Privacy policy

Who is responsible

The data controller is Ukrainian sole proprietor Andrii Vasylovych Vdovyn, taxpayer registration number 3503802498. Registered and operating address: 1 Franka Street, Honcharivka village, Chortkiv district, Ternopil region, 48332, Ukraine. Contact: [email protected], +380680380812. This policy covers piperlink.com and is dated 15 October 2026.

Information we process

An order contains your e-mail (confirmed with a one-time code), the app link, platform, chosen package and options and an optional wish; the project chat holds messages and files; test logins are kept in an encrypted field. For an order, we keep its number, scope, correspondence, price, payment status, deliverables and the time of your confirmations before payment (acceptance of the terms, the request to start work immediately, permission for vulnerability testing). Technical logs may contain an IP address, request time and request details needed for security and troubleshooting.

We do not request or store your card number, expiry date, CVV or PIN. Card details are entered with WayForPay. Do not include passwords, keys, your customers’ personal data or other confidential information in the order wish or chat messages; provide test logins only in the encrypted field. Any project access is arranged in the project chat.

Purposes and legal grounds

We use information to process and perform your order, confirm payment, send the order confirmation and notifications, deliver results, handle concerns and meet legal obligations. Grounds include steps you request before a contract, contract performance, legal obligations and a legitimate interest in protecting the service and documenting orders within applicable law.

Where separate consent is required, we request it separately and you can withdraw it at [email protected]. Placing an order does not subscribe you to marketing. We do not sell personal data. We use analytics cookies only as described under “Cookies and browser storage”: in the EEA, the UK, Switzerland and Ukraine only with your consent (the legal basis is consent); elsewhere on the basis of our legitimate interest in understanding how the site works, and you can opt out.

Who receives information

The Provider and authorized team members have access only where needed to fulfil your order. A service notification about a new order, containing your contact and a short brief, is sent through Telegram. Telegram is a separate service with its own data practices; do not include secrets or third-party personal data in the order wish.

Site and order data are stored on Contabo server infrastructure. Cloudflare proxies and protects traffic. WayForPay processes card payments; we receive the necessary transaction identifiers and status. If you sign in with Google, Google gives us your e-mail, name and Google account ID; we never receive your Google password. The site loads Google’s sign-in button and window from Google’s servers on the home page, the checkout and the project room. These providers may process information outside Ukraine under their terms and applicable data protection requirements. Information may also be disclosed to competent authorities where legally required.

If you allow analytics, Google Analytics (Google Ireland Limited) and Microsoft Clarity (Microsoft Ireland Operations Limited) receive pseudonymous data about how the site is used: pages viewed, clicks, scrolling, device and browser type, approximate location from the IP address and the referring source. For signed-in clients we send only a pseudonymous identifier, never your email or name. Clarity runs only on the website and the checkout; the project chat and the team console are never recorded. These providers may process data outside the EEA under standard contractual clauses.

Retention

In the piperlink working database, unpaid orders are retained for up to 90 days after submission. Paid order information, confirmations and related correspondence are retained for up to five years after completion for records and handling concerns, unless the law requires a different period. Where a dispute exists, necessary records may be kept until its resolution and completion of legal requirements.

When retention is no longer necessary, information is deleted or anonymized. Supplied test access has a shorter term: we delete it after testing is completed, no later than 14 days afterwards, and ask you to revoke permissions. Evidence of work should not contain secrets or unnecessary personal data.

Cookies and browser storage

Essential (always on): the form protection cookie pl_csrf — up to 24 hours; the account sign-in cookie pl_client — up to 90 days or until you sign out; the language you chose, pl_lang — up to 12 months; when you sign in with Google, Google may set its own g_state cookie. Your cookie choice (up to 12 months), the animation setting and a checkout draft (up to 2 days) are kept in localStorage.

Analytics (only with your consent where consent is required): Google Analytics cookies _ga and _ga_* — up to 13 months; Microsoft Clarity cookies _clck — up to 12 months and _clsk — up to 1 day; the source of your visit (UTM tags, the referring site) is kept in your browser for up to 90 days and added to your order so we understand which channels bring clients. We may also show different visitors different versions of a page (A/B tests); the version is kept in localStorage. Without consent Google Analytics receives only cookieless technical signals (Google consent mode) and Clarity does not load.

You can change your choice at any time with “Cookie settings” at the bottom of the page or by clearing the site data in your browser. We do not use advertising tracking or ad personalisation. The WayForPay page has its own notices and policies.

Your rights and requests

You can ask what personal data is processed, request access and correction or deletion, object in circumstances provided by law, and withdraw consent where consent is the basis. Some information cannot be deleted immediately if required by law or needed for an active contract or dispute; we will explain the reason.

Send requests to [email protected]. We may request proportionate confirmation that the information concerns you, without unnecessary documents. You may also complain to the Ukrainian Parliament Commissioner for Human Rights or another competent authority, or seek judicial protection. Policy updates are published with a date; incompatible new processing purposes are not introduced without the appropriate notice and legal basis.