Cookie & Local Storage Policy
JEEKSSHIRE 24 FZE LLC · jeeksos.com · Last updated: 11 September 2026
Select the version that applies where you are. The EU/EEA version is shown by default.
1. Scope and operator
This policy lists everything jeeksos.com stores in your browser and every outbound request your browser makes to a third party when a page loads. The site is operated by JEEKSSHIRE 24 FZE LLC, a Free Zone Establishment registered with the Ajman NuVentures Centre Free Zone (Government of Ajman) under licence and registration number 2624416735888, Office CWS-1V-227119, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, United Arab Emirates. Contact: 024ismo@gmail.com. The Jeeks OS service has not launched, so this site has no accounts, no sign-in with an external identity provider and no payments.
2. The short version
This website sets no advertising, analytics or tracking cookies at all. No analytics platform, no advertising pixel, no tag manager, no session recording, no fingerprinting, no profiling. It uses one strictly necessary session cookie for the pre-launch access gate, one language preference kept in local storage because you chose a language, and two outbound requests that are not cookies but do disclose your IP address.
3. What cookies and local storage are
A cookie is a small text file a site asks your browser to keep and send back with later requests to that same site; it is how a server recognises that two requests come from one browser. Session cookies are erased when the browser closes; persistent cookies last until an expiry date. Local storage is a separate facility: values written to it stay on your device and are never attached to requests automatically, so a server learns such a value only if the page's own script deliberately sends it — which this site does not do.
4. Everything stored in your browser or requested from a third party
| Name | Type | Purpose | Duration | Who receives it |
|---|---|---|---|---|
| josgate | First-party cookie, strictly necessary | PHP session cookie set after you sign in to the pre-launch access gate, so it does not challenge you on every page. HttpOnly, Secure, SameSite=Lax; holds a session identifier only. | Session only — discarded when you close the browser | The site's own server: DigitalOcean (Frankfurt, Germany). Requests from Russia pass through a Timeweb entry proxy in St Petersburg that terminates TLS and stores no content. |
| jos.lang | First-party localStorage entry | Remembers the interface language you selected. | Until you clear this site's data in your browser | No one — it stays on your device and is never sent to the server. |
| Google Fonts request | Third-party request — not a cookie, nothing stored by us | Loads the typefaces used by the site from fonts.googleapis.com and fonts.gstatic.com. | During page load; files then sit in the browser's ordinary HTTP cache | Google LLC, which receives your IP address and user-agent in order to serve the files. |
| ip-api.com request | Third-party request — not a cookie, nothing stored by us | Resolves your IP address to a country so the site can pick a default language. The answer returns to your browser and is not stored on our server. | One lookup per visit | ip-api.com, which receives the IP address looked up. |
5. Consent under Article 5(3) of the ePrivacy Directive
Article 5(3) of Directive 2002/58/EC requires informed consent before a service stores information on, or accesses information already stored in, your terminal equipment — unless the storage is strictly necessary to provide a service you explicitly requested.
Both items fall inside that exemption. josgate exists only because you asked to enter a password-protected site; without it the gate cannot recognise you from one page to the next. jos.lang is written only when you yourself pick a language, is read by nothing else and never leaves your device. Neither identifies you, profiles you or measures your behaviour. No consent banner is therefore shown and none is required.
The converse commitment is just as firm: if analytics, advertising, A/B testing or any other non-essential technology is ever added, a real consent mechanism will be introduced first — prior, granular, as easy to refuse as to accept, no pre-ticked boxes, the technology inactive until you agree, and consent withdrawable at any time under Article 7(3) GDPR.
6. Google Fonts and your IP address
Fonts are fetched from Google's servers, so Google LLC necessarily learns the IP address requesting the file, the user-agent, and that a jeeksos.com page was opened. We set no cookie for this and receive no report back. The transfer to the United States relies on Google LLC's participation in the EU–US Data Privacy Framework together with the standard contractual clauses it offers. To avoid it, block fonts.googleapis.com and fonts.gstatic.com with a content blocker, disable downloadable fonts in your browser, or browse via a VPN; the site stays fully usable and simply falls back to your system typefaces.
