# Privacy Policy

This Privacy Policy defines how TokenBel processes users’ personal data in accordance with the laws of the Republic of Belarus.

##### Personal Data Controller

The personal data controller is [TokenBel](https://tokenbel.info/).

Contact for personal data inquiries: <admin@tokenbel.info>.

##### Purposes and Legal Basis of Processing

- Registration and authentication: creating and managing accounts, sign-in via Google, Yandex, Microsoft, Telegram. Legal basis: contract performance.
- Handling requests and communication: replies to emails, service notifications. Legal basis: user consent and/or agreement.
- Analytics and service improvement: collecting anonymized metrics to enhance functionality. Legal basis: consent for cookies/identifiers.
- Security and abuse prevention: monitoring activity, resolving incidents, blocking malicious behavior. Legal basis: legitimate interest.
- Legal compliance: record-keeping and storage as required by law. Legal basis: legal obligation.

##### Types of Data Processed

- Account data: email address, username (via Google, Yandex, Microsoft login). Passwords of external services are not accessible to TokenBel.
- Technical data: IP address, user agent, cookies, request parameters, access time.
- Communication: information provided in emails sent to TokenBel.

##### Data Retention

- Account data: until account is deleted or processing goals are achieved.
- Communication: up to 12 months after resolution, or longer if required by law.
- Cookies: session cookies - until browser session ends; persistent cookies - up to 12 months or until consent is withdrawn.
- Technical logs: retained for 30 days unless otherwise required by law or necessary for incident response.

Data is deleted or anonymized after retention periods expire.

##### Data Transfer and Storage

Data is stored on virtual servers located in the **Netherlands** and transmitted via secure protocols.

Third-party services may receive technical data (IP address, cookies, events) across borders when adequate protection is provided by law or with user consent.

##### Third‑Party Services

- Google Analytics: analytics. Policy: [https://policies.google.com](https://policies.google.com)
- Yandex Metrica: analytics. Policy: [https://yandex.by/legal/confidential](https://yandex.by/legal/confidential/)

<p class="callout info">TokenBel does not share account data with these services.</p>

##### Cookies and Consent Management

We use essential and analytical cookies. You can manage consent via browser settings. Declining analytics cookies does not impair core functionality.

##### Age Restrictions

This service is not intended for children. Minors may only use it with parental or guardian consent, if required by law.

##### User Rights

You may request access, correction, deletion, processing restriction, withdrawal of consent, and information about data disclosure. Submit requests to <admin@tokenbel.info>.

You can delete your account and all associated data yourself – [instructions](https://wiki.tokenbel.info/books/rukovodstvo-polzovatelia/page/licnyi-kabinet "Личный кабинет").

You may also submit a complaint to the authorized data protection authority. Contact details are available via official resources or upon request.

##### Security Measures

We apply technical and organizational measures such as encryption, access control, logging, backups, data minimization, and regular software updates.

##### Special Categories of Data

TokenBel does not process special categories of personal data (biometric, medical, political, etc.).

##### Automated Decisions

TokenBel does not make decisions with legal effect solely based on automated personal data processing.

##### Policy Updates

Effective date: **December 06, 2025**.

Updates are published on this page. We may notify users of significant changes via the service interface or email. Continued use implies agreement with the updated version.

<p class="callout info">We do not sell personal data.</p>