Privacy Policy
Last updated: March 13, 2026
1. General
This Privacy Policy governs how Enterno.io ("Service", "we") collects, uses, stores, and protects personal data of users ("you") in accordance with applicable laws.
2. Data We Collect
- Email address — for account creation and communication
- Password (hashed) — for authentication
- IP address — for security, rate limiting, and abuse prevention
- URLs submitted for checking — to provide the service
- Browser type and language — for localization
3. How We Use Data
We use your data exclusively for providing the service: account management, check history, monitoring, notifications, and service improvement.
4. Data Storage
All data is stored on servers located in the Russian Federation.
5. Third-Party Services (English Version)
- Google LLC (USA) — Google Analytics 4 (GA4) and Google Tag Manager. Loaded only on the English version of the Service and only after explicit user consent via the cookie banner. Configured with
anonymize_ip. Cross-border transfer covered by user consent. - OpenAI, L.L.C. (USA) — generative AI (model
gpt-4o-mini) that produces the optional AI summaries of your tool-check results on the English version, only when you request them. Only the checked target and the technical findings are sent; your identifying personal data is not. Requests transit an EU egress proxy (Latvia). This is a cross-border transfer, performed only for the English version and only when you use the AI feature; you can disable it at any time. The Russian version uses YandexGPT (Yandex Cloud, servers in the Russian Federation) with no cross-border transfer. - OAuth sign-in providers — if you choose to sign in with Google (Google LLC, USA), GitHub (GitHub, Inc., USA) or Yandex ID (Yandex, Russian Federation), we exchange an authorization code with the chosen provider to receive your email address and display name in order to create and identify your account. Google and GitHub are cross-border recipients; Yandex is in the Russian Federation.
- CryptoCloud OU (Estonia, EU) — cryptocurrency payment processing for paid plans (English version only).
- Robokassa — fiat payment processing for Russian Rubles (for paid plans on the Russian version, listed for transparency).
- Yandex Metrika — web analytics (only on the Russian version of the Service; not loaded on the English version).
6. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting us. You can also download a machine-readable ZIP copy of your data at any time from Settings → Export my data (152-ФЗ Art. 18 ч. 7 / GDPR Art. 15).
7. Cookies & Analytics Consent
We use essential cookies for authentication and CSRF protection. Optional categories — analytics (Yandex Metrica; Google Analytics 4 on the English version) and AI summaries — can be accepted, rejected, or fine-tuned per category in the cookie banner. You can change your choice at any time:
8. Contact
For privacy-related questions: no-reply@enterno.io
Cookie inventory
Every cookie this site sets, why it exists, how long it lives, and how to disable it.
| Name | Category | Retention | Purpose | Control |
|---|---|---|---|---|
| Session (~1 hour) | Authenticates the current login session. Cannot be disabled — required for login. |
|||
| Session (~1 hour) | Prevents Cross-Site Request Forgery on form submissions. Cannot be disabled — required for secure form posts. |
|||
| 1 year | Remembers your preferred interface language (RU/EN). Clear via browser settings; site defaults to URL prefix. |
|||
| 1 year | Records your consent for cross-border AI processing (English UI only). Use the "Disable" button below or clear via browser settings. |
|||
| 1 year | Records your consent or refusal for Google Analytics (English UI only). Use the "Disable" button below or clear via browser settings. |
|||
| 1 year | Yandex Metrika — anonymous traffic measurement. Set on the Russian site. Set analytics_consent=0 cookie or use Yandex opt-out tools. |
|||
| 2 years | Google Analytics — anonymised traffic measurement. English UI, with explicit consent. Click "Disable" below or use Google Analytics opt-out browser add-on. |
|||
| 90 days | First-touch acquisition tracking (UTM source) for referral attribution. Clear via browser settings. |
|||
| 90 days | Assigns you to an A/B variant for content layout testing. Clear via browser settings. |
Data access request (DSAR)
Generate a machine-readable snapshot of the personal data we hold about your account. Limited to one request per 24 hours per account. Per 152-ФЗ Art. 14 / GDPR Art. 15.
Please log in to request your data report.
Log inYour consent log
Server-side record of consents linked to your account. Cookie consents live in the browser and reset when you clear cookies.