7. What still happens if you store nothing
Ordinary nginx access and error logs (IP, timestamp, URL, HTTP status, user-agent, referrer) are kept 30 days. Contact-form messages and the correspondence that follows are kept while the enquiry is handled and up to 24 months afterwards; delivery is performed by SMTP.bz, whose log lines are kept 12 months; anti-spam per-IP counters last 1 hour. DNS and geo-routing run on Cloudflare in DNS-only mode, so traffic is not proxied through it. None of this depends on cookies or serves advertising.
8. How to control cookies and local storage
Your browser decides, not us. Chrome and Edge: Settings → Privacy and security → Third-party cookies, then "See all site data and permissions" to delete what one site holds. Firefox: Settings → Privacy & Security → Cookies and Site Data. Safari: Settings → Privacy → Manage Website Data. Mobile browsers keep the same controls under site settings. Private windows discard both when closed, "Clear browsing data" erases both at once, and a content blocker can stop the two third-party requests.
9. What breaks if you block them
- Cookies blocked: the gate cannot keep you signed in — it accepts the password, then asks again on the next page, because nothing carries the session forward.
- Local storage blocked or cleared: your language choice is not remembered; the site falls back to the language suggested by the country lookup and you can switch again at any time.
- Third-party requests blocked: nothing breaks. Fonts fall back to system typefaces and the country lookup simply fails.
10. Rights, representative and DPO
You may request access, rectification, erasure, restriction, objection and portability, and may complain to your national supervisory authority. Write to 024ismo@gmail.com. A representative in the Union under Article 27 GDPR has not been designated; until one is, send requests to that same address, which reaches the company directly. A Data Protection Officer is not required for this processing — there is no large-scale regular and systematic monitoring and no large-scale special-category data, so Article 37(1) is not engaged. Questions that would go to a DPO go to the same address.
11. Changes
If the cookies, storage items or third-party requests change, this policy and the table in clause 4 change at the same moment — and for anything non-essential, consent is collected before the change takes effect.
1. Scope and operator
This policy lists everything jeeksos.com stores in your browser and every outbound request your browser makes to a third party when a page loads. The site is operated by JEEKSSHIRE 24 FZE LLC, a Free Zone Establishment registered with the Ajman NuVentures Centre Free Zone (Government of Ajman) under licence and registration number 2624416735888, Office CWS-1V-227119, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, United Arab Emirates. Contact: 024ismo@gmail.com. The Jeeks OS service has not launched, so this site has no accounts, no sign-in with an external identity provider and no payments.
2. The short version
This website sets no advertising, analytics or tracking cookies at all. No Google Analytics, no advertising pixel, no tag manager, no session replay, no fingerprinting, no data broker. It uses one strictly necessary session cookie for the pre-launch access gate, one language preference kept in local storage because you chose a language, and two outbound requests that are not cookies but do disclose your IP address.
3. What cookies and local storage are
A cookie is a small text file a site asks your browser to keep and send back with later requests to that same site; it is how a server recognises that two requests come from one browser. Session cookies are erased when the browser closes; persistent cookies last until an expiry date. Local storage is a separate facility: values written to it stay on your device and are never attached to requests automatically, so a server sees such a value only if the page's script deliberately sends it — which this site does not do.
4. Everything stored in your browser or requested from a third party
| Name | Type | Purpose | Duration | Who receives it |
|---|---|---|---|---|
| josgate | First-party cookie, strictly necessary | PHP session cookie set after you sign in to the pre-launch access gate, so it does not challenge you on every page. HttpOnly, Secure, SameSite=Lax; holds a session identifier only. | Session only — discarded when you close the browser | The site's own server: DigitalOcean (Frankfurt, Germany). Requests from Russia pass through a Timeweb entry proxy in St Petersburg that terminates TLS and stores no content. |
| jos.lang | First-party localStorage entry | Remembers the interface language you selected. | Until you clear this site's data in your browser | No one — it stays on your device and is never sent to the server. |
| Google Fonts request | Third-party request — not a cookie, nothing stored by us | Loads the typefaces used by the site from fonts.googleapis.com and fonts.gstatic.com. | During page load; files then sit in the browser's ordinary HTTP cache | Google LLC, which receives your IP address and user-agent in order to serve the files. |
| ip-api.com request | Third-party request — not a cookie, nothing stored by us | Resolves your IP address to a country so the site can pick a default language. The answer returns to your browser and is not stored on our server. | One lookup per visit | ip-api.com, which receives the IP address looked up. |
5. No sale, no sharing, no cross-context behavioral advertising
Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, and comparable state statutes, two defined terms govern this page. "Sale" means disclosing personal information to a third party for monetary or other valuable consideration — we do not sell personal information and never have. "Sharing" means disclosing it for cross-context behavioral advertising — we do not share personal information in that sense.
