Privacy policy

1. Operator and scope

The personal data operator is Individual Entrepreneur Shatkov Vitaly Anatolyevich (ИП Шатков Виталий Анатольевич), Tax ID (INN) 160501554554, Registration No. (OGRNIP) 326169000224547. For questions about data, contact shatkov@yandex.ru.

This policy covers devtunnels.ru and devproxy.ru, their account areas and the DevProxy service for remote access to applications and network resources. It also describes the processing of website statistics through connected Google and Yandex services.

When you expose your application or resource through DevProxy, its owner determines how that application processes information. This policy does not replace the policies of third-party websites, payment services or applications.

2. Information we process

• Account information: email address, password hash, email verification status, registration and last login dates, workspace membership and access permissions.
• Service information: workspace and connection settings, device and tunnel details, identifiers, connection status, resource usage and technical events needed to provide access and apply plan limits.
• Payments: selected plan, subscription, amounts, currency, payment statuses and identifiers, billing email and details of a saved payment method supplied by the payment provider. Card details are entered in the provider's payment form; DevProxy uses payment and payment-method identifiers.
• Support: contact details, messages and materials you choose to send to support.
• Technical and usage information: IP address, browser and device characteristics, request times, error and security information, cookies, public pages visited, referral source and website interaction events.

When relaying tunnel traffic, the server processes network connections and transmitted data as needed for routing. Whether content is accessible depends on the protocol and encryption used by the destination application. Resources that require authentication should be protected accordingly.

3. Purposes and legal grounds

We use information to create and protect accounts, provide connections, manage access and subscriptions, process payments and refunds, send necessary service messages, respond to support requests, resolve errors, prevent abuse and improve the website.

Processing is based on entering into and performing a contract, complying with legal obligations, consent where required, and the operator's legitimate rights and interests subject to respect for the user's rights. Processing uses automated systems and, when handling requests, may also involve manual processing.

This policy provides information about processing; it does not replace separate consent where consent is required by law.

4. Cookies and website analytics

The website uses technical cookies for sessions, language preferences, service notifications and interface functionality. You can delete or restrict cookies in your browser; doing so may require you to sign in again and may affect some features.

Yandex Metrica and Google Analytics 4 are connected to analyse website usage. These services may process cookie identifiers, IP addresses, browser and device details, public page views, referral sources and interaction events. This may involve transferring information to the providers' servers, including servers outside your country.

DevProxy's analytics configuration removes query parameters and fragments from page URLs, replaces page titles with section names, and excludes automatic page views from account, administration and sign-in pages. Individual events such as successful registration, client download or payment result may be sent to measure service usage, without email addresses, passwords, access keys or the original private-page URL. Webvisor session recording is disabled.

The website also keeps its own article statistics without sending them to external analytics services. It uses a separate host-only cookie containing a technical browser identifier for up to 30 days. We store views of public articles and their link to a registration in that browser; after registration, email verification, the first server-observed activation and a confirmed payment may be attached as outcomes. These statistics do not store email addresses, IP addresses, User-Agent, referrer, UTM parameters or the full page URL.

Provider information: Yandex privacy policy and Google privacy policy. Browser controls and content blockers can restrict analytics loading. Google also provides an Analytics opt-out browser add-on.

5. Access to Google service data

The website owner or an authorised user may separately grant the DevProxy application read access to Google Analytics and Google Search Console statistics through OAuth. Permissions are requested on Google's consent screen. The connection is intended to analyse resources that the authorising Google account already has permission to access.

Processed information includes traffic and engagement reports, traffic sources and website events, and search queries, pages, impressions, clicks and search positions. We use this information to prepare reports, assess page quality and improve the website. Ordinary website visitors do not need to grant this access.

Only read permissions for Google Analytics and Search Console are requested. OAuth credentials are kept in protected storage with restricted access. Reports are available only to the operator and authorised personnel or contractors as needed for these purposes. Automated processing is subject to the same access and purpose restrictions.

Data obtained through Google APIs is not sold, used for personalised advertising or used to train general-purpose artificial intelligence models. Its use and transfer to other applications comply with the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke access in your Google Account connections. Revocation stops subsequent retrieval using that permission. To delete previously stored information, contact the operator using the details below.

6. Data sharing

Hosting, email delivery, payment and analytics providers, as well as authorised technical personnel and contractors, may process information as needed to operate the service, handle payments and support, and analyse statistics. Access is limited according to the purpose of the information and the necessary safeguards.

During checkout you interact with the payment provider identified in the payment form. That provider's own terms also apply to its processing. Information may be provided to authorised public bodies where there is a legal basis. Users' personal information is not sold.

7. Retention and security

We retain information for as long as needed for its processing purpose: providing an account and services, performing the contract, handling a request, maintaining security or complying with legal obligations. Payment and accounting records may be kept after you stop using the service for mandatory retention periods.

Information is deleted or anonymised when its purpose has been fulfilled or its legal basis no longer applies, unless the law requires further retention. The applicable period depends on the data category and legal basis; the operator can explain the relevant retention conditions upon request.

Safeguards include access controls, secure website connections and credential protection. Account passwords are stored as hashes. Users are responsible for protecting their passwords, access keys and devices.

8. Your rights and deletion

You may request information about processing, correction, restriction or deletion of your information, withdraw consent, and contact the competent personal data authority or a court.

Email shatkov@yandex.ru with the subject “DevProxy personal data”, your account email and a description of your request. Do not send passwords, access keys, card details or identity-document copies unless separately requested with a valid reason. To protect information, the operator may verify that a request comes from the data subject or an authorised representative.

Requests are handled within the time limits set by applicable law. Deleting information needed to operate an account may terminate access to the service. Withdrawal of consent does not stop processing that has another valid legal basis, such as mandatory retention of accounting records.

9. Policy updates

The current version is published on this page with an update date. Changes to the description of processing do not replace obtaining new consent where required. The service terms are published in the public offer.

10. Operator contact details

Operator

Individual Entrepreneur Shatkov Vitaly Anatolyevich (ИП Шатков Виталий Анатольевич)

Tax ID / Registration No.

160501554554 / 326169000224547

Postal address

20 Lenina St., Kazan, Republic of Tatarstan, 420098, Russia

Email

shatkov@yandex.ru

Phone

+7 (995) 687-68-68