Privacy Policy
1. Data Controller
Data Controller: Forton Lab — independent mobile app studio (Russian Federation).
Contact for GDPR / 152-FZ requests: info@fortonlab.ru (please add «Privacy» to the subject line).
Website: https://fortonlab.ru
2. What Data the Site Collects
The fortonlab.ru website is an informational landing page for the studio. We do NOT collect user registration data, do NOT process payments on the site, do NOT run identifying analytics.
Server logs (IP address, User-Agent, request time) are stored by our CDN provider Cloudflare for no more than 30 days (Cloudflare Free Tier standard).
Cookies: only Cloudflare service cookies for DDoS protection (e.g. __cf_bm). Analytical and advertising cookies are not used.
3. Use of Google API Services
The automated publishing service Forton Lab Publisher uses YouTube Data API v3 (Google API Services) to upload studio video content to the YouTube channel @fortonlab, owned by the Forton Lab administrator. Use of data obtained from Google APIs is governed by the Google API Services User Data Policy, including Limited Use requirements.
What data is processed:
- Refresh token and access token for YouTube Data API authorization
- Metadata of published videos (title, description, tags, category)
Forton Lab Publisher does NOT:
- access videos of other users
- collect personal data of channel subscribers
- share any data with third parties
- use data for advertising, retargeting, or personalization
Token storage: the refresh token is stored in encrypted form in the studio repository's GitHub Secrets. Access is restricted to the studio administrator.
Data deletion: requests to delete data processed through Google APIs can be sent to info@fortonlab.ru. Processing time — 14 days.
4. Security
Information is transmitted only over HTTPS. Google API access tokens are stored in protected GitHub Secrets and are not accessible to third parties. Repository access is restricted to the studio administrator and protected by two-factor authentication.
5. Retention and Deletion
The refresh token is retained indefinitely until revoked by the user (via https://myaccount.google.com/permissions) or by the studio administrator.
Upon request to info@fortonlab.ru, data may be deleted within 14 days.
6. Data Subject Rights (Russian Federal Law 152-FZ)
In accordance with Russian Federal Law No. 152-FZ «On Personal Data», a data subject has the right:
- to access their personal data;
- to correct inaccurate or incomplete data;
- to deletion of personal data;
- to withdraw consent for data processing;
- to lodge a complaint with Roskomnadzor (the Russian supervisory authority for data protection).
Contact for exercising rights: info@fortonlab.ru (please add «Privacy» to the subject line).
7. Policy Changes
Changes are communicated by updating the date on this page. Material changes are additionally published in the Telegram channel @fortonlab.