There is no advertising on this site, no ad network embedded in it, and no identifier here follows you to any other business's site or app. Nothing builds a profile of you; there is no automated decision-making. We do not use sensitive personal information to infer characteristics, so the right to limit its use is not triggered. The two third-party requests in clause 4 disclose an IP address solely to render the page you asked for and to guess a default language — a business purpose, carrying no advertising identifier and earning us no consideration.
6. Global Privacy Control
Global Privacy Control is a browser signal telling a business you opt out of the sale and sharing of your personal information. There is nothing here for it to switch off, because nothing is sold or shared — the opt-out right has no subject matter on this site, so you lose nothing. To be explicit about the future: if this site ever engages in conduct that qualifies as a sale or a share, a GPC signal will be honoured as a valid opt-out, processed automatically, without requiring an account, applied to the browser that sent it, and accompanied by a "Do Not Sell or Share My Personal Information" link. Until then no such link exists because nothing would sit behind it.
7. Notice at collection and retention
Categories collected: identifiers (IP address; the name and e-mail you type into the contact form) and internet activity (URL, user-agent, referrer in server logs). Purposes: running the gate, serving the pages and fonts you request, choosing a default language, answering enquiries, and blocking spam. Retention is specific. nginx logs: 30 days. Contact messages and correspondence: up to 24 months after the enquiry closes; delivery runs through SMTP.bz, whose log lines are kept 12 months. Anti-spam per-IP counters: 1 hour. DNS and geo-routing use Cloudflare in DNS-only mode, so traffic is not proxied through it.
8. How to control cookies and local storage
Your browser decides, not us. Chrome and Edge: Settings → Privacy and security → Third-party cookies, then "See all site data and permissions" to delete what one site holds. Firefox: Settings → Privacy & Security → Cookies and Site Data. Safari: Settings → Privacy → Manage Website Data. Mobile browsers keep the same controls under site settings. Private windows discard both when closed, "Clear browsing data" erases both at once, and a content blocker can stop the two third-party requests.
9. What breaks if you block them
- Cookies blocked: the gate cannot keep you signed in — it accepts the password, then asks again on the next page, because nothing carries the session forward.
- Local storage blocked or cleared: your language choice is not remembered; the site falls back to the language suggested by the country lookup and you can switch again at any time.
- Third-party requests blocked: nothing breaks. Fonts fall back to system typefaces and the country lookup simply fails.
10. Your rights
Depending on your state you may have the right to know what personal information we hold, to obtain a copy, to have it corrected, to have it deleted, and not to be discriminated against for asking. Send the request to 024ismo@gmail.com. We verify it by replying to an address we already hold or by asking you to confirm details you would know, and we never create an account in order to process it. An authorized agent may act for you with your written permission.
11. Changes
If the cookies, storage items or third-party requests change, this policy and the table in clause 4 change with them, at the time of the change and not afterwards.
1. Scope and controller
This policy lists everything jeeksos.com stores in your browser and every outbound request your browser makes to a third party when a page loads. The controller is JEEKSSHIRE 24 FZE LLC, incorporated 29 June 2026 under Amiri Decree No. 15 of 2023 and registered with the Ajman NuVentures Centre Free Zone, Government of Ajman, under licence and registration number 2624416735888, Office CWS-1V-227119, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, UAE; registration is verifiable at www.ancfz.ae. Contact: 024ismo@gmail.com. The Jeeks OS service has not launched, so this site has no accounts, no external sign-in and no payments.
2. The short version
This website sets no advertising, analytics or tracking cookies at all. No analytics platform, no advertising pixel, no tag manager, no session recording, no fingerprinting, no profiling. It uses one strictly necessary session cookie for the pre-launch access gate, one language preference kept in local storage because you chose a language, and two outbound requests that are not cookies but do disclose your IP address.
