隐私

Stoodia 中央账户隐私

中央网站管理您的账户并将您返回所选服务。本页说明中央网站的数据处理;产品数据由各服务负责。

简要说明

  • 密码以哈希形式存储;验证和恢复代码通过电子邮件发送。
  • 登录后,账户会保存最多五条服务路径,保留 30 天,以便在其他设备继续。您可以在账户中删除这些路径。可选浏览器历史记录单独管理。

本司法管辖区的法律文本以英文提供。

Privacy notice: Georgia and applicable GDPR

Controller and scope

Latyshov Mikhail, Individual Entrepreneur in Tbilisi, Georgia, is the controller of stoodia.org. This notice concerns stoodia.org accounts and contact forms. The Georgian Law on Personal Data Protection applies; GDPR protections apply where the processing falls within its territorial scope.

Purposes and legal bases

Account creation, authentication and requested profile functions use data needed to provide the account service (contract, GDPR Article 6(1)(b) where applicable). Security, abuse prevention and restricted operational logs protect the platform and its users (legitimate interests, Article 6(1)(f)). Legal duties use the applicable obligation (Article 6(1)(c)). Contact-form processing and optional persistent journey history rely on your separate choice (consent, Article 6(1)(a)). No marketing consent is bundled with sign-up or a contact request.

Information processed

Account data include email, password hash, profile fields you supply, language, status, verification and sessions. Contact forms collect your name, email, optional organisation and other contact, category, task text, language, page, referring host, submission identifier, hashed network abuse-prevention value and consent version/time. Operational logs may contain IP address, request path, time and result. Please do not submit sensitive personal data, passwords or third-party confidential documents through the contact form. If you enable a second factor, we store the encrypted authenticator secret, hashes of single-use recovery codes and the last accepted time step. The secret is provided during setup; recovery codes are shown once. Disabling the feature deletes its settings. Resetting a password does not disable the second factor.

Recipients and international processing

Authorised staff and selected providers support this website, including hosting, message delivery and abuse prevention. Team email notifications contain the contact request. Telegram notifications contain only its reference and a protected dashboard link. The controller and selected providers may process data in different countries when needed to operate the website and comply with law. Each recipient receives only the data needed for its task.

Retention and your choices

Data is kept only for as long as needed for the stated purposes, legal duties and the establishment or defence of claims. You may request access, correction, erasure or restriction and withdraw optional consent.

Rights and complaints

Where applicable, you may object to legitimate-interest processing and request data portability for data processed by consent or contract. You may contact the controller to exercise your rights. Applicable law provides the relevant response periods and permits a complaint to the competent supervisory authority.

Storage and analytics

The website uses necessary cookies for sign-in and requested functions. Optional storage for history requires your consent and can be disabled in the cookie settings.

Return after sign-in

To continue a requested action, the website may retain a return address for up to 30 days. It is used only for that purpose and deleted when the period ends or earlier on request.

Encrypted backups

The operator may create backups to restore the website and protect data. Backups are kept for a limited period.

Technical retention periods

Temporary data is removed when its purpose ends or its retention period expires.

联系与项目申请

提交 Stoodia Tevio 申请时,Stoodia 会先保存表单,再向负责团队发送工作通知。

  • 申请包含姓名、电子邮箱、可选的机构和其他联系方式、所选方向、任务说明、界面语言以及提交申请的 Stoodia 页面。
  • Telegram 仅接收申请编号和受保护的面板链接,不包含申请内容或联系方式。
  • 申请会保留在受保护的 Stoodia 管理区域,用于跟进、安全防护、防止重复和可审计的沟通记录。除法律要求保留的数据外,您可以申请更正或删除。

账户与安全

  • 中央网站保存电子邮件、账户状态、语言、您填写的个人资料,以及会话及其撤销记录。
  • 账户令牌保存在标签页的 sessionStorage 中。服务收到独立的服务器会话,不会收到您的密码或账户令牌。
  • 默认有效期为账户访问 15 分钟、refresh 30 天、服务会话最多 12 小时。这些是访问期限,不代表到期后删除所有存储记录。
  • 全局退出和密码更改会撤销新协议的既有会话。旧适配器需要单独更新。

路线历史

  • 经同意后,localStorage 最多保存五条路线,期限为 30 天;必要的 sessionStorage 用于当前标签页返回:服务、含 query/fragment 的页面路径、平台和时间。路径可能包含您的文档标识。
  • 历史中不保存授权代码、state、密码或令牌。邮件中的返回上下文放在链接片段中。
  • 过期路线不再作为返回建议;可通过历史操作或清除网站数据删除浏览器中的记录。可在主页或账户页删除单条路线或清空历史。浏览器禁止存储时,当前返回仍可使用,但不保存历史。

计数器与技术日志

  • 导航计数器仅包含 UTC 日期、服务、central/service 来源、事件类型和数量;不包含电子邮件、IP、令牌、文档路径或访客标识。
  • 计数器仅供中央网站管理员访问。事件数量并不等于独立用户数量。
  • 独立技术日志可能包含 IP、不含 query 的请求路径、状态和响应时间,用于运行维护和排错;它们不是个人路线历史。

服务范围与您的操作

  • 项目、视频、论文、计算、产品角色和购买由相应服务处理。中央账户不授予访问他人文档的权限。
  • 请在账户中退出,并使用历史的专用操作清除本地路线。数据问题和请求可通过下方联系方式提交。