← Back home

Consent to Personal Data Processing

Updated: 2026-10-01

By registering on zloy.net and ticking “I give my consent to the processing of my personal data” (likewise when confirming the link of my Telegram or MAX account via the link in the email, or pressing “I give my consent” in my account), I freely, of my own will and in my own interest give specific, informed, conscious and unambiguous consent to the processing of my personal data on the terms set out below (Article 9 of Russian Federal Law No. 152-FZ of 27.07.2006 “On Personal Data”). The Russian version of this document prevails.

1. Operator

ИП Володин С. В. · ИНН 666307848501 (the “Operator”). Contact e-mail: s@zloy.net.

2. What data

  • email address, username (my page address), display name, password hash (the password itself is not stored), account language and account settings;
  • avatar, “about” text, friends list, friend requests and blocks, posts, comments and reactions I publish;
  • IP address, browser and device information (User-Agent), date and time of sign-ins and account actions, including the IP address when I publish posts and comments;
  • information about games I launch, ratings, data that games save on the platform’s servers (progress, leaderboards, in-game accounts and objects), screenshots and videos games share on my behalf;
  • browser notification subscriptions and notification contents;
  • Zloy Coin balance and transaction history, payment details (amount, status, item) — if I use payments;
  • if I play via Telegram: my Telegram account number, name and username in Telegram, Telegram interface language, the days on which I opened the game in Telegram, and details of payments in Telegram Stars (amount, item, Telegram payment number);
  • if I play via MAX: my MAX account number, name and username in MAX, MAX interface language and the days on which I opened the game in MAX;
  • if I develop games: projects and their files, conversations with AI agents in the Zloy Studio app, the computer name in the sign-in label, the log of actions on my games, the Telegram and MAX channels linked to my games’ pages;
  • information collected by cookies and by Yandex.Metrica (including Session Replay / Webvisor) — as described in the Privacy Policy.

3. Purposes

  • registering and running my account, signing in and protecting against password guessing and hijacking;
  • social features: my page, friends, posts, comments, notifications;
  • launching games, signing in to games, saving my progress and passing to game developers the information listed in section 5;
  • developer tools (Zloy Studio, game publishing and moderation);
  • accepting payments and keeping Zloy Coin records — if I use them;
  • playing via Telegram: linking my Telegram account to my zloy.net account, accepting payments in Telegram Stars, counting players and payments for settlements with game developers — if I play via Telegram;
  • playing via MAX: linking my MAX account to my zloy.net account, counting players for settlements with game developers — if I play via MAX;
  • duplicating game page posts to the Telegram and MAX channels linked by the page owner: posts the game publishes on its page on my behalf (text, screenshot, video — without my name, display name and avatar) go there only if the page owner separately allows it;
  • service emails (email confirmation, password recovery, email change) and notifications;
  • answering my requests, complying with the law, visit statistics and improving the site.

4. What actions

Collection, recording, systematization, accumulation, storage, clarification (update, change), retrieval, use, transfer (provision, access), depersonalization, blocking, deletion and destruction of personal data — using automated means.

5. Who the data may be passed to

  • Selectel — hosting of the platform’s servers and sending emails (processing on the Operator’s behalf; servers in Russia);
  • Yandex LLC — visit statistics (Yandex.Metrica);
  • developers of games I launch or sign in to: my user number, username, display name, avatar, account language and my friends list (and which of them play that game). My email address and password are never passed to developers;
  • my browser’s push notification services (e.g. Google, Apple, Mozilla — chosen by the browser) — the subscription address and the encrypted notification text, if I turned notifications on;
  • Robokassa LLC — order number and amount, if I pay for Zloy Coin (I enter payment details on Robokassa’s side);
  • the MAX messenger — if I play via MAX: messages from the game bot to me (the game’s name and description, cover and the “Play” button); also copies of posts the game published on my behalf, if the page owner duplicates them to their MAX channel;
  • the Telegram messenger (operated by Telegram Messenger Inc.) — if I play via Telegram: messages from the game bot to me and invoices for payment in Stars (item and amount); also copies of posts the game published on my behalf, if the page owner duplicates them to their Telegram channel (in a public channel anyone can see them). Telegram is located outside Russia, and my data may end up in countries that do not ensure adequate protection of the rights of personal data subjects — see the Privacy Policy for details. This is a cross-border transfer of personal data;
  • a server rented by the Operator in Germany (Fornex hosting) — it carries the data exchange with Telegram (the Telegram information about me listed above, bot messages, payment notifications, copies of posts for Telegram channels) and connections to game sites like <game>.zloy.net (my IP address and the site name; page contents are encrypted and are not decrypted on that server). This is a cross-border transfer of personal data;
  • other users — whatever I publish or show on my page, within the privacy settings I choose;
  • government authorities — where required by law.

6. Term and withdrawal

This consent is valid until my account is deleted or until I withdraw it. I can withdraw it by writing to s@zloy.net from the address linked to my account, or by deleting my account under “Sign-in & security”. After withdrawal the Operator stops processing and destroys the data within 30 days, except data it is obliged or entitled to keep by law without my consent — for the periods stated in the Privacy Policy. Withdrawing consent means the account can no longer be used.

What data is processed, how long it is kept and what my rights are is described in detail in the Privacy Policy.