3. What cookies and local storage are
A cookie is a small text file a site asks your browser to keep and send back with later requests to that same site; it is how a server recognises that two requests come from one browser. Session cookies are erased when the browser closes; persistent cookies last until an expiry date. Local storage is a separate facility: values written to it stay on your device and are never attached to requests automatically, so a server learns such a value only if the page's script deliberately sends it — which this site does not do.
4. Everything stored in your browser or requested from a third party
| Name | Type | Purpose | Duration | Who receives it |
|---|---|---|---|---|
| josgate | First-party cookie, strictly necessary | PHP session cookie set after you sign in to the pre-launch access gate, so it does not challenge you on every page. HttpOnly, Secure, SameSite=Lax; holds a session identifier only. | Session only — discarded when you close the browser | The site's own server: DigitalOcean (Frankfurt, Germany). Requests from Russia pass through a Timeweb entry proxy in St Petersburg that terminates TLS and stores no content. |
| jos.lang | First-party localStorage entry | Remembers the interface language you selected. | Until you clear this site's data in your browser | No one — it stays on your device and is never sent to the server. |
| Google Fonts request | Third-party request — not a cookie, nothing stored by us | Loads the typefaces used by the site from fonts.googleapis.com and fonts.gstatic.com. | During page load; files then sit in the browser's ordinary HTTP cache | Google LLC, which receives your IP address and user-agent in order to serve the files. |
| ip-api.com request | Third-party request — not a cookie, nothing stored by us | Resolves your IP address to a country so the site can pick a default language. The answer returns to your browser and is not stored on our server. | One lookup per visit | ip-api.com, which receives the IP address looked up. |
5. Position under the UAE Personal Data Protection Law
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data requires processing to be lawful, fair and transparent, tied to a stated purpose, proportionate to it, and generally based on consent unless an exception applies — such as processing necessary to perform a contract or to serve the controller's legitimate interests without prejudicing the data subject.
josgate exists only because you asked to enter a password-protected site; without it the gate cannot recognise you between pages, so it is the minimum needed to deliver the function you requested, it identifies a session rather than a person, and it dies with the browser session. jos.lang is written only when you choose a language yourself, sits on your own device and is never transmitted.
No non-essential tracking takes place on this website, so there is no processing here for which consent would have to be sought. Transparency is discharged by this document: the table in clause 4 is exhaustive — if something is not listed there, this site does not use it. If non-essential technology is ever added, clear prior consent will be requested before anything is placed on or read from your device, refusal will be as easy as agreement and will not degrade the site, and consent will be withdrawable by writing to the address above.
6. International recipients and retention
The infrastructure sits outside the UAE, which the law permits where the recipient jurisdiction affords adequate protection or appropriate contractual safeguards are in place. The origin server is DigitalOcean, Frankfurt, Germany (within the EEA); Russian traffic passes through a Timeweb entry proxy in St Petersburg that stores no content; DNS and geo-routing use Cloudflare in DNS-only mode; fonts come from Google LLC in the United States; country lookups go to ip-api.com; contact-form mail is delivered by SMTP.bz. Each performs one defined technical function. nginx logs are kept 30 days, contact messages up to 24 months after the enquiry closes, mail delivery log lines 12 months, anti-spam per-IP counters 1 hour.
7. How to control cookies and local storage
Your browser decides, not us. Chrome and Edge: Settings → Privacy and security → Third-party cookies, then "See all site data and permissions" to delete what one site holds. Firefox: Settings → Privacy & Security → Cookies and Site Data. Safari: Settings → Privacy → Manage Website Data. Mobile browsers keep the same controls under site settings. Private windows discard both when closed, "Clear browsing data" erases both at once, and a content blocker can stop the two third-party requests, including the font request to Google.
8. What breaks if you block them
- Cookies blocked: the gate cannot keep you signed in — it accepts the password, then asks again on the next page, because nothing carries the session forward.
- Local storage blocked or cleared: your language choice is not remembered; the site falls back to the language suggested by the country lookup and you can switch again at any time.
