Privacy Policy

Version of · nakrut.us

This Policy describes how nakrut.us (the “Service”) processes personal data of users in accordance with Russian Federal Law No. 152-FZ “On Personal Data”.

1. Personal data operator

The personal data operator is nakrut.us service administration.

Personal data inquiries: @nakrut_su.

2. What data is processed

  • email, password hash;
  • order, balance, and transaction data in the Service;
  • IP, User-Agent, session and device information;
  • 2FA data (TOTP secret, backup code hashes);
  • referral code;
  • technical cookies and auth tokens;
  • for top-ups — payment IDs, amount, method (without storing card details unless they are submitted to the Service).

3. Processing purposes

  • registration, authentication, account security;
  • fulfilling orders and tracking balance;
  • handling requests and disputes;
  • improving the Service.

4. Legal bases

  • user consent (Art. 6 of 152-FZ);
  • performance of obligations to provide the Service;
  • the operator’s legitimate interest in security.

5. Storage and transfer

Data is stored on servers used to operate the Service until the processing purposes are achieved or consent is withdrawn.

Transfer may occur to SMM providers (order data), hosting providers, and upon lawful requests from government authorities.

6. User rights

You may request information, correction, or deletion of data, or withdraw consent — via @nakrut_su. Withdrawing consent may make the Service unavailable.

7. Protection

Measures applied: password hashing, secured sessions, JWT, 2FA, access restriction.

8. Changes

Current version: https://nakrut.us/legal/privacy