Privacy Policy

Version of 20 October 2026. The current version is published at https://ezh-grabber.ru/en/privacy/.

This is a translation provided for convenience. The Russian version at https://ezh-grabber.ru/privacy/ is legally binding and prevails in case of any discrepancy.

1. Operator

The personal data operator is Individual Entrepreneur Gennady Aleksandrovich Galkin, TIN (INN) 504406761906, OGRNIP 318470400054300, e-mail: gal.dev.lab@bk.ru.

The App is published on Google Play by the developer Evgenii Aleksandrovich Galkin (developer account “gal.dev.lab”, e-mail gal.dev.lab@gmail.com). He develops and maintains the App and the api.ezh-grabber.ru server on behalf of the Operator. The personal data operator and the seller of the Pro license is Individual Entrepreneur Gennady Aleksandrovich Galkin. Questions about the processing of personal data can be sent to either address: gal.dev.lab@bk.ru or gal.dev.lab@gmail.com.

This Policy applies to the «Ёжик» (Hedgehog) Android app (the App), the https://ezh-grabber.ru website and the https://api.ezh-grabber.ru server through which the App checks the device, free downloads and the Pro license. The Policy is drawn up in accordance with Federal Law No. 152-FZ “On Personal Data”.

2. What Data Is Processed

Device data — for the App to work with the server:

• a random App installation identifier and a public key created in the device’s secure storage;
• the result of the authenticity check (attestation): key protection level, bootloader and system state, whether the App signature matches;
• device model, Android and App versions;
• a SHA-256 hash of the ANDROID_ID identifier — free downloads are counted per device by it, not per installation; ANDROID_ID itself is not sent to the server;
• the IP address of the last request, dates of the first and last requests.

Free downloads — the domain of the site the download was made from (for example, example.com) and the time. Page addresses and video titles are not sent to the server unless you request support for a site yourself (see below).

Download statistics — each time a download starts, including with Pro, the App sends the site’s domain (for example, example.com). The server adds one to a “date + domain” counter and does not link it to the device, installation, license or IP address. Page addresses and video titles are not sent.

License and purchase — the buyer’s e-mail, license term and plan, the devices Pro is activated on, invoice number, amount, status and time of payment, fiscal receipt data. The license key is stored only as a hash. The Operator does not receive bank card data: the payment is processed by Robokassa. The Pro license is sold by Individual Entrepreneur Gennady Aleksandrovich Galkin; payments are not made through Google Play’s billing system.

Promo codes — the e-mail you specified when redeeming a promo code, the time of redemption, the term of the granted license and a SHA-256 hash of the device’s ANDROID_ID: by it a promo code counts once per device, including after reinstalling the App.

Site support requests — the link that could not be downloaded and your e-mail, if you tapped “Request support” in the App and confirmed sending. The link may contain page data, so send it only if you agree that the Operator will see it. The link is passed to the Operator to improve the App, the e-mail — to let you know when support for the site is added.

Messages — your e-mail and the text of the message, if you wrote to the Operator.

Error log — only if you tapped “Send logs to developer” in the App’s “Help and support” section and confirmed sending: the App’s errors of the last 7 days — time, stage, website domains, error code and technical stack trace, App and Android versions. Full links, video titles, cookies and tokens are not included. The report is linked to the device it was sent from and lets the Operator find and fix the error.

Server technical logs — IP address, time, method and response code of a request, without page addresses and headers.

Website visits — only if you clicked “Accept” in the cookie notice: the website loads the Yandex Metrica web analytics service, which uses cookies to collect anonymous information about the visit — IP address, browser and device information, addresses of the pages viewed and the referrer, time, actions on the page (scrolling, clicks, pointer movements). The data goes to Yandex; only anonymous statistics are available to the Operator. If you clicked “Decline”, Metrica is not loaded. You can change your choice at any time via the “Cookie” link at the bottom of any page of the website. Metrica is not used on the purchase status and payment pages.

What does not leave the device: page addresses and links you open (except the domain for download statistics), the list and files of downloads, App settings, cookies and data of the built-in browser.

3. Purposes of Processing

• device registration, App authenticity check and accounting of free downloads;
• conclusion and performance of the contract: granting, extending, activating and revoking the Pro license, sending the key;
• granting a license by promo code and counting its redemptions — once per device;
• accepting payments and generating fiscal receipts;
• considering site support requests and notifying when they are fulfilled;
• finding and fixing errors of the App from the log the user sent;
• answering messages and claims;
• protecting the service from abuse, hacking and bypassing of limits;
• analysing website traffic and improving the website — only with the visitor’s consent;
• anonymous statistics of the sites downloads come from — to maintain and improve the App;
• fulfilling legal requirements, including tax accounting.