- Third-party requests blocked: nothing breaks. Fonts fall back to system typefaces and the country lookup simply fails.
9. Your rights and the DPO question
Under the PDPL you may request access to your personal data, its correction or erasure, restriction of or objection to processing, a halt to processing, and transfer of your data; you may also complain to the UAE Data Office. Send requests to 024ismo@gmail.com. A Data Protection Officer has not been appointed and is not required here: there is no high-risk systematic evaluation of individuals, no large-scale sensitive-data processing and no large-scale monitoring, so the statutory appointment criteria are not met. Enquiries that would go to a DPO go to the same address.
10. Changes
If the cookies, storage items or third-party requests change, this policy and the table in clause 4 are updated at the same time, and consent is sought first for anything non-essential.
1. Scope and personal information handler
This policy lists everything jeeksos.com stores in your browser and every outbound request your browser makes to a third party when a page loads. The personal information handler is JEEKSSHIRE 24 FZE LLC, a Free Zone Establishment registered with the Ajman NuVentures Centre Free Zone, Government of Ajman, under licence and registration number 2624416735888, Office CWS-1V-227119, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, United Arab Emirates. Contact: 024ismo@gmail.com. The Jeeks OS service has not launched, so this site has no accounts, no external sign-in and no payments.
2. The short version
This website sets no advertising, analytics or tracking cookies at all. No analytics platform, no advertising pixel, no tag manager, no session recording, no fingerprinting, no automated decision-making and no personalised recommendation. It uses one strictly necessary session cookie for the pre-launch access gate, one language preference kept in local storage because you chose a language, and two outbound requests that are not cookies but do disclose your IP address outside the PRC.
3. What cookies and local storage are
A cookie is a small text file a site asks your browser to keep and send back with later requests to that same site; it is how a server recognises that two requests come from one browser. Session cookies are erased when the browser closes; persistent cookies last until an expiry date. Local storage is a separate facility: values written to it stay on your device and are never attached to requests automatically, so a server sees such a value only if the page's script deliberately sends it — which this site does not do.
4. Everything stored in your browser or requested from a third party
| Name | Type | Purpose | Duration | Who receives it |
|---|---|---|---|---|
| josgate | First-party cookie, strictly necessary | PHP session cookie set after you sign in to the pre-launch access gate, so it does not challenge you on every page. HttpOnly, Secure, SameSite=Lax; holds a session identifier only. | Session only — discarded when you close the browser | The site's own server: DigitalOcean (Frankfurt, Germany). Requests from Russia pass through a Timeweb entry proxy in St Petersburg that terminates TLS and stores no content. |
| jos.lang | First-party localStorage entry | Remembers the interface language you selected. | Until you clear this site's data in your browser | No one — it stays on your device and is never sent to the server. |
| Google Fonts request | Third-party request — not a cookie, nothing stored by us | Loads the typefaces used by the site from fonts.googleapis.com and fonts.gstatic.com. | During page load; files then sit in the browser's ordinary HTTP cache | Google LLC (United States), which receives your IP address and user-agent in order to serve the files. |
| ip-api.com request | Third-party request — not a cookie, nothing stored by us | Resolves your IP address to a country so the site can pick a default language. The answer returns to your browser and is not stored on our server. | One lookup per visit | ip-api.com, which receives the IP address looked up. |
5. Position under the Personal Information Protection Law
The PIPL requires a clear and reasonable purpose, handling limited to the minimum scope necessary for it, notice given beforehand in plain language, and — where consent is the basis — consent that is voluntary and explicit. Article 13 also recognises handling necessary to conclude or perform a contract to which the individual is a party.
josgate exists only because you asked to enter a password-protected site and the gate must recognise you between pages; it identifies a session, not a person, and ends with the session. jos.lang is written only when you choose a language yourself and never leaves your device.
Separate consent under Articles 23 and 39 would be required before any non-essential purpose is introduced — in particular before analytics, advertising, personalised push or automated decision-making, and before providing personal information to a further third party for such a purpose. No such purpose exists here, so no separate consent is requested; if one is introduced, consent will be sought first, presented on its own rather than bundled into this policy, refusal will not block your use of the site, and withdrawal will be made easy.
