PERSONAL DATA.

1. Who is responsible

The controller is Anton Fedorovich Bazzaev (Баззаев Антон Федорович), trading as BLOODSET, Russian tax ID 501307023878. Data enquiries: thebloodset@gmail.com.

This policy describes data processing; it is not consent to marketing or unrestricted use of your data. Browsing the site or accepting the offer does not replace separate consent where required. Russian Federal Law No. 152-FZ, your contract and other mandatory rules applicable to the processing govern our activities.

2. Data and purposes

Processing includes receiving, recording, storing, using for these purposes, correcting, sharing with necessary order participants, restricting and deleting data. It can be automated or manual when handling messages. We do not request passports, full card numbers, CVV/CVC, banking passwords or verification codes. Do not send them in messages.

3. Third-party services

• Timeweb. Website hosting, delivery of pages and files, technical logs. Timeweb policy.
• lava.top. The current platform for payment and paid-pack delivery. “Buy” takes you there; you enter your details on that platform. The site passes a product link and currency, not a completed buyer form. lava.top and its payment partners handle payment information under their own terms; BLOODSET uses purchase information to fulfil the order. lava.top policy.
• Prodamus. Earlier orders can retain payment identifiers and information required to confirm purchases and provide access. The current purchase button sends new buyers to lava.top.
• Google / Gmail. Email sent to thebloodset@gmail.com is handled by the mail service, including the sender address, content and attachments. Google policy.
• Telegram. Merch enquiries open Telegram at your request. Your username, contact and message are processed by the messenger and recipient. Telegram policy.
• Music platforms and social networks open through external links. Once you follow a link, they receive normal connection information and process your activity under their own policies. Their advertising trackers are not embedded in the current BLOODSET site.

Foreign services, including lava.top, Google and Telegram, may process data outside Russia. Linking to their policies does not remove BLOODSET’s applicable localisation or international-transfer duties. Following an external link yourself differs from the controller transferring data already collected. Contact us for information about recipients of your data and applicable conditions.

4. Cookies and browser preferences

Your language choice is stored as bloodset-language in localStorage until removed in this browser. It is not sent to an advertising system. The retained legacy checkout uses the technical bloodset_checkout session cookie; it is not an advertising cookie. Current purchases open on lava.top, which has its own cookie settings.

The current site does not include advertising cookies, Yandex Metrica or Google Analytics. You can clear this site’s data or block storage in browser settings. This can reset your language and technical session, but does not delete order records held by the seller or purchase platform.

For Yandex Plus advertising reports, the site counts the banner’s first viewport appearance per page load. This counter uses no cookies or persistent visitor identifiers. A random event code exists only in page memory; its hash is temporarily used by the server to prevent duplicate counts and is removed on the next write after 24 hours. The counter does not store IP addresses, names, email addresses or device details. Separate hosting logs are described above. Reports contain aggregate impressions, the period and the advertising identifier. Following the activation link sends the promo code and advertising link parameters to Yandex; its site rules then apply.

5. Retention and protection

Contacts and messages are used until an enquiry is resolved or an order fulfilled. Further retention is limited to what is needed for an ongoing contract, restoring access, resolving a dispute or mandatory records, for the relevant period. Without such a basis, the data must be deleted rather than kept indefinitely “just in case”. You may request the retention period and basis for your particular order.

Timeweb documents availability of website access logs for the preceding 180 days. Specific incident records may be retained while necessary for an investigation or as required by law. A download link’s expiry is not the retention period for the purchase record. Hosting documentation.

The site uses HTTPS. Access to service order records and paid files is restricted; the public catalogue is for public materials. Messages and order data are not intended for publication. The controller removes data from working storage under its control and, where necessary, requests deletion from a processor; any mandatory retention limits are explained to the requester.

6. Access, correction and deletion

You may request information about processing of your data, correction, restriction or cessation, deletion where there is no lawful retention basis, and withdrawal of consent previously given. Requests are free. Other rights, including portability and objection, apply where provided by applicable law.

Write from the email or account used for the original contact, explain your request and include an order number if available. Do not send secret download links, card details or a passport unnecessarily. If further identity verification is needed, the controller will explain the minimum information required and why. No account on our site is needed.

The button opens your email application and does not send anything automatically. Applicable legal deadlines govern requests: generally, processing information is supplied within 10 working days, with a reasoned notice for an extension of up to 5 working days. Deletion deadlines depend on the basis; once the purpose ends or consent is withdrawn, and no other retention basis remains, the usual maximum is 30 days. Any shorter mandatory deadlines still apply.

Erasure does not override legally required retention of payment records. We will explain what was deleted and what must be retained and why. Data belonging to your independent lava.top, Telegram or Google account is also managed through that service. You may complain to Roskomnadzor, a court or another competent authority under applicable law.

7. AI, uploads and subscriptions

The current site has no AI chatbot, visitor-input submission to AI models, automated profiling or AI decisions about users. Using AI to help prepare site code or artwork does not itself send visitor data to an AI model. Any future function involving such processing will be described separately before use.

The site has no user-file upload form or account registration. Attachments sent to support are part of your correspondence and can be included in a deletion request. The digital pack is a one-time purchase, with no paid subscription, trial followed by a charge or auto-renewal. Optional social follows offered with free downloads are not paid subscriptions.

8. Policy changes

The current version is available here with its publication date. New purposes or services do not automatically gain permission to use previously collected data: a lawful basis must first be established and separate consent obtained where necessary. Licence and refund terms are in the public offer.