4. Legal Grounds

• performance of a contract to which the user is a party (clause 5, part 1, article 6 of Law No. 152-FZ): registering the device, checking the App's authenticity and accounting of free downloads — under the Terms of Use; granting, extending, activating and revoking the Pro license, including by promo code, counting promo code redemptions, sending the key and service messages, considering claims — under the public offer;
• fulfilment of duties imposed on the Operator by law (clause 2, part 1, article 6): accepting payments and fiscal receipts (Federal Law No. 54-FZ), tax and accounting records (the Tax Code of the Russian Federation), answering requests of data subjects;
• the Operator's legitimate interest in protecting the service from abuse, hacking and circumvention of limits, including the server's technical logs (clause 7, part 1, article 6);
• the user's consent (clause 1, part 1, article 6): site support requests and answers to messages not related to performance of the contract — the consent to the processing of personal data the user gives in the App; the error log — the consent the user confirms in the App before sending it; the newsletter — the consent to receive newsletters, if given; cookies and Yandex Metrica — the consent the visitor gives with the “Accept” button on the website.

Withdrawing a consent stops only the processing based on that consent. Processing based on the contract and the law continues: withdrawing consent does not take away paid or gifted Pro or the free mode.

5. Actions with Data

Collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer (provision) to the persons listed in section 7, anonymization, blocking, deletion and destruction — by automated means.

6. Retention Periods and Location

• device and free download data — while the device contacts the server and one year after the last request, if the device has no valid license; then deleted automatically;
• download statistics by domain — indefinitely: they are not linked to a user or device;
• e-mail, licenses, payments and receipts — five years after the end of the last license or the last payment, as required by tax and accounting rules;
• the e-mail specified when redeeming a promo code — until the end of the license term under the promo code and seven days after, then deleted automatically; the other redemption details (device hash, time, term) are kept while the promotion exists so the promo code does not count again;
• the link and e-mail from a site support request — until a decision on the site (support added or decided not to add) and 30 days after, but no longer than a year, then deleted automatically;
• an error log sent from the App — 30 days, then deleted automatically;
• server technical logs — 30 days;
• encrypted database backups — up to 30 days;
• messages — until the end of the correspondence and one year after;
• Yandex Metrica data — in accordance with the terms of Yandex; the Operator receives it only as anonymous reports.

Data is stored and processed on servers in the Russian Federation (Selectel; the Operator's mailbox with messages — on the servers of VK LLC; Yandex Metrica data — on the servers of Yandex LLC). There is no cross-border transfer.

7. Who Data Is Shared With

• Robokassa LLC — accepting payments and generating fiscal receipts, including sending receipts to the fiscal data operator;
• Selectel JSC — hosting the server and storing encrypted backups;
• Yandex LLC — website analytics (Yandex Metrica), if the visitor agreed to cookies;
• Selectel JSC (e-mail service) — sending the license key and service messages;
• VK LLC (Mail.ru Mail) — receiving and storing messages users send to the Operator's e-mail;
• government authorities — in cases provided for by law.

Data is not shared with or sold to anyone else.

8. Your Rights

You may obtain information about the processing of your data, demand its clarification, blocking or deletion, withdraw your consent, and appeal the Operator’s actions to Roskomnadzor or in court. A request is sent to gal.dev.lab@bk.ru. For the Operator to find your data, write from the address you specified at purchase, at promo code redemption, in a site support request or in an earlier message, or give the report number the App showed after sending an error log. The Operator responds within 10 business days.

If you have not given the Operator an e-mail and have not sent an error log, the server keeps only device and free download data not linked to your name or address. To stop its collection, uninstall the App: the server deletes this data automatically one year after the device's last request (section 6).

Data on the device is deleted together with the App or by clearing its data in the Android settings; built-in browser data — in the Settings of the App. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. Data the Operator is required to keep by law is deleted when the established period expires.

9. Data Protection

Connections to the server are protected by TLS; the App accepts only the Operator’s server certificate. Requests are signed with the device key, which never leaves the secure storage. Access to the administrative part is restricted and protected by two-factor authentication, and administrator actions are logged. License keys are stored as hashes, backups are encrypted.

10. Children

The App is not intended for children under 14, and the Operator does not knowingly process their data.

11. Changes

The Operator may change this Policy. The current version is published on the website and available in the Settings of the App.