Legal

Personal data processing policy

Version of 26.10.2026.

This is a translation provided for convenience. The Russian version is legally binding. Русская версия

1. General

This policy explains what personal data the Nostatic service (https://nostatic.ru) processes, why, and how it is protected. It follows Russian Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”.

The personal data operator is . Questions about personal data: .

2. What data we process

• Account data: email address, name (if provided), and your password as an irreversible hash — we never store or know the password itself.
• Notification data: email addresses you subscribed and your Telegram chat ID if you connected the bot.
• Data about your sites: site addresses, crawl results, Yandex Webmaster and Google Search Console data (queries, impressions, positions), and access keys to those services — encrypted.
• Technical data: a session cookie for signing in. For the free site check we store the checked domain and a hash of your IP address with a daily-rotating salt — only to limit how often checks can run; the IP address itself is not stored, and records are deleted after 30 days.

We don't collect special categories of personal data or biometrics, don't use advertising or analytics cookies, and don't share data with ad networks.

3. Why we process data

• sign-up, sign-in and access recovery;
• providing the service: site audits, recommendations, effect measurement;
• sending notifications you subscribed to and service emails (email confirmation, password recovery);
• protecting the service from abuse.

4. Legal grounds

Your consent to personal data processing (Art. 6(1)(1) of 152-FZ) and performance of the terms of use to which you are a party (Art. 6(1)(5) of 152-FZ).

5. Where data is stored and who receives it

Data is stored on servers located in the Russian Federation. We don't sell or transfer your personal data to third parties except where required by law.

To run the service we call external services without passing them your personal data:

• Yandex Webmaster and Google Search Console — we request your sites' data with the access key you provided;
• Google PageSpeed Insights — we send addresses of public pages to measure speed;
• Cloud.ru (a Russian language-model provider) — we send texts of public pages and search queries to analyze topics and prepare page briefs.

6. Retention and deletion

Account data is kept while the account exists. You can delete your account in the dashboard settings at any time: sites, connections, check results, recommendations, history and notification subscriptions are deleted with it. Deletion is irreversible.

You can also withdraw consent by writing to ; we will stop processing and delete the data within 30 days unless the law requires us to keep it.

7. Your rights

You may request information about how your data is processed, ask for it to be corrected, blocked or deleted, withdraw consent, and appeal the operator's actions to Roskomnadzor or in court.

8. How we protect data

Connections to the service use HTTPS only. Passwords are stored as hashes, and access keys to Yandex Webmaster and Search Console are encrypted. Server access is restricted.

9. Changes

We may update this policy; the current version with its date is always on this page.