Paperstate · Privacy
Privacy Policy
Updated
This policy explains how paperstate.dev handles technical website data, browser preferences, optional analytics, and messages that you choose to send through Telegram or email. Paperstate is the service name.
1. Privacy contact
Paperstate is the service name.
2. What data we process
If you follow a Telegram or email link and send a message, Paperstate receives the contact details, message content, and attachments that you choose to provide through that channel. Do not send identity documents, payment-card data, special-category data, or other information that is not needed for the discussion.
- Technical data: IP address, request date and time, path, headers, and browser, device, and network parameters that may appear in hosting, web-server, and security logs.
- Browser preferences: the analytics choice and theme are stored in localStorage, and locale is stored in a functional cookie. The analytics choice stays locally in the browser so the site can remember the decision.
- After analytics consent: Yandex Metrica cookies and browser identifiers, visited pages, traffic source, standard UTM values present in the URL, device and browser parameters, IP address, approximate region, and the limited events described below.
- Direct correspondence: the sender’s account or email address, display name where supplied by the channel, message text, attachments, dates, and related replies.
3. Purposes and legal bases
We process data only to an extent compatible with these purposes:
- Technical data is used to deliver and secure the website, prevent misuse, and diagnose faults. The basis is the controller’s legitimate interests and applicable security obligations.
- Functional preferences are used to provide the language, theme, and privacy choice requested by the visitor. They work independently of analytics consent.
- Yandex Metrica is used only with separate analytics consent to understand visits and interactions with the site.
- Direct correspondence is used to reply and discuss a possible project. Depending on who writes, the basis is taking steps at that person’s request before a possible contract or the controller’s limited legitimate interest in handling an expected B2B enquiry where the individual’s rights do not override that interest.
4. How we process data
Depending on the purpose, we collect, record, organise, store, retrieve, use, grant limited access to, restrict, delete, and destroy data. Website operations and analytics are mainly automated; people handle direct correspondence.
We do not publish correspondence or use this data to make solely automated decisions that produce legal or similarly significant effects.
5. Cookies, browser storage, and Yandex Metrica
The paperstate_consent and paperstate_theme localStorage entries and the paperstate_locale functional cookie work without analytics. If you choose Necessary only, Metrica is not loaded and the site continues to work.
The optional analytics provider is Yandex Metrica, supplied by Yandex LLC in Russia. Its script loads only after you choose Allow analytics. After consent, Paperstate also uses Yandex Metrica Webvisor to analyse interaction with the website interface, such as navigation, scrolling, and interaction with page elements. Webvisor is not loaded without analytics consent. Click map, automatic link tracking, and automatic button and form goals are disabled.
The site has no project-enquiry form. Paperstate sends page views and limited CTA, Telegram-click, and email-click events. These custom events contain only a controlled page location such as hero, offer, final CTA, or footer. They do not contain a Telegram username, email address, destination URL, message content, or other user-supplied data.
A page view contains the path and, when present in the URL, only utm_source, utm_medium, utm_campaign, utm_content, and utm_term. Do not put personal data in URLs or UTM values. Independently of these custom events, Metrica may process cookies, browser identifiers, IP address, and device, browser, operating-system, network, page, referrer, and site-activity data to produce statistics.
The production tag has the Do not store full IP addresses of site users option enabled. Metrica zeroes the last IPv4 octet or the last 64 bits of IPv6 at an early collection stage.
When consent is withdrawn, Paperstate destroys the active tag instance and stops future sending. This does not automatically delete data collected before withdrawal; you may clear browser storage and send a deletion request to the controller.
Yandex Metrica Terms of UseYandex Metrica cookies and localStorageIP masking in Yandex Metrica
6. Direct contact through Telegram or email
Telegram and email links open an external communication channel chosen by you. Paperstate uses the message and contact details received there to reply and discuss a possible project.
The operator of Telegram or the relevant email services also processes the communication under its own terms and privacy rules. Paperstate does not control all of that provider processing.
7. Providers, location, and transfers
Paperstate’s website is hosted by Timeweb Cloud in Saint Petersburg, Russia. The initial recording, organisation, accumulation, and storage of Russian citizens’ personal data handled by this infrastructure take place in Russia.
Access is limited to authorised people who need it to maintain the website or answer messages. Direct correspondence remains in the communication channels used unless it is deliberately exported for a lawful purpose.
Yandex Metrica sends analytics and technical data to Yandex LLC in Russia after consent. A direct Telegram or email message is routed and stored according to the providers selected by the sender and Paperstate. Processing locations and any international-transfer rules therefore depend on the particular channel, provider, and applicable law.
- TIMEWEB.CLOUD LLC — VPS, network, and storage for the website in Russia.
- YANDEX LLC — consent-gated Yandex Metrica analytics.
- Telegram and the relevant email providers — delivery and storage of messages when a visitor chooses those channels.
8. Retention and deletion
Website and server-security logs are deleted no later than 30 days after they are recorded, except where particular records are temporarily required to investigate an incident or comply with law.
Direct Telegram and email correspondence is deleted no later than 365 days after the last meaningful exchange, unless a longer period is required by law or to establish, exercise, or defend legal claims.
Yandex Metrica data is retained under the service’s rules. Paperstate periodically reviews whether the data is still needed and deletes tag data using the controls available in Yandex Metrica when it is no longer needed for analytics.
Paperstate browser preferences remain until you change the choice, clear site data, or a new policy version requires another choice. Yandex sets the lifetime of its analytics cookies and localStorage; its current table lists individual entries lasting from a session or several hours up to one or two years.
When a purpose or period ends, data under the controller’s control is deleted or destroyed unless law requires continued storage. Communication providers may retain their own copies under their terms and settings.
9. Security
We use proportionate organisational and technical measures, including access controls, request validation, rate limiting, and security logging where needed. No system can guarantee absolute security; measures are reviewed as risks change.
10. Your rights and additional information for EEA and UK visitors
Use Analytics settings on this page or in the footer to withdraw analytics consent. Withdrawal stops future collection, does not affect earlier lawful processing, and does not limit the core site.
For an EEA or UK visitor, the rights and international-transfer rules of those jurisdictions apply only to the extent that the relevant law covers a particular processing activity. Paperstate’s main website infrastructure is in Russia; whether a specific interaction involves an international transfer depends on the data, communication channel, providers, and applicable law. This policy does not state that Paperstate is established in the EEA or UK or that the GDPR applies to all Paperstate activity.
11. Changes and contact
If purposes, data categories, or providers materially change, we will update the text and version date. If a change affects analytics consent, the site will ask for a new choice.