Privacy
What Zholobok collects about you, why, and how to change it
Who is responsible for the data
Zholobok (zholobok.com) is created and maintained by its owner. For any questions about your data, write to privacy@zholobok.com.
What the service needs to work
This is needed for the site to work, so no consent is required for it.
- Account: email and password (the password is stored only as a hash), and the interests you picked when accepting the invitation
- What you add yourself: points, categories, fields, visits and photos
- Invitation request: the email and message you left on the page
- Technical server logs, error monitoring (including JavaScript errors in the app for people who are signed in) and abuse protection, for example limits on the rate of requests
Cookies and browser storage
| Name | Purpose | Duration | Consent required |
|---|---|---|---|
| _zholobok_session | Signing in and protecting forms | Until the browser is closed | No |
| remember_user_token | “Remember me”, if you chose it when signing in | Up to 2 weeks | No |
| zholobok_consent | Remembers your answer about statistics | 6 months | No |
| zholobok_locale | Remembers the language of the site you chose | 12 months | No |
| zholobok-theme (browser storage) | Remembers the light or dark theme | Until you clear the site's data | No |
| ahoy_visitor | Browser identifier for statistics | 12 months | Yes |
| ahoy_visit | Visit identifier for statistics | 4 hours | Yes |
| ahoy_track | Technical marker for the start of a visit | Until the browser is closed | Yes |
Without consent: counters only
Even if you declined statistics, didn't answer the banner, or your browser sends a Do Not Track or Global Privacy Control signal, we add one to a daily counter: which page was opened and which site or UTM tag of the link it came from. We don't set cookies and we don't store an IP address, a browser string or anything else that could identify you, so this counter can't be linked to a person. The basis for processing is our legitimate interest in understanding whether the site is used (Article 6(1)(f) GDPR). Requests from bots and crawlers are counted separately, by the name they give in their header, because they are not people.
Statistics: only with your consent
To see what works and what doesn't, and to improve Zholobok, we collect the following with your consent:
- where you came from: the referring page and the UTM tags of the link
- browser, system, device type, window and screen size, language, time zone, light or dark theme
- country from a shortened IP address (the last part of the address is zeroed, and neither the address itself nor the browser string is stored)
- which pages you opened, how far you scrolled, which sections you saw and how long you stayed on the page
- whether you reached the request form and how it went (the email and the text of the message do not go into the statistics)
- page load speed and JavaScript errors
- for people who are signed in: which parts of the app you opened, which buttons you pressed and what you searched for and picked in the filters
We don't pass this data to ad networks. It is stored in our database at the service's hosting provider and deleted after 60 days for visitors who are not signed in and after 180 days for those who are. The basis for processing is your consent (Article 6(1)(a) GDPR). You can decline or withdraw it at any time, and the site will work just the same.
Your choice
You haven't decided yet
When you turn statistics off, we delete the data stored about this browser.
Who else receives technical data
- Hosting of the application and the database
- Photo storage (Backblaze B2)
- Email delivery, including invitations (Lettermint)
- Error and request speed monitoring (AppSignal)
- The map background for people who are signed in: your browser loads the tiles from OpenFreeMap itself, so that service sees your IP address and the part of the map you are looking at
The country is determined by a local database; nothing is sent to it. IP Geolocation by DB-IP
How long we keep it
- Statistics: 60 days for visitors who are not signed in, 180 days for those who are
- Daily counters without consent: a year
- Your account and your data: until you delete the account (you can do it in the account settings)
- Invitation request: until it is handled, and until you ask us to delete it
Your rights
You can get a copy of your data, correct or delete it, restrict its processing, object to it and move your data elsewhere. You can also complain to the data protection authority in your country (in Ukraine that is the Ukrainian Parliament Commissioner for Human Rights). To use your rights, write to privacy@zholobok.com.
Last revised: October 30, 2026