Legal
Privacy Policy.
How we handle your data — under the GDPR and Dutch UAVG.
1. Who We Are
Sharzhukov's Laboratory ("we", "us", "our") operates the website sharzhukov.com. We are the data controller responsible for your personal data. This website is hosted on servers located in the Netherlands and complies with the EU General Data Protection Regulation (GDPR) and the Dutch UAVG.
2. What Data We Collect
We may collect the following categories of personal data:
• Account data — name, username, email, hashed password, avatar, bio.
• Usage data — IP address, browser type, operating system, pages visited, time and date of visits, referring URLs.
• Technical data — cookies and similar technologies (see Section 6).
• Communication data — if you contact us via email, Discord, or our contact form.
• Account data — name, username, email, hashed password, avatar, bio.
• Usage data — IP address, browser type, operating system, pages visited, time and date of visits, referring URLs.
• Technical data — cookies and similar technologies (see Section 6).
• Communication data — if you contact us via email, Discord, or our contact form.
3. How We Use Your Data
We process your personal data for the following purposes:
• To ensure the website functions correctly (legal basis: legitimate interest, Art. 6(1)(f) GDPR);
• To analyse website usage and improve our services (legal basis: consent, Art. 6(1)(a) GDPR);
• To respond to your enquiries (legal basis: legitimate interest or consent);
• To deliver account-based features (legal basis: contract, Art. 6(1)(b) GDPR).
• To ensure the website functions correctly (legal basis: legitimate interest, Art. 6(1)(f) GDPR);
• To analyse website usage and improve our services (legal basis: consent, Art. 6(1)(a) GDPR);
• To respond to your enquiries (legal basis: legitimate interest or consent);
• To deliver account-based features (legal basis: contract, Art. 6(1)(b) GDPR).
4. Data Retention
We retain personal data only as long as necessary for the purposes described above, or as required by law. Analytics data is retained for a maximum of 26 months. Session data expires after 2 hours of inactivity. Log files (IP, user agent) are kept for 30 days.
5. Third Parties
We may share data with:
• Cloudflare — CDN, security and DNS services (DPA in place);
• GitHub — source code hosting and release distribution;
• Discord — community platform;
• Resend — transactional email delivery (EU region).
These third parties may process data outside the EEA. Where applicable, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).
• Cloudflare — CDN, security and DNS services (DPA in place);
• GitHub — source code hosting and release distribution;
• Discord — community platform;
• Resend — transactional email delivery (EU region).
These third parties may process data outside the EEA. Where applicable, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).
6. Cookies
We use the following types of cookies:
• Strictly necessary cookies — required for the website to function (no consent needed);
• Analytics cookies — help us understand how visitors use the site (consent required);
• Preference cookies — remember your settings such as dark mode (consent required).
You can manage your cookie preferences at any time via the Cookie Settings link.
• Strictly necessary cookies — required for the website to function (no consent needed);
• Analytics cookies — help us understand how visitors use the site (consent required);
• Preference cookies — remember your settings such as dark mode (consent required).
You can manage your cookie preferences at any time via the Cookie Settings link.
7. Your Rights
Under the GDPR, you have the following rights:
• Right of access — request a copy of your personal data;
• Right to rectification — request correction of inaccurate data;
• Right to erasure — request deletion of your data;
• Right to restrict processing — request limitation of processing;
• Right to data portability — receive your data in a structured format;
• Right to object — object to processing based on legitimate interest;
• Right to withdraw consent — withdraw consent at any time.
To exercise your rights, contact us at [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
• Right of access — request a copy of your personal data;
• Right to rectification — request correction of inaccurate data;
• Right to erasure — request deletion of your data;
• Right to restrict processing — request limitation of processing;
• Right to data portability — receive your data in a structured format;
• Right to object — object to processing based on legitimate interest;
• Right to withdraw consent — withdraw consent at any time.
To exercise your rights, contact us at [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
8. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.
Last updated: October 2026.
Last updated: October 2026.