6. Cross-border provision of personal information
All of this site's infrastructure is outside the PRC, so the two third-party requests in clause 4 transfer your IP address outside the People's Republic of China: the font request discloses your IP address and user-agent to Google LLC in the United States, and the country lookup discloses your IP address to ip-api.com. Pages are served by DigitalOcean in Frankfurt, Germany; DNS and geo-routing run on Cloudflare in DNS-only mode; contact-form mail is delivered by SMTP.bz. Article 39 asks that you be told the recipient, the purpose and method, the categories involved and how to exercise your rights: the recipients are named here, the only categories are your IP address and user-agent, the purposes are serving fonts and picking a default language, and rights requests may be sent to us at clause 9 so we can relay them. To keep your IP address inside the PRC, block fonts.googleapis.com, fonts.gstatic.com and ip-api.com with a content blocker — the site stays fully usable.
7. Retention and how to control browser storage
nginx access and error logs (IP, timestamp, URL, status, user-agent, referrer) are kept 30 days; contact messages and correspondence up to 24 months after the enquiry closes; mail delivery log lines 12 months; anti-spam per-IP counters 1 hour. Your browser controls the rest. Chrome and Edge: Settings → Privacy and security → Third-party cookies, then "See all site data and permissions". Firefox: Settings → Privacy & Security → Cookies and Site Data. Safari: Settings → Privacy → Manage Website Data. Private windows discard both when closed and "Clear browsing data" erases both at once.
8. What breaks if you block them
- Cookies blocked: the gate cannot keep you signed in — it accepts the password, then asks again on the next page, because nothing carries the session forward.
- Local storage blocked or cleared: your language choice is not remembered; the site falls back to the language suggested by the country lookup and you can switch again at any time.
- Third-party requests blocked: nothing breaks. Fonts fall back to system typefaces and the country lookup simply fails.
9. Your rights and the representative in the PRC
You may know and decide about the handling of your personal information, access and copy it, have it corrected or deleted, withdraw consent, and ask for an explanation of these rules; a close relative may exercise these rights after death. Send requests to 024ismo@gmail.com. A representative in the PRC under Article 53 PIPL has not been designated; rather than leave you without a route, requests go directly to that address, which reaches the company itself. A person in charge of personal information protection under Article 52 is not required: the volume handled here is small, confined to contact-form messages and short-lived technical records, with no sensitive personal information and no large-scale monitoring.
10. Changes
If the cookies, storage items or third-party requests change, this policy and the table in clause 4 are updated at the same time, and separate consent is obtained first for any non-essential purpose or any new cross-border transfer.
1. Scope and operator
This policy lists everything jeeksos.com stores in your browser and every outbound request your browser makes to a third party when a page loads. The operator is JEEKSSHIRE 24 FZE LLC, a Free Zone Establishment registered with the Ajman NuVentures Centre Free Zone, Government of Ajman, under licence and registration number 2624416735888, Office CWS-1V-227119, 26th Floor, Amber Gem Tower, Sheikh Khalifa Street, Ajman, United Arab Emirates. Contact: 024ismo@gmail.com. The Jeeks OS service has not launched, so this site has no accounts, no external sign-in and no payments.
2. The short version
This website sets no advertising, analytics or tracking cookies at all. No analytics counter, no advertising pixel, no tag manager, no session recording, no fingerprinting. Nothing here is used for advertising profiling: no interest profile is built, no audience segment assembled, and no identifier from this site is used to target you with advertising anywhere. It uses one strictly necessary session cookie for the pre-launch access gate, one language preference kept in local storage because you chose a language, and two outbound requests that are not cookies but do disclose your IP address.
3. What cookies and local storage are
A cookie is a small text file a site asks your browser to keep and send back with later requests to that same site; it is how a server recognises that two requests come from one browser. Session cookies are erased when the browser closes; persistent cookies last until an expiry date. Local storage is a separate facility: values written to it stay on your device and are never attached to requests automatically, so a server learns such a value only if the page's script deliberately sends it — which this site does not do.
