Personal Data Processing Policy

This document explains what data the site processes, why it is used, and how users can manage their data.

Last updated: June 11, 2026

1. General Provisions

This policy describes how Uraboros and its related web interfaces process and protect users' personal data.
The policy applies to all information the operator may receive when a user accesses the site, registers an account, signs in, or uses the service functionality.

Account data: login, email, password hash, registration date, and email verification status.
Session and authentication data: session id, sign-in data, and recent activity details.
Technical data: IP address, User-Agent, browser and device details, cookies, and interface preferences.
Service usage data: query history, saved queries, technical service logs, and user activity within the interface.
Any other data voluntarily entered by the user into service forms while using the platform.

User registration, account creation, and account maintenance.
Authentication, session support, and sign-in security.
Providing service functionality, including saved queries, settings, and activity history.
Ensuring stable site operation, diagnosing errors, preventing abuse, and protecting the infrastructure.
Complying with applicable legal obligations.

Personal data is processed based on the data subject's consent, and where processing is necessary to perform an agreement with the user, provide access to the service functionality, or comply with legal obligations.
By using the site and submitting data through its forms, the user confirms acceptance of this policy where the relevant processing basis applies.

The site uses functional cookies and other technical identifiers required for sign-in, storing interface preferences, and ensuring proper site operation.
Cookies may be used to store theme preferences, interface state, and confirmation that the user has acknowledged site notices.
Users may restrict cookies in browser settings, but this may affect the availability of certain site features.

Personal data is not disclosed to third parties without lawful grounds, except where required by applicable law or necessary for site operation.
The operator may engage technical contractors and infrastructure providers for hosting, email delivery, site protection, and service reliability. In such cases, data is shared only to the extent necessary for the relevant purpose.
If the site involves cross-border personal data transfer, the operator undertakes to account for the legal requirements applicable to such transfer.

Users may request information about the processing of their personal data and may request correction, blocking, or deletion if the data is incomplete, outdated, inaccurate, unlawfully obtained, or no longer necessary for the declared purpose.
Users may withdraw consent where processing is based on consent and may request deletion of their account and related data.
To exercise these rights, users may contact the operator using the details provided in this policy.

The operator applies reasonable organizational and technical measures to protect personal data against unauthorized access, modification, disclosure, blocking, destruction, or other unlawful actions.
Such measures may include access controls, authentication mechanisms, security event logging, backups, and software maintenance.

Personal data is stored no longer than necessary for the purposes of processing unless a longer retention period is required by law.
Account data is retained for the lifetime of the user's account and afterwards for the period necessary to meet the operator's legal obligations.
Technical logs, cookies, and related support data are retained for the period necessary for service operation, security, and internal retention procedures.

Requests regarding personal data processing should be sent to: osint@uraboros.online.
The request should preferably include information sufficient to identify the user, a description of the request, and a reply contact.

The operator may amend this policy from time to time.
The current version of the policy is published on this page and becomes effective upon publication unless stated otherwise.