1. Scope and administration

The Sprutio project administration manages sprut.io and its subdomains, including dev.sprut.io. In this policy, these pages are referred to as the website and the project administration as the Administration. Please read this policy before submitting personal information.

Following a link to another website takes you to a service with its own privacy rules. Its operator, rather than the Administration of this website, determines how information is handled there.

2. Information the website may process

Visiting a page sends technical information to the server. Request and security logs may include an IP address, request time, requested URL, referring page, browser and device information, and the server response status.

If you write to the project by email, the Administration receives your address, the name you provide, the message and any attachments you send. WordPress also holds account details and interface preferences for people who have been given administrative access.

The public website has no contact forms or search services; comments are disabled. Please do not send sensitive personal information, payment details or copies of identity documents in an ordinary inquiry.

3. Purposes and grounds

Information is used to deliver the website, manage authorized access, respond to messages, investigate faults, detect abuse and attacks, understand technical operation, and meet applicable legal obligations.

The relevant grounds depend on the activity and applicable law: handling your request, your consent where required, providing a function you requested, the Administration’s legitimate interest in operating and protecting the website, or compliance with a legal obligation.

4. Cookies and language selection

A cookie is a small value stored by a browser on your device. WordPress may use technical cookies to test cookie support, authenticate authorized users, maintain their sessions and save their administration interface settings.

Public page language is selected from the language in the URL or the browser’s Accept-Language header. The website does not save this choice in a language cookie. With comments disabled, it does not offer cookies for remembering comment author details. The website configuration does not add advertising or visitor-tracking cookies.

You can inspect and remove cookies or block them in your browser settings. Disabling cookies can prevent WordPress sign-in and related administration functions from working.

5. Access by third parties

Personal information is not sold. Hosting providers and technical service providers may need access to information to operate, maintain or protect the website. Such access is limited to what is needed for those tasks.

Disclosure may also be necessary in response to a lawful order or another obligation under applicable law. Where a service provider processes information in another country, applicable rules on international data transfers must be taken into account.

6. Retention and security

Information is retained for as long as needed for its purpose, security, backup procedures and mandatory legal requirements. Administrative accounts are retained while access is needed; correspondence is kept as needed to handle the inquiry and related obligations. Technical logs are subject to the Administration’s rotation settings. This policy does not set a single retention period for all information.

The website uses HTTPS and restricted administrative access. Software maintenance and backups form part of its operation. Security depends on organizational and technical measures; no network or storage system can promise complete protection against every risk.

7. Your requests and rights

Subject to applicable law, you may ask what information is processed, obtain access to it, request correction or deletion, restrict processing, request portability, withdraw consent or object to processing. You may also raise a concern with the competent supervisory authority.

Send privacy requests to alexey@sprut.io. To locate the relevant information and avoid disclosing it to someone else, the Administration may ask for proportionate identity confirmation. Requests are answered within the deadlines required by applicable law.

8. Children’s information

The website is not designed to collect personal information from children. A parent or legal representative who believes that a child has submitted information without the required permission can contact the Administration to request its removal.

9. Changes to this policy

Changes to website functions, service providers or legal requirements may lead to a revision of this policy. The current version is published on this page, with its revision date at the beginning.