No data is sold, rented or shared for marketing. It is seen by:
- me, through an administrative page protected by a password;
- Telegram and my email provider, because a notification about your enquiry is delivered through them — the notification contains what you wrote in the form;
- the hosting provider of the server, as an inevitable consequence of the server existing.
The server is located in Russia, so if you write from the EEA or the UK your data is transferred outside it. Russia is not covered by an adequacy decision. Send only what you are comfortable sending; if that is a problem for you, we can move the conversation to a channel you choose before you share anything specific.
5. How long it is kept
- enquiries that did not lead to a project — up to 12 months from the date received;
- correspondence and documents relating to an actual project — for the term of the contract and as long afterwards as the law requires me to keep accounting records;
- the technical fields listed in 2.2 — 12 months, alongside the enquiry.
Ask earlier and it goes earlier. See section 7.
6. How it is protected
- the site runs over HTTPS; the form cannot be submitted over an unencrypted connection;
- the administrative page requires a password and limits repeated failed logins;
- notification email is sent over an encrypted connection only — if encryption is unavailable the message is not sent at all;
- backups of the database are encrypted;
- the enquiry database is not exposed to the internet and is reachable only from the server itself.
7. Your rights
Write to support@maincode.ru from the address you used, or tell me enough to identify the enquiry, and you can:
- ask what is stored about you and get a copy;
- have it corrected;
- have it deleted — the usual answer to this is simply to delete it, since I have no interest in keeping an enquiry that its author wants gone;
- withdraw your consent, which stops any further processing based on it;
- object to the processing described in section 3, or ask that it be restricted.
I reply to these within 30 days, usually the same week. If you are in the EEA or the UK and you believe I have handled your data badly, you may also complain to your national supervisory authority — though I would rather you told me first, because I can actually fix it.
8. Automated decisions and children
No automated decision-making and no profiling take place. The site is addressed to businesses and is not intended for children; I do not knowingly collect data from them.
9. Changes
If this notice changes, the version date at the top changes with it. There is no archive of previous versions — the document is short enough to re-read.