Legal

Privacy Policy

Updated 1 September 2026

Short version: we keep your email, your course progress and a pseudonymous log of site events. Third-party analytics — Yandex Metrica (with Session Replay) and PostHog — only switch on after