Privacy Policy

1. Who we are

1.1. This policy explains how the administration of sudorgin.pro (the “Administration”) handles the data of people who use the site, the account area and our programs.

1.2. For any question about your data, write to alex@sudorgin.pro.

2. What we collect

2.1. What sign-in, purchases, support and programs cannot work without, and how people use the site:

• your email — when you sign in, order, send a request, contact support, report a bug and before downloading a free item;
• when you sign in with Google — your name, email, profile picture and Google account number;
• the name for your certificate, if you entered one. A certificate is open to anyone who has its link — that is how its authenticity is checked;
• orders: what was bought, when, for how much and by which payment method. We never receive your card details — the payment service handles them. For a cryptocurrency payment, OxaPay sends us the transfer details: coin, network, amount, transaction ID and wallet addresses; for a cryptocurrency refund, the wallet address you give us;
• your answer to “Where did you hear about us?” on the page after checkout, if you answered: the option you chose and the text you typed into “Other”. It is stored with the order and goes into our count of where buyers come from without your email or order number;
• your reply to our one-question email (for example, “What stopped you from buying?”), if you replied: the reply text without the quote of our email, and the time. The reply is forwarded to the Administration’s mailbox, and the text goes into our count of where buyers come from and what stops them without your email or order number, with addresses, phone numbers and links blanked out, and is analyzed by an AI service (clause 5.1). The email itself stays in the Administration’s mailbox, like any email sent to us;
• clicks on links in our emails: each link goes through sudorgin.pro, and we record which email you followed a link from and when, and, if you unsubscribe, which email's link you used. We do not track whether you open an email. This shows us which emails are useful and lets us stop writing to people who no longer read them; email statistics count clicks as numbers, without addresses;
• service requests — your contact method and the task description; support conversations; if you write via Telegram — your Telegram account number;
• when you activate a program or it checks the key — irreversible fingerprints of your computer and address, your operating system and the program version. We do not store the computer identifier itself;
• during a program trial — the version of the program that started the trial and the program's message that the plugin was launched: the product, the day and an anonymised computer fingerprint. It contains no project contents, paths or file names. We use it to understand whether the trial helps;
• bug reports for our programs: your system, Adobe app version, the program log and a diagnostics report, if you attached them, and an anonymised computer fingerprint. If you did not enter an email and a license key for this program is activated on this computer, the key owner's email is added to the report so that we can reply;
• error notifications the program sends on its own — without any action from you and with no off switch, when you see an error in a plugin, when Premiere quits or freezes, or when the panel engine crashes: the error text, the action name, your last actions in the plugin, plugin, Premiere and Windows versions, and an anonymised computer fingerprint. There are no personal files, projects or emails in a notification. After a crash or freeze it comes with a memory snapshot of the Adobe app at the moment of the crash, as does a bug report if you attached one: the snapshot may contain whatever was open in the app. Snapshots are stored in Cloudflare R2;
• your download history, lesson views and course progress;
• before you download a free program, trial version or installer — your email, what you downloaded, from which page, which video or post link brought you (the utm tags in the address) and how you gave your email: in a field, through Google or from your account. No code is sent to the email in this case, so an email from a field is treated as unconfirmed until you sign in to an account with it or press “Confirm” on the page the button in our email leads to. When you press it, we record the time and your full IP address — proof that the owner of the mailbox confirmed it;
• a log of sign-ins to your account;
• your activity on the site: which pages you open, where you came from, what you click, how far you scroll and which parts of a page you look at, whether you play a video and how far you watch it, why checkout did not go through, plus your country, language and device type. We do not record what you type into fields. If you are signed in or placed an order, your activity is linked to them. You can opt out with the “Don't track my activity” button (section 9);
• technical data for the site request log: your IP address and browser details (section 2.2).

2.2. Almost everywhere, your IP address is stored as an irreversible fingerprint that cannot be turned back into the address. The full address is kept in three places: the site request log — 30 days on the server and up to three months in backups; the download log of purchased files at Cloudflare, where those files are stored — 7 days; and the record of confirming your email with the button from our email. Without the first there is no way to investigate a break-in; the second shows whether a purchase is being passed around; the third proves that the owner of the mailbox confirmed it.

3. Why

• so you can sign in and use your account;
• to deliver what you bought: keys, files, lessons, hours;
• to protect keys from copying and the site from attacks and abuse;
• to answer your question or request;
• to send emails about your order and key — including a reminder if an order is unpaid;
• to remind you by email about a product you looked at or started to buy — if we know your email because you signed in or placed an order. Every such email has a one-click unsubscribe link, and the “Don't track my activity” button stops them too (section 9);
• to understand how people find and use the site, where they abandon a purchase and what is inconvenient — and make the site better. To do this, an AI service analyzes de-identified paths of visitors through the site (section 5.1);
• to send one email after a download on how to install the program and one reminder to confirm your email. No other emails go to an unconfirmed email;
• to send the newsletter — only if you agreed to it yourself.

