Privacy Policy
Material structure
Version of 1 November 2026.
1. Who We Are
1.1. This Policy explains how personal data is processed on Artifacts (artifacts.void0.dev, the "Platform"), where you sign in, subscribe and pay, and on the studio website void0.dev, which collects only technical data and, with your consent, analytics data.
1.2. The controller is Dmitrii Zhdanov ("we", "us"). Contact for personal data matters: d.zhdanov@void0.dev.
1.3. Users of the Russian version of the Platform and payments in Russian rubles are governed by the Russian-language policy of Dmitrii Zhdanov acting as a Russian sole proprietor (ИП).
2. What Data We Process
| Category | Contents | Source |
|---|---|---|
| email address | You, when signing in via a link sent to email or via Google | |
| Subscription data | subscription status, Plan and term; price and currency; Merchant of Record customer, subscription and order identifiers | Merchant of Record |
| Progress | marks of completed materials | Your actions on the Platform |
| Technical data | IP address, browser type, date and time of the request — in server logs; session and language cookies | Your browser |
| Analytics data | product analytics cookie identifiers, pages viewed, interface events | Your browser, only after consent in the cookie banner |
| Correspondence | content of inquiries and the contact from which they are sent | You |
Of the information about you, the account stores only the email address. When you sign in via Google, we receive only the verified email from Google and do not store your name, profile photo or Google account identifier.
We do not receive or store payment card numbers or billing addresses: the Merchant of Record collects them. We do not process special categories of personal data.
3. Purposes, Legal Bases and Retention
| Purpose | Data | Legal basis (GDPR Art. 6(1)) | Retention |
|---|---|---|---|
| Registration, sign-in, account maintenance | email, technical data | contract (b) | until the account is deleted |
| Access to paid materials, subscription management, refunds | email, subscription data | contract (b) | until the account is deleted; payment records: 5 years |
| Saving course progress | progress | contract (b) | until the account is deleted |
| Service notifications: sign-in links, subscription status, changes to terms | contract (b) | until the account is deleted | |
| Responding to inquiries | correspondence | contract (b), legitimate interest (f) | 3 years from the last inquiry |
| Protection against abuse: request rate limiting, incident investigation | technical data; for rate limiting only a hash of the IP address or email | legitimate interest (f) | up to 30 days |
| Traffic statistics and improvement of the Platform | analytics data | consent (a) | up to 1 year |
We do not send marketing emails.
4. Automated Decisions
We do not make decisions that produce legal effects for you solely on the basis of automated processing.
5. Recipients
5.1. We share personal data with the recipients below, to the extent necessary for the relevant purpose:
| Recipient | Purpose | Data |
|---|---|---|
| Merchant of Record | checkout, payments, taxes, receipts, refunds | email, subscription data; payment data it collects itself |
| Hosting provider | hosting of the Platform and its database | all data stored on the Platform |
| sign-in via Google, if you choose it | ||
| Email delivery service | service emails | email, email content |
| Product analytics service | usage statistics of the Platform | analytics data |
5.2. Payment processing is performed by our Merchant of Record (e.g., Paddle / Lemon Squeezy), which processes your payment data as an independent controller.
5.3. Some recipients process data outside your country of residence. Such transfers rely on the recipients' standard contractual clauses or equivalent safeguards and are limited to the purposes in Section 3.
5.4. The subscriber community Telegram channel is optional: the data you give Telegram when joining is processed by Telegram under its own rules. We do not store it.
5.5. We do not sell personal data and do not share it for third-party advertising. We disclose personal data to public authorities only where required by law.
6. Cookies
| Cookie | Purpose | Duration | Consent required |
|---|---|---|---|
session | keeping you signed in to the account | 30 days from sign-in | no: necessary for the account to work |
lang | selected language | 1 year | no: necessary for the website to work |
g_state, g_verifier, g_return, g_lang | protection of sign-in via Google | 10 minutes | no: necessary for sign-in |
Product analytics (ph_*) | product analytics | up to 1 year | yes |
Analytics cookies are set only after you click "Accept" in the cookie banner. Declining does not restrict access to the Platform. You can change the decision at any time via the "Cookie settings" link at the bottom of any page: the banner opens again, and declining deletes the analytics cookies.
7. Your Rights
7.1. You have the right to:
- access your personal data and receive a copy in a machine-readable format;
- have inaccurate data corrected;
- have your data and account deleted on request under Clause 7.2;
- restrict or object to processing based on legitimate interest;
- withdraw consent at any time, without affecting processing carried out before the withdrawal;
- lodge a complaint with the data protection supervisory authority of your country.
7.2. Requests are sent to d.zhdanov@void0.dev from the email linked to the account. We respond within 30 days.
7.3. When you delete the account, we stop processing and delete the data within 30 days, except for data we must keep by law (Section 3). Deleting the account while a subscription is active ends the subscription; the unused part of the Period is refunded under the Refund Policy.
8. Security
- data is transmitted only over an encrypted connection (HTTPS);
- session tokens and sign-in link tokens are stored in the database only as a cryptographic hash;
- access to the database and servers is restricted;
- payment card data is processed only by PCI DSS certified payment services;
- the frequency of sign-in attempts is limited.
9. Children
The Platform is not intended for children under 16. We do not knowingly collect their personal data.
10. Changes to This Policy
We may amend this Policy by publishing a new version on this page. Users with an account are notified of material changes by email. The Policy is published in English and Spanish. In the event of a discrepancy, the English version prevails.