Privacy Policy

Publication date: 05.09.2026

This is a translation provided for convenience. The legally binding version is the Russian one; in case of any discrepancy, the Russian version prevails.

This Policy describes what data the Compressify service (hereinafter — the "Service", "we") processes and on what terms. The Policy is developed in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data".

Personal data operator: Vladimir Vladimirovich Bredikhin (self-employed, professional income tax payer), TIN 463228181969. The operator can be reached via the contact form ("Contact" button in the site footer) or by e-mail at compressify@yandex.ru.

---

1. What data we process

1.1. Personal data

Of personal data we process:

• the e-mail address — provided at registration;
• the User's nickname — if specified;
• other data you provide voluntarily (for example, the text of a support request);
• records of file-processing operations — the date and time of the operation, the file type and size, and its outcome; generated automatically while the service is provided. File names and file contents are not stored in these records.

The Service does not request other categories of personal data (full name, phone, postal address, passport details, etc.).

1.2. Technical data (anonymised)

When the Service is used — including by unregistered users — anonymised technical data is processed automatically:

• IP address;
• browser and device data (User-Agent);
• cookies;
• date and time of access;
• referrer (the source of the visit);
• Service usage statistics;
• service identifiers of requests and sessions.

This data is used for authentication, security, protection against abuse and enforcement of plan limits.

1.3. Payment data

Payment is made through payment providers. Bank card data is not transferred to or stored by the Service — it is processed by the payment provider.

1.4. Uploaded files

The files you upload are processed automatically and stored only temporarily — for the time needed to provide the service, after which they are deleted. We do not view file contents manually.

We do not store uploaded files and do not transfer them to any third parties, except for transferring them for direct processing. Processing is performed on the infrastructure of a third-party provider — Yandex Cloud Serverless Containers (the servers do not belong to us); files are transferred there solely to provide the service.

The User is prohibited from uploading files containing personal data (their own or that of third parties). The User is responsible for the content of uploaded files.

1.5. Advertising data

The Service uses the Yandex Advertising Network (RSYA) to display advertisements. Through cookies and similar technologies, Yandex advertising code may process:

• cookies and device/browser identifiers;
• IP address and browser and device information;
• the address of the page being viewed and the referral source;
• information about impressions, clicks and other interactions with advertising units;
• data used to display and select advertisements.

These data are processed by Yandex LLC within RSYA to display and select advertising, count its impressions and clicks, evaluate effectiveness and prevent invalid impressions. To compile impression statistics for advertising blocks, RSYA may automatically create and use a service Yandex Metrica counter. The Service does not install a standalone Yandex Metrica counter or Webvisor. How the advertising code is enabled depends on the User's country and is described in section 7.

1.6. Visit statistics

The Service keeps its own visit statistics using Umami (stats.sherhn.space), hosted on the same infrastructure of the Operator in the Russian Federation as the Service itself. Anonymised data are processed: the address of the page viewed, the referrer, device and browser type, language, country and the occurrence of interface events. The IP address is not stored, no cookies are set for these statistics, and the data are not transferred to third parties.

2. Purposes and legal bases of processing

Purposes of processing:

• registration and authentication of the User;
• provision and improvement of the Service's functionality;
• sending technical notifications and replies to support requests;
• compliance with the requirements of the legislation of the Russian Federation and contractual obligations.

Purpose	Basis
Registration and authentication	Consent; performance of the contract
Provision and improvement of the Service's functionality	Performance of the contract; legitimate interests of the operator
Security, protection against abuse	Legitimate interests of the operator
Provision of file-processing services	Performance of the contract
Sending notifications and replies to support requests	Consent; performance of the contract
Display, selection and effectiveness evaluation of advertising (RSYA)	Consent or the Operator's legitimate interests — depending on the User's country (see section 7)
Visit statistics and diagnostics	The Operator's legitimate interests
Compliance with legal requirements	Law

Legal bases of processing:

• your consent to the processing of personal data;
• the necessity of performing the contract (providing the Service);
• the Operator's legitimate interests (cl. 7 part 1 art. 6 of Federal Law 152-FZ) — to the extent that does not infringe your rights and freedoms;
• the operator's obligations established by the legislation of the Russian Federation.

As part of performing the contract, we undertake to send you transactional and technical notifications (confirmation of registration, payment, subscription status, changes to terms) to the specified e-mail. This is not a marketing mailing.

3. Minimisation principle

We do not collect or store personal data beyond what is necessary. The e-mail, IP and User-Agent are used for authentication, security and performance of the contract. RSYA data is processed separately, under the terms of section 7. We do not sell personal data.

4. Transfer to third parties

4.1. We do not sell or transfer personal data to third parties, except to:

• payment providers — to the extent necessary to process payment;
• infrastructure providers (hosting, cloud computing, including Yandex Cloud Serverless Containers) — for the technical operation of the Service;
• Yandex LLC — when using the Yandex Advertising Network (RSYA), under the terms of section 7;
• cases expressly provided for by the legislation of the Russian Federation (at the request of authorised bodies).