4. Everything stored in your browser or requested from a third party
| Name | Type | Purpose | Duration | Who receives it |
|---|---|---|---|---|
| josgate | First-party cookie, strictly necessary | PHP session cookie set after you sign in to the pre-launch access gate, so it does not challenge you on every page. HttpOnly, Secure, SameSite=Lax; holds a session identifier only. | Session only — discarded when you close the browser | The site's own server: DigitalOcean (Frankfurt, Germany). Requests from Russia pass through a Timeweb entry proxy in St Petersburg that terminates TLS and stores no content. |
| jos.lang | First-party localStorage entry | Remembers the interface language you selected. | Until you clear this site's data in your browser | No one — it stays on your device and is never sent to the server. |
| Google Fonts request | Third-party request — not a cookie, nothing stored by us | Loads the typefaces used by the site from fonts.googleapis.com and fonts.gstatic.com. | During page load; files then sit in the browser's ordinary HTTP cache | Google LLC, which receives your IP address and user-agent in order to serve the files. |
| ip-api.com request | Third-party request — not a cookie, nothing stored by us | Resolves your IP address to a country so the site can pick a default language. The answer returns to your browser and is not stored on our server. | One lookup per visit | ip-api.com, which receives the IP address looked up. |
5. Position under Federal Law No. 152-FZ
Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" requires processing to be lawful and fair, confined to purposes stated in advance, limited to data that is adequate and not excessive for those purposes, and requires the operator to inform the data subject about the processing in an accessible form. This document discharges that duty for browser storage: the table in clause 4 is exhaustive — if something is not listed there, this site does not use it.
josgate is created only because you asked to enter a password-protected site and exists only so the gate can recognise you between pages; it carries a session identifier, not your name, and is destroyed when the session ends. jos.lang is written only when you choose a language yourself, stays on your device and is never sent to us. Neither is combined with other data to identify you, and neither feeds advertising, scoring or any automated decision producing legal effects. If analytics or advertising technology is ever introduced, this policy will be updated before it is switched on, you will be told in advance, and consent will be requested where the law requires — separately, in plain language, and as easy to refuse as to give.
6. Where the servers are, and retention
The origin server is DigitalOcean, Frankfurt, Germany. Requests from Russia are routed through an entry proxy hosted by Timeweb in St Petersburg, which terminates TLS, forwards the request and stores no content. DNS and geo-routing are provided by Cloudflare in DNS-only mode, so traffic is not proxied through it. Fonts come from Google LLC, which therefore sees your IP address and user-agent; country lookups go to ip-api.com; contact-form mail is delivered by SMTP.bz. nginx access and error logs (IP, timestamp, URL, status, user-agent, referrer) are kept 30 days; contact messages and correspondence up to 24 months after the enquiry closes; mail delivery log lines 12 months; anti-spam per-IP counters 1 hour on a rolling basis. None of this depends on cookies or serves advertising.
7. How to control cookies and local storage
Your browser is in control. Chrome, Edge and Yandex Browser: Settings → Privacy and security → cookies and site data, where you can open the list of stored site data and delete what one site holds. Firefox: Settings → Privacy & Security → Cookies and Site Data. Safari: Settings → Privacy → Manage Website Data. Mobile browsers keep the same controls under site settings. Private windows discard both when closed, "Clear browsing data" erases both at once, and a content blocker can stop the two third-party requests, including the font request to Google.
8. What breaks if you block them
- Cookies blocked: the gate cannot keep you signed in — it accepts the password, then asks again on the next page, because nothing carries the session forward.
- Local storage blocked or cleared: your language choice is not remembered; the site falls back to the language suggested by the country lookup and you can switch again at any time.
- Third-party requests blocked: nothing breaks. Fonts fall back to system typefaces and the country lookup simply fails.
9. Your rights and the DPO question
You may ask what personal data concerning you is processed and on what basis, require that inaccurate or unlawfully obtained data be corrected, blocked or destroyed, withdraw a consent you have given, and object to processing. Send requests to 024ismo@gmail.com; we answer within the periods set by the law. You may also complain to Roskomnadzor as the authorised body for the protection of data subjects' rights, or to a court. A Data Protection Officer has not been appointed and is not required for this processing: there is no large-scale or systematic monitoring of individuals and no special categories of personal data.
10. Changes
If the cookies, storage items or third-party requests change, this policy and the table in clause 4 are updated at the same moment as the change itself, never after the fact.