Personal data processing policy
Revision: 24 October 2026
1. Operator and scope
The personal data operator and service provider is self-employed Shchekaturov Svyatoslav Kirillovich, taxpayer ID (INN) 772481563392, Moscow, Russian Federation. Contact for personal data enquiries: support@lyrarma.com.
This policy covers visitors to lyrarma.com, subscribers to Lyrarma Premium and Lyrarma Max, and people contacting support. Account processing in Lyrarma ID and the use of Lyrarma Cloud are also governed by the policies linked below. Other services describe their own data processing in their respective documents.
2. Data and purposes of processing
When a page is requested, servers and infrastructure providers receive the IP address, request time and address, and technical information sent by the browser. This information is used to deliver pages, diagnose errors and protect the site.
To maintain an account and provide a subscription, Lyrarma ID processes the account identifier, username, email address, password hash and assigned plans. Passwords are stored as hashes. Account and plan data is used to identify the account, provide access and apply the selected plan.
Payment and refund enquiries involve the plan, amount, payment date, transaction reference, payment status and receipt details supplied by the customer or payment provider. They are used to confirm payment, assign the subscription, handle refunds and meet applicable accounting obligations. Card details are entered with the payment provider, not sent to support.
Support processes your email address, message and attachments to respond, resolve service issues and handle data requests. Send only information needed for your enquiry; do not send passwords, sign-in tokens or unnecessary personal data.
3. Grounds and processing methods
Processing is based on Federal Law No. 152-FZ of 27 July 2006 on Personal Data. Account provision, subscriptions and related support require processing to enter into and perform a contract with the user; statutory duties provide a separate legal ground. Security and protection of rights rely on legitimate interests only where necessary and without infringing the rights of data subjects.
Where consent is legally required and there is no other ground, it is obtained separately. Reading this policy or visiting the site does not constitute consent to advertising, public disclosure or any additional processing. Withdrawing consent does not end processing that has another lawful ground.
Processing includes collection, recording, organisation, storage, retrieval, use, correction, necessary disclosure, restriction and deletion, using automated systems and authorised personnel handling enquiries. Data is limited to what is needed for each stated purpose.
4. Access and recipients
The Lyrarma ID policy identifies Timeweb Cloud (ООО «ТАЙМВЭБ.КЛАУД», INN 7810945525) as the account and cloud server provider, and Timeweb (АО «ТаймВэб», INN 7810353960) as the support email provider. Cloud file storage uses Bucket.ru (ООО «Студия 24», INN 2463088895). The Cloud policies describe their roles and the data they process in more detail.
Authorised personnel and infrastructure providers may access data only as needed to provide and support the service. When payment is made through Robokassa, it processes the information required for the payment under its own terms. Competent authorities receive data when there is a lawful basis. Personal data is not sold or made public for advertising.
According to the Lyrarma ID policy, its servers, databases, file storage and support email infrastructure are located in the Russian Federation. The website also loads fonts from Google Fonts, which creates an external connection and sends technical network information, including the IP address and browser headers, to Google. Any international transfer must have the legal grounds and follow the procedures required by applicable law; this policy does not replace them.
5. Browser storage and cookies
The main website stores language, theme and parallax background preferences in browser localStorage. These settings have no application-defined expiry and remain until removed by the browser or user. You can clear them in your browser settings; the site may save your preferences again when you use its controls.
Lyrarma ID and Cloud use separate sign-in and language cookies as described in their policies. The main website does not request account credentials or use advertising analytics. Links to other platforms take you to services with their own storage and privacy terms.
6. Retention and deletion
Account and plan data is retained while the account and subscription are serviced. Payment records are retained for the periods required by applicable law. Support correspondence is retained until the enquiry and related substantiated claims are resolved; technical logs are retained only as needed for diagnostics and investigation of incidents.
Once the processing purpose is achieved, data must be deleted within 30 calendar days unless a lawful ground permits further retention. Where separately provided consent is withdrawn, processing must stop and data no longer needed must be deleted within 30 calendar days, subject to statutory exceptions. Relevant copies and backups are included in deletion procedures; technical difficulties do not justify indefinite retention.
7. Your rights and requests
You may request information about processing and access to your personal data, correction, restriction or deletion, withdraw separately provided consent, and challenge processing before Roskomnadzor or a court. Send requests to support@lyrarma.com, stating the request and enough information to locate the relevant account or enquiry. The operator may verify your identity and authority in a proportionate manner.
Information about processing and access to data is provided within 10 working days of receiving the request; a reasoned notification may extend this by no more than 5 working days where the law permits. Other requests are handled within the periods established by Law No. 152-FZ. Where data must be retained on another lawful ground, the operator explains that ground.
8. Protection and policy changes
The operator must restrict access to personal data, protect accounts and infrastructure, and take organisational and technical measures against unauthorised access, alteration, loss and disclosure. Do not share account credentials; report suspected unauthorised access to support@lyrarma.com.
The current revision is available on this page with its revision date. Material changes must be communicated before they take effect. A revised policy does not itself provide consent for processing that legally requires separate consent.