Personal data policy

ReviewNet (review-net.site) is a service for reviews of websites. This page explains what personal data we process and how you can control it.

Who processes the data

Data controller: QAVENTO SYSTEM LLC, taxpayer ID (STIR) of the Republic of Uzbekistan 313106144, address: 64a Labzak Street, Labzak MFY, Shaykhontohur District, Tashkent, Republic of Uzbekistan.

Questions about personal data: support@review-net.site.

Whose data: registered users — review authors and site owners, visitors of the site, and visitors of other websites that show the ReviewNet badge (technical server logs only). You can use the service from the age of 14.

What data we receive

  • email address — to sign in and send notifications;
  • the display name you choose;
  • IP address and browser details (user agent) — when you sign in, post reviews, replies and reports;
  • texts of reviews, replies and reports, ratings;
  • a session cookie — to keep you signed in;
  • your choice in the cookie window — in the browser's storage and, if you are signed in, in your account;
  • technical server logs: request time, page address, IP address, response code;
  • cookie-free visit statistics: the hosting provider counts page views — it receives the address of the opened page and, with the request, the IP address and browser details;
  • only with your consent — Yandex Metrica data: Metrica cookie identifiers, IP address, browser and device details, addresses and titles of the pages you open and the page you came from, clicks, scrolling and link clicks; if you are signed in — your account number (not your email or name) and the fact of signing up, writing a first review and verifying a site. Details — in the analytics consent.

We don't ask for your phone number, passport or payment details.

Why

  • to create your account and let you in with a code from an email;
  • to publish reviews under your display name — with your separate consent to publication;
  • to send the notifications you turned on: replies to your review, new reviews for site owners;
  • to protect the service from spam and abuse, handle reports and moderate reviews;
  • to count visits without cookies — the hosting provider does this;
  • with your consent — to analyse how the site is used and to evaluate our ads in Yandex Direct;
  • to comply with the law.

Legal grounds

Each purpose has its own data, legal ground and period:

  • account, sign-in with a code and notifications — email, display name, session cookie, IP address and browser details at sign-in; ground — performance of the terms of use (clause 5, part 1, art. 6 of Federal Law No. 152-FZ) and your consent (clause 1, part 1, art. 6); as long as the account exists;
  • publication of reviews — display name, texts, ratings, dates, number of reviews; ground — a separate consent to publication (art. 10.1); until you withdraw it;
  • security, protection from spam and abuse, moderation and handling reports — IP address, browser details, the action log, texts of reports; ground — the controller's legitimate interests, provided your rights are not violated (clause 7, part 1, art. 6); IP address and browser details — 12 months;
  • the “I'm not a robot” check — IP address and browser details; ground — the controller's legitimate interests (clause 7, part 1, art. 6);
  • cookie-free visit counting by the hosting provider — page address and, with the request, IP address and browser details; ground — the controller's legitimate interests (clause 7, part 1, art. 6);
  • analytics and ad evaluation (Yandex Metrica) — the data listed in the analytics consent; ground — your consent (clause 1, part 1, art. 6); the consent is valid for 12 months;
  • replying to requests and complying with the law — email, text of the request; ground — the controller's legal obligations (clause 2, part 1, art. 6).

How we process data

By automated means. Actions: collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer to processors (provision, access), with your consent — provision to Yandex LLC, anonymization, blocking, deletion and destruction.

What others see

If you have consented to publication, everyone sees your display name, your reviews with their ratings and dates, and how many reviews you have written. Your email, email domain and IP address are never shown to other users or site owners. Only moderators see them — to fight spam.

How long we keep data

  • account data — as long as the account exists;
  • IP address and browser details of reviews and the IP address in the action log — 12 months, then deleted;
  • sign-in codes and sessions — until they expire;
  • emails in the sending queue — up to 30 days after sending;
  • the action log — without a link to a deleted account;
  • your choice in the cookie window — 12 months, then we ask again;
  • an ad click number — 21 days; goal records for sending to Yandex Metrica — up to 45 days;
  • Yandex Metrica data — at Yandex LLC under the service terms; it doesn't include your email or name;
  • technical logs and visit statistics at the hosting provider — no longer than needed to run and secure the service.

When the period ends or you withdraw consent, the data is destroyed within 30 days unless another legal ground requires keeping it. When you delete your account — at once; in backups — when their retention period ends.

Who we share data with

Processors acting on our instructions (part 3, art. 6 of Federal Law No. 152-FZ):

  • the hosting provider — storing data on servers in Russia, sending sign-in codes and notifications, counting visits without cookies;
  • Yandex SmartCaptcha (Yandex Cloud) — to tell people from bots; it receives your IP address and browser details;
  • Yandex LLC (16 Lva Tolstogo St., Moscow), the Yandex Metrica service — only if you allowed analytics.

If you allowed analytics and came from our ad in Yandex Direct, Yandex LLC uses details of your actions on the site to evaluate and tune ads as an independent controller — under its own privacy policy.

We don't sell data and don't share it for advertising without your consent. Data is disclosed to government authorities only where the law requires it.

Where data is stored

On the hosting provider's servers in Russia; Yandex Metrica data — at Yandex LLC, which under the service terms stores data of Russian citizens in Russia. There is no cross-border transfer.

Cookies and similar technologies

Essential — always on:

  • rn_session — keeps you signed in, up to 90 days, set only after you sign in; rn_auth — a sign-in marker with the same lifetime;
  • your choice in the cookie window — in the browser's storage, 12 months;
  • on the sign-in page — the Yandex SmartCaptcha check (IP address and browser details).

Analytics — only with your consent. Yandex Metrica sets cookies on our domain (_ym_uid, _ym_d, _ym_isad and others, up to 1 year) and on Yandex domains (yandexuid, yabs-sid and others). We don't record sessions (no Webvisor). There is no counter in the admin area.

Until you choose, Metrica isn't loaded: the addresses of pages you opened in the last 24 hours and the ad click number from the link are kept only in your browser. If you allow analytics, they are sent to Metrica; if you refuse, they are deleted at once.

To change your choice, use “Cookie settings” at the bottom of any page. After you refuse, we delete Metrica cookies on our domain; cookies on Yandex domains can be deleted in your browser settings.

Cookie-free statistics: the hosting provider counts page views — it receives the page address and, with the request, the IP address and browser details.

How we protect data

  • the connection to the site is encrypted (HTTPS);
  • there are no passwords: you sign in with a one-time code; codes and sessions are stored only as hashes;
  • only moderators see emails and IP addresses, and their actions are logged;
  • IP addresses of reviews and in the action log are deleted after 12 months.

Your rights

  • find out whether we process your data, what data, why, on what grounds and for how long, and who processes it on our instructions — write to support@review-net.site from your account email;
  • demand that we correct, block or destroy data that is incomplete, outdated, inaccurate, unlawfully obtained or not needed for the stated purpose;
  • change your display name — in settings;
  • withdraw consent to publication — delete your reviews in My reviews or write to us: publication stops as soon as we receive the request;
  • withdraw consent to analytics — “Cookie settings” at the bottom of the page;
  • withdraw consent to processing and delete your account — in settings, the “Delete account” button: reviews, replies and site ownerships are deleted at once;
  • appeal our actions to Roskomnadzor or in court.

We reply to requests within 10 business days. If we need more time, the period may be extended by no more than 5 business days — we will tell you why.

Changes to this policy

A new version is published on this page. We will email you about significant changes. Version of 30 September 2026.