Privacy Policy
This Privacy Policy describes how the tomilo-lib.ru website collects, uses, and protects your personal data.
Important Information
- This Policy does not replace consent: where consent is required, we request it separately before processing.
- We process personal data in accordance with applicable laws of the Russian Federation.
- You may at any time request access to your data or its deletion.
General Provisions
The personal data operator is Individual Entrepreneur Maksim Yuryevich Lugovskoy (INN 553101511919, Moscow; hereinafter — the “Operator”). This Policy defines how we collect, store, use, and protect information received from visitors and registered users. We process data to perform the user agreement, meet legal obligations, or, where required, on the basis of separate consent. Initial collection, recording, systematization, accumulation, storage, updating, and retrieval of Russian citizens' personal data use databases located in Russia.
What Data We Collect
- Data provided during registration: username, email address, and data obtained when signing in via third-party services (Yandex, VK, etc.) to the extent permitted by those services.
- Contact form data: name, email address, subject, and message. Do not include sensitive personal data, payment card details, passwords, or another person's data.
- Technical data: IP address, browser type, device information, and approximate location to ensure the Site operates and to provide analytics and advertising.
- Usage data: viewing history, bookmarks, reading progress, comments, and other activity within the Site's functionality.
- Private messages and conversation data. Direct conversations are available only to their participants; Support chat messages are available to administrators who handle requests.
- Translation team member data: display name, avatar, role, and links added to the team profile. This information appears on the team's public page.
- Payment data: the selected service, amount, payment number, status, and payment confirmation details. Payment history is available to the account owner and authorized administrators for support and legal obligations. The Site does not receive or store bank card details.
- Cookies and browser storage support sign-in, interface settings, analytics preferences, and advertising mode. Yandex.Metrica starts after the visitor acknowledges the cookie notice and can be turned off on the Cookie Policy page.
Purposes of Data Processing
- Providing access to the Site's services, including personalization and saving reading progress.
- User identification and account security.
- Displaying contextual ads and, if selected in profile settings, personalized ads. Site analytics starts after the cookie notice is acknowledged and can be turned off on the Cookie Policy page.
- Responding to contact form requests on the basis of the separate consent given when the form is submitted.
- Communicating with users regarding accounts, notifications, and support.
- Processing payments, confirming transactions, activating premium subscriptions, and complying with payment and receipt requirements.
- Compliance with legal requirements and protection of the Site's legitimate interests.
Disclosure of Data to Third Parties
- We do not sell users' personal data.
- Data may be shared with service providers that support the Site (hosting, CDN, email, and abuse prevention) only to the extent necessary to provide their services and under a data processing agreement or another lawful basis.
- When paying through T‑Bank, it receives the order details and amount; the email address is sent only if the customer provides it for the payment or receipt. The customer enters payment details on T‑Bank's hosted form; the Site receives the information needed to check the order status.
- Yandex and Mail.ru advertising scripts load when an ad mode is enabled and may receive technical data to display ads. Yandex.Metrica counter 105475213 loads after the cookie notice is acknowledged. Google Analytics is not used on the Site.
- Nicknames, avatars, and comments are published when users choose to post them. Team members' names, avatars, roles, and links appear on public team pages. Do not publish personal data if you do not want it visible to Site visitors.
- We may disclose data when required by law to government authorities in cases provided by legislation.
Storage and Deletion of Data
Retention periods for account data, requests, and technical logs depend on their purposes and applicable requirements. The Site administrator sets the retention period and maximum size for chat history; a conversation may have its own override. Messages outside the configured age or count limit are removed from active history by background cleanup. If a separate legally required archive mode is enabled, that copy has its own retention periods and access rules. Yandex.Metrica data is retained under the service settings. Data is deleted or anonymized when its purpose ends unless the law requires otherwise.
Data Security
We take organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure, or destruction. Data transmitted over the network is encrypted (HTTPS). Despite these measures, absolute security of data transmission over the internet cannot be guaranteed.
Your Rights
- Obtain information about the personal data we hold about you and the purposes of processing.
- Request correction of inaccurate or incomplete data.
- Request deletion of your account and associated personal data to the extent permitted by law.
- Withdraw consent to data processing where applicable; withdrawal does not affect the lawfulness of processing before withdrawal.
- Change the ad mode in profile settings and stop future Yandex.Metrica loads on the Cookie Policy page. This does not undo processing that took place earlier; third-party cookies can be removed in browser settings.
- Lodge a complaint with a supervisory authority responsible for the protection of personal data subjects.
Children
The Site is not intended for the deliberate collection of data from minors. If we learn that a child has provided personal data without parental or guardian consent, we will take steps to delete such information.
Changes to the Policy
We may update this Privacy Policy. A new version is posted on this page with an update date. Where a change requires new consent, we request it separately; continued use of the Site is not such consent.
Contact Information
For questions regarding the processing of personal data and this Policy, please contact us at
Using the Site does not by itself constitute consent to optional processing. Yandex.Metrica starts after an action on the cookie notice; future counter loads can be disabled on the Cookie Policy page. Consent for the contact form is requested separately.