4.2. Storage and processing of personal data of citizens of the Russian Federation is carried out on servers located within the territory of the Russian Federation (art. 18 of Law 152-FZ).

5. Retention periods

5.1. Personal data is stored for the duration of the Account.

5.2. When the Account is deleted, data is not physically erased but anonymised: the e-mail address, nickname and password are wiped, making it impossible to further identify the User from the remaining records.

5.3. After the Account is deleted (anonymised), we retain the payment and subscription history, support requests and technical correspondence for 3 (three) years — the limitation period under the legislation of the Russian Federation (art. 196 of the Civil Code) — in order to protect the legitimate interests of the Operator and the User in the event of possible disputes, including disputes related to payment for services or support requests. Technical logs (web server and application access logs) are not covered by this period and are retained for no more than 12 (twelve) months — they serve security, fault diagnostics and incident investigation rather than dispute resolution.

5.4. If, within the specified period, a dispute, court proceedings or other proceedings related to the provision of the Service's services arise, the retention period for the data relating to that dispute is extended until it is finally resolved, including the period of enforcement of the decision made.

5.5. Correspondence on support requests may be conducted by e-mail (outside the Service's interface). Such correspondence is retained by the Operator for the periods specified in clauses 5.3–5.4.

5.6. Records of file-processing operations (date and time, file type and size, outcome) are retained for the lifetime of the Account. After the Account is deleted (anonymised), they remain in anonymised form — they can no longer be related to the User — and are used for statistics, fault diagnosis and confirmation that the service was rendered in the event of a dispute.

6. Rights of the personal data subject

You have the right to:

• obtain information about the processing of your data, including a copy of the personal data processed;
• demand clarification, blocking or deletion of data;
• withdraw consent to the processing of personal data.

Since the processing of the e-mail and technical data is necessary for authentication, security and operation of the Service, consent is withdrawn by deleting the Account. Refusal to process personal data is equivalent to deleting the Account, after which use of the Service becomes impossible. The retention of certain data after deletion of the Account is defined in section 5.

Requesting information or a copy of data. To obtain information about the personal data processed or a copy of it, send a request via the contact form ("Contact" button in the site footer), indicating the data by which your Account can be identified. The Operator is entitled to request additional confirmation that the request comes from the Account owner. A reply is provided within the period established by the legislation of the Russian Federation (no later than 10 business days from the date the request is received, art. 14 of Law 152-FZ).

7. Cookies and advertising technologies

7.1. The Service uses two types of cookies and similar technologies:

• Technical (essential) — necessary for authentication, saving settings and ensuring security. The Service does not function without them, so they are always used.
• Advertising — cookies and similar technologies of the Yandex Advertising Network (RSYA).

7.2. How advertising technologies are enabled depends on the country from which you opened the Service. The country is determined from your device's time zone. Two modes apply:

• Prior consent mode — for the countries of the European Union and the European Economic Area, the United Kingdom, Switzerland, Türkiye and China, whose law requires consent before advertising cookies are set. In this mode the RSYA advertising code is not loaded and advertising cookies are not set until you press “Accept” in the cookie notice.
• Notice mode — for all other countries, including the Russian Federation. Advertising technologies are enabled when the Service is opened, on the basis of the Operator's legitimate interests (cl. 7 part 1 art. 6 of Federal Law 152-FZ): advertising revenue is what allows the Service to be provided free of charge. On the first visit the Service shows a cookie notice describing the technologies used and how to disable them.

7.3. If the device's time zone is hidden or cannot be determined — for example, in browsers with anti-tracking protection — notice mode applies.

7.4. How to decline. In prior consent mode, declining is available directly in the cookie notice: the RSYA advertising code is not loaded, advertising cookies are not set, and technical cookies keep working, as they are necessary for the operation of the Service.

In notice mode there is no separate decline control on the pages of the Service — advertising cookies are disabled through your browser. The browser does not separate cookies by purpose, so the outcome depends on the setting you choose: blocking third-party cookies removes the advertising ones and does not affect the Service, whereas blocking all cookies for the site also disables authentication and saved settings and makes the Service unusable. Browser settings govern cookies themselves — they do not prevent the advertising code from loading.

7.5. How to change your decision. In prior consent mode — via the "Cookie settings" link in the footer of any page. In notice mode, where the basis is legitimate interests rather than consent, disabling is done through your browser.

8. Conditions and data protection measures

8.1. Personal data is processed using automated and/or non-automated means.

8.2. The operator applies the necessary legal, organisational and technical measures to protect personal data from unlawful access, alteration, distribution or destruction.

8.3. Access to personal data is granted to a strictly limited number of authorised persons.

8.4. Passwords are stored as cryptographic hashes; connections are protected using the HTTPS protocol.

9. Changes to the Policy

We may amend this Policy. The current version is always available on the website and takes effect upon publication. The publication date is indicated at the beginning of the document.

10. Contacts

For questions about the processing of personal data: use the contact form ("Contact" button in the site footer) or e-mail compressify@yandex.ru.