Privacy Policy

Last updated: February 26, 2026

1. Introduction

This Privacy Policy explains how Nova30 ("I", "my") collects, uses, and protects your data on this website. By using my website, you agree to the terms described in this Policy.

2. What Data I Collect

2.1. Account Data

When you register on the website, I collect:

  • email address;

  • nickname;

  • full name (optional);

  • avatar (optional).

Your password is stored exclusively in hashed form - I have no access to it in plain text.

2.2. Data Collected Automatically

When you use the website, the following data is processed automatically:

  • IP address - used to protect against abuse (rate limiting for login attempts, file uploads, and password resets). Your IP address is not stored in the database on a permanent basis.

  • Technical data of uploaded files - hash sum, size, MIME type, original file name, and download counter.

2.3. Data I Do NOT Collect

I do not use third-party analytics services (Google Analytics, Facebook Pixel, etc.). There are no advertising trackers or external tracking scripts on the website.

3. How I Use Your Data

  • Authentication and security - for logging into your account, email verification, and password resets.

  • Abuse protection - rate limiting of login attempts, file uploads, and password reset requests (based on IP address).

  • Display on the website - your nickname and avatar may be displayed alongside publications you have authored.

  • Communication - sending emails for email verification and password resets. I do not send marketing newsletters.

4. Cookies

Cookies are small text files stored on your device. I use only technically necessary cookies:

Name

Purpose

Duration

PHPSESSID

Session identifier. Ensures the functioning of authentication and the user dashboard

Up to 1 year

REMEMBERME

Automatic login on your next visit (if "Remember me" is selected)

1 week

acceptCookies

Remembers your consent to the use of cookies

1 year

I do not use advertising, analytics, or any other third-party cookies.

You can delete cookies in your browser settings. Please note that deleting the session cookie will result in being logged out of your account.

5. Where Data Is Stored

All data is stored and processed on a server located in Kyiv, Ukraine. Data is not transferred outside of Ukraine, except when sending emails (via the mail server).

6. Data Protection

To protect your data, I employ the following measures:

  • connection encryption (HTTPS);

  • password hashing;

  • CSRF attack protection;

  • rate limiting;

  • role-based access control.

7. Your Rights

In accordance with the Law of Ukraine "On Protection of Personal Data", you have the right to:

  • obtain information about which of your data I process;

  • request correction of inaccurate data;

  • request deletion of your account and associated data;

  • withdraw consent to data processing.

To exercise any of these rights, please contact me at the address provided in Section 9.

8. Changes to This Policy

I may update this Policy. In the event of significant changes, the "Last updated" date at the top of the page will be revised. I recommend reviewing this page periodically.

9. Contact

If you have any questions regarding this Policy or the processing of your data, please contact me at: [email protected].

Posted on: