Version of 7 October 2026. The Russian version of this policy prevails; this translation is provided for convenience.
1. General provisions
1.1. This policy describes what personal data Fortumania processes, why, on what basis and for how long, and which cookies and analytics services it uses. It is drawn up under Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and is published for unrestricted access.
1.2. The policy applies to the website fortumania.ru, to Fortumania's web app app.fortumania.ru and to Fortumania's phone apps for Android and iOS (together, the "Service").
1.3. Fortumania is a game simulator: it has no money prizes and no cash-out. The Service does not ask for payment details, passport details or any special categories of personal data, and does not process them.
1.4. We carry out the following actions with personal data: collection, recording, systematisation, storage, clarification, use, transfer (provision) to the processors in section 6, depersonalisation, blocking and deletion.
1.5. The Service is for people aged 16 and over. By registering, you confirm that you are 16 or older. We do not knowingly process the data of anyone under 16: if we learn that someone under 16 has created an account, we will delete it together with its data.
1.6. This policy describes how we process data and is not in itself a consent. Consent to the processing of personal data is given at registration as a separate action, a tick next to a link to the standalone document "Consent to the processing of personal data"; consent to analytics cookies is given in the cookie notice (section 4).
2. Operator
The operator of personal data:
IE VOROBEV ALEKSANDR SERGEEVICH (Individual Entrepreneur)
Address: 193168, Saint Petersburg (a federal city), Iskrovsky Avenue, 17, building 1, letter A, premises 40
INN (taxpayer number): 781142577532
OGRNIP (primary state registration number of an individual entrepreneur): 324784700216830
Email for requests: contact@sparrowsoul.ru
Other ways to reach us: Contact us
3. What data we process and why
| Purpose | Data | Basis |
|---|---|---|
| Registering and keeping an account, signing in | email address, username, display name, password (stored only as a hash), dates of registration, of confirming your age, of accepting the Terms of Service and of the consent to the processing of personal data | consent to the processing of personal data; performing the agreement with the user |
| Confirming the address and signing in with a code | email address, one-time code | consent; performing the agreement with the user |
| Keeping the session and protecting the account | session identifier, IP address and browser details at sign-in, the number of sign-in attempts and of codes sent | performing the agreement with the user; the operator's legitimate interest in protecting the Service |
| Checking names for unacceptable content | username and display name | performing the agreement with the user |
| The account's activity log | what was done to the account and when: registration, a change of name or password, deletion, actions by the administration | the operator's legitimate interest in protecting the Service and its users |
| Fixing errors | the error's text and the place in the code where it happened, the page's address and how long it had been open, the Service's version and the features switched on in it, browser and device details (system, kind and model of device, screen, amount of memory, type of network connection), in the apps also the app's version and its updates, language and time zone, the account's identifier if you are signed in | the operator's legitimate interest in keeping the Service working |
| Visit statistics for the website and the web app (only with your consent) | cookies, a random device identifier, the pages viewed and actions on them, language, the Service's version, the account's identifier if you are signed in, and the data Yandex Metrica collects (section 5) | consent |
| App usage statistics and crash reports | the device and installation identifiers AppMetrica assigns, the device's model, system, the app's version, language, actions in the app, crash details, the account's identifier if you are signed in, and the data AppMetrica collects (section 5) | the operator's legitimate interest in keeping the Service working and improving it |
| Running the Service and delivering pages | IP address, time and address of the request, browser details in the technical logs of the hosting and of the applications | the operator's legitimate interest in running and protecting the Service |
| Answering requests | email address and the content of the message | your request and the duty to answer it |
The bases of processing under Part 1 of Article 6 of 152-FZ: consent, clause 1; performing a duty the law places on the operator, including the duty to answer a request, clause 2; performing the agreement with the user, clause 5; the operator's legitimate interest, clause 7.
We make no decisions that have legal consequences for you based solely on automated processing. The automatic check of names only refuses a name, which can be replaced with another at once; the checking service does not keep the text it is sent.
4. Cookies and browser storage
A cookie is a small piece of data a website keeps in the browser. A website can keep data in the browser's local storage in a similar way.
Necessary cookies and storage entries are needed for the Service to work: without them you cannot sign in or have your language remembered. No consent is asked for them. Analytics cookies are set only after you choose "Accept" in the cookie notice.
| Name | Set by | Purpose | Lifetime | Type |
|---|---|---|---|---|
account- | Fortumania | keeps you signed in | up to 30 days or until you sign out | necessary |
NEXT_ | Fortumania (website) | remembers that you chose the English website | 1 year | necessary |
fortumania_ | Fortumania | remembers your answer in the cookie notice | 1 year | necessary |
fortumania-, fortumania., fortumania. (browser storage) | Fortumania | remember the theme and language you chose | until you delete them | necessary |
fortumania_ | Fortumania | a random device identifier for our own visit statistics | 400 days | analytics |
_, _, _ and other cookies prefixed _ | YANDEX LLC (Yandex Metrica) | visit statistics | up to 1 year | analytics |
In the phone apps there are no cookies. The app keeps on the phone the details of your sign-in (in the system's secure storage), the theme and language you chose and a random device identifier for our own usage statistics, and AppMetrica keeps its own device and installation identifiers (section 5). The apps show no cookie notice.
Changing your mind. The "Cookie settings" link at the bottom of every page shows the notice again, where you can give or withdraw consent. When you decline, we delete the analytics cookies we are able to delete and stop collecting statistics. You can also delete or block any cookies in your browser's settings; without the necessary ones you will not be able to sign in.
5. Yandex Metrica and AppMetrica
5.1. If you have consented, the Service uses Yandex Metrica, a web analytics service of YANDEX LLC (16 Lva Tolstogo St., Moscow, 119021, Russia). It collects information about visits: cookies, IP address, browser and device details, the addresses of the pages viewed and where you came from, link clicks and time on the page. If you are signed in, Metrica receives the account's identifier, but not its email or name.
5.2. Session replay (Webvisor) is off: Metrica does not record what you type.
5.3. We see this data only as aggregated reports. YANDEX LLC processes it under its own rules: Yandex's Privacy Policy and Yandex Metrica's Terms of Use.
5.4. The phone apps use AppMetrica, YANDEX LLC's app analytics service. It collects details of how the app is used: device and installation identifiers, the device's model, system, the app's version, language, IP address, actions in the app and crash reports. If you are signed in, AppMetrica receives your account's identifier, but not your email or name. Location tracking and advertising identifiers are switched off. YANDEX LLC processes this data under its own rules: Yandex's Privacy Policy and AppMetrica's License Agreement.
6. Who we share data with
6.1. We do not sell personal data and do not share it with third parties for advertising.
6.2. Data is processed with the following services, located in Russia:
- Yandex Cloud (Yandex.Cloud LLC) stores the Service's data, sends email (Yandex Cloud Postbox) and checks names for unacceptable content (YandexGPT). These services process data on our instructions and only so that the Service works.
- Yandex 360 for Business (YANDEX 360 for Business LLC) is the mail through which we receive your requests and answer them, including at contact@sparrowsoul.ru and addresses on the fortumania.ru domain. Letters are kept in data centres in Russia and processed on our instructions.
- Yandex Metrica (YANDEX LLC), on the website and in the web app, only with your consent (section 5).
- AppMetrica (YANDEX LLC), in the phone apps (section 5).
6.3. We may disclose data to public authorities where the law requires it.
7. Where and how long data is kept
7.1. Data is kept in databases on servers located in Russia (Yandex Cloud). We do not transfer personal data across borders.
7.2. Retention periods:
- account data, while the account exists; deleting the account deletes its data and its activity log, and if the administration deleted it, the administration's log keeps a record of the deletion with the account's identifier;
- sessions, up to 30 days or until you sign out;
- one-time codes and attempt counters, from a few minutes to an hour;
- the technical logs of the hosting and of the applications, for the period the hosting provider's rules set;
- visit statistics in Yandex Metrica, for as long as the counter exists but no longer than 2 years; you can ask for them to be deleted, in which case we delete the whole counter;
- app usage statistics and crash reports in AppMetrica, for as long as the app exists in AppMetrica but no longer than 2 years; you can ask for them to be deleted, in which case we delete the whole app in AppMetrica;
- our own visit and app usage statistics, no longer than 2 years;
- error reports, no longer than 1 year;
- correspondence, until the request has been answered but no longer than 1 year.
7.3. Once the purpose of processing is achieved, the retention period ends or you withdraw consent, we stop processing and destroy the data within 30 days, unless the law requires us to keep it longer. Data is destroyed by deleting it from the databases and logs beyond recovery; letters are deleted from the mailbox. Destroying data on request or when consent is withdrawn is recorded in a certificate of destruction of personal data.
8. Protection measures
We take organisational and technical measures to protect personal data from unlawful access, alteration, disclosure and destruction:
- the Service works only over the secure HTTPS protocol;
- passwords are kept only as a hash from which the password cannot be recovered;
- access to the databases, the cloud, Yandex Metrica's and AppMetrica's statistics and the mail is limited to the operator and those who need it to run the Service, and is protected by passwords;
- each action the administration takes on accounts is logged;
- data is processed and kept on servers in Russia;
- once the purposes of processing are achieved, or consent is withdrawn, data is destroyed as section 7.3 describes.
9. Your rights
You have the right to:
- find out what data of yours we process, and receive a copy of it;
- have inaccurate, outdated or unneeded data corrected, blocked or deleted;
- withdraw your consent to the processing of personal data and your consent to cookies;
- delete your account;
- appeal against our actions to Roskomnadzor (the Federal Service for Supervision of Communications, Information Technology and Mass Media) or in court.
To exercise a right, write to contact@sparrowsoul.ru from the address in your account. We will answer within 10 working days of receiving the request; the period may be extended by no more than 5 working days, in which case we will tell you why. Withdrawing consent to the processing of the account's data means the account can no longer be used, and we will delete it.
10. Changes to this policy
We may change this policy. A new version takes effect when published on this page, with its date at the top. If the changes affect what you consented to, we will ask for your consent again.