Privacy Policy

Last updated: May 23, 2026

1. Introduction

This Privacy Policy explains how Stepan Khvatov (“we”, “operator”) processes information when you visit the personal portfolio website khvatov.ru (the “Site”).

The Site is informational only: we do not offer user accounts, do not accept payments, and do not collect passport or payment card data through forms on the Site.

For privacy requests: stepan@khvatov.ru.

2. Data we process

We aim to collect only what is needed to operate and improve the Site.

| Category | Examples | Source | | --- | --- | --- | | Technical data | IP address (may be truncated/anonymized), browser type, OS, language, referrer, request date and time | Automatically when you access the server and CDN | | Usage data | Pages viewed, approximate time on page, navigation events (aggregated) | Vercel Web Analytics | | Interface preferences | Light or dark theme | localStorage in your browser | | Interface language | Russian or English | Page URL (/… or /en/…) | | Email correspondence | Address and message content you choose to send | Your mail client when contacting stepan@khvatov.ru |

We do not sell personal data and do not use it for on-site targeted advertising.

3. Project images and trademarks

The Site may display logos, screenshots, and other materials of products and companies I have worked with (e.g. SquareFi, Immigrant Invest, 0xProcessing, didigallery, and others).

  • All rights in such materials belong to the respective rights holders.
  • Materials are shown solely in a portfolio context to demonstrate professional experience.
  • Display does not imply endorsement, partnership, or official representation of those companies.
  • If you are a rights holder and believe material should be changed or removed, contact stepan@khvatov.ru — we will review the request within a reasonable time.

4. Purposes and legal bases

| Purpose | Legal basis (GDPR, where applicable) | | --- | --- | | Operating and securing the Site | Legitimate interests (Art. 6(1)(f)); necessary for availability | | Aggregated visit analytics | Legitimate interests in understanding audience and improving content | | Storing theme preference | Consent via your browser / theme control (where required) | | Replying to email | Steps at your request / legitimate interests in correspondence |

For visitors in Russia, processing may also rely on applicable provisions of Federal Law No. 152-FZ “On Personal Data”.

5. Cookies and local storage

See the dedicated Cookie Policy for details on cookies and similar technologies.

6. Recipients and international transfers

The Site is hosted on Vercel (hosting, CDN, analytics). Processing may occur in data centers outside your country of residence. The provider applies organizational and technical safeguards described in its documentation.

We may disclose data where required by applicable law or a lawful request from a competent authority.

7. Retention

  • Server logs — typically for a limited period defined by the hosting provider.
  • Analytics — in aggregated form per Vercel Analytics policies.
  • Theme in localStorage — until you clear site data in your browser.
  • Email — until the inquiry is handled and no longer than reasonably necessary, unless law requires longer retention.

8. Your rights

Depending on applicable law, you may have the right to:

  • access information about processing;
  • rectify, restrict, or erase data;
  • withdraw consent where processing is consent-based;
  • object to processing based on legitimate interests;
  • lodge a complaint with a supervisory authority (e.g. your local DPA in the EU/UK).

To exercise rights, email stepan@khvatov.ru. We will respond within statutory timeframes (typically within one month under GDPR).

9. Security

We use reasonable organizational and technical measures (HTTPS, access controls, maintained dependencies). No internet transmission method is completely secure.

10. Children

The Site is not directed at children under 16. We do not knowingly collect children’s data. If you believe a child provided data, contact us to delete it.

11. Changes

We may update this Policy. The current version is always on this page; the “last updated” date appears in the page header. Material changes may be highlighted on the Site when appropriate.

12. Controller contact

Stepan Khvatov
Email: stepan@khvatov.ru
Website: https://khvatov.ru