Privacy Policy

1. Data controller

Personal data processing for the "Tuchka" service is carried out by Nikita Leonov. Contact for data processing, access, and deletion requests: krotghar@gmail.com. Processing is carried out in accordance with the Law of the Republic of Armenia "On Protection of Personal Data" (HO-49-N).

2. What data is collected today

At the current stage (a single sensor, no user accounts yet), the service only collects technical web server logs: IP address, User-Agent, requested path, and referrer. Logs are kept for 14 days and are removed automatically on rotation.

3. What data will be collected once registration opens

Once the service opens registration for third-party sensors, it will additionally process: a Telegram account identifier (tg_user_id), a display name, an email address where applicable; the private address and exact installation coordinate of a sensor; a session cookie for signing in to the account dashboard. The legal basis is consent given at registration and necessity for providing the service.

4. Measurement retention periods

The raw JSON payload from the sensor (measurements_raw) is kept for 7 days; detailed measurements (measurements) for 90 days; hourly aggregates (measurements_hourly) are kept indefinitely in de-identified form, without any link to the owner.

5. Disclosure to third parties

Data is not shared with third parties. The service runs on its own VPS; Cloudflare is used only as a DNS provider, without proxying traffic. The sensor firmware's parallel submission of measurements to sensor.community and madavi.de happens directly from the device and does not pass through our service.

6. Cookies

Only one strictly necessary session cookie is used, for signing in to the account dashboard. There are no analytics or advertising cookies.

7. Data subject rights

You may request information about the processing of your data, and its correction or deletion. The operator responds to a deletion request within 5 days, and to a request to correct inaccurate data within 3 business days (timelines under Art. 20 HO-49-N).

8. Account deletion

Deleting an account removes: the email address, display name, the sensor's exact installation coordinate, and the link between "sensor" and "person". De-identified historical measurements from the sensor are retained, and the sensor itself is set to retired status and removed from the public map.

9. Special categories of data

The service does not collect or process biometric data or special categories of personal data, so prior notification of the authorized body under Art. 23 HO-49-N is not required.

10. Complaints

A complaint about personal data processing may be filed with the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.