4. Legal basis

• performance of the contract — delivering purchases and running your account under the Terms;
• your consent — the newsletter and delivery of free items by email; its terms are in a separate document, “Consent to Personal Data Processing” (the /consent page), and you can withdraw it at any time;
• the Administration's legitimate interest — site security, key protection, understanding how the site is used, and reminders about products you looked at or started to buy. You can opt out of activity recording and of reminders at any time (section 9);
• legal obligations — sales accounting.

5. Who we share data with

5.1. Data goes only to the services listed here, and only as much as they need:

• Hetzner — the site's server in Germany;
• Cloudflare — all site traffic passes through it; it also runs the “not a robot” check, stores files for download and crash snapshots attached to bug reports;
• Google — sign-in, if you sign in with Google; the support mailbox; backups of the database and the request log;
• Resend — sends emails, receives your replies to them and tells us if an email was not delivered or someone complained about it: we no longer write to such an address;
• Sentry — information about site errors. Emails, keys, cookies and form contents are scrubbed before sending;
• Anthropic — the Claude AI service we use to develop the site; it also analyzes how visitors move through the site, where they abandon a purchase and how people reply to our one-question emails. Visitor paths reach it only de-identified — no emails, IP addresses, account or order numbers;
• lava.top — takes card payments (the “CIS & worldwide” method): receives your email, the order amount, the payment page language and the tags of the link you came by;
• Polar.sh — takes payments by the “Rest of the world” method as the Merchant of Record: receives your email and the order amount;
• OxaPay — takes cryptocurrency payments: receives the order amount and number. OxaPay does not receive your email;
• Kinescope — plays course videos; your email is drawn over the video to discourage copying;
• Bunny — plays demo videos on the site's pages;
• YouTube and VK Video — only if you play a video in the portfolio or on an episode or course page;
• Telegram — everything you write to support (on the site, by email or in Telegram) goes to the Administration's private Telegram group. Files from the conversation — photos, videos, documents, email attachments — are stored there too, in Telegram, not on the site's server. The same group receives notifications about orders (number, items, email), requests (contact method and task) and bug reports (email and the start of the text). On the bot page, channel pictures load from Telegram's servers.

5.2. We do not sell data or share it for advertising.

6. Where data is stored

6.1. The site's server is in Germany. The services listed in section 5 may process data in other countries, including the United States.

7. How long we keep it

• your account and everything linked to it — until you delete the account, except as listed below;
• the request log with full IP addresses — 30 days on the server;
• the download log of purchased files with full IP addresses — 7 days at Cloudflare;
• backups — up to three months: deleted data stays in them that long;
• activity on the site — 6 months, visit details — 13 months; after that only overall totals remain, with no individual people in them;
• a diagnostics report and a crash snapshot attached to a bug report, error notifications and their crash snapshots — 90 days;
• an email sign-in code is valid for 15 minutes;
• the log of free downloads — until you delete your account or ask us by email to delete it;
• replies to our one-question emails — until you delete your account or ask us by email to delete them;
• your newsletter subscription — until you unsubscribe; we keep the unsubscribe record and the sending log afterwards so we never write to you again. The IP address of your email confirmation is erased together with the subscription and when you delete your account.

7.1. After the account is deleted, the following remain: orders and license keys — for sales accounting and as the law requires; certificates — they are used to verify authenticity; bug reports — they are used to fix the programs; service requests.

8. Cookies

8.1. The site sets cookies: for sign-in (30 days, renewed while you keep visiting), for the support window (180 days — so it recognizes you and shows your conversation), with the email you gave before downloading (a year — so the program offers to sign in with that email), for your chosen language, Cloudflare's technical cookies, and a cookie that lets the site recognize your browser for activity recording (13 months). Your cart is stored in your browser's memory.

8.2. There are no advertising cookies or third-party counters on the site: activity is recorded by the site itself. It goes out for analysis only de-identified (section 5.1), and a reminder email names only the product, not the rest of your path through the site. You can opt out with the “Don't track my activity” button at the bottom of this page. If you play a VK Video or YouTube clip, these services may set their own cookies under their own rules.

9. Your rights

9.1. You can:

• find out what data about you is stored and get a copy;
• correct it;
• delete it;
• object to its processing;
• opt out of the newsletter and reminder emails — at any time, no reason needed;
• complain to the data protection authority in your country.

9.2. Delete your account with the button in your account settings; your site activity is erased along with it. Turn off activity recording and erase what was collected right away with the “Don't track my activity” button at the bottom of this page or in your account settings: it erases everything about this browser and, if you are signed in, about every browser where you signed in to your account, and stops reminders about products. Unsubscribe with the link in any newsletter or reminder email. For everything else, write to alex@sudorgin.pro; we reply within 30 days.

10. How we protect data

10.1. The site works only over an encrypted connection. Irreversible fingerprints are stored instead of addresses and device identifiers. There are no passwords at all — you sign in with Google or with a code sent to your email. Access to site management is restricted.

11. Children

11.1. The site is not intended for people under 16 without parental consent.

12. Changes

12.1. The version date is shown at the top of the page. A new version takes effect once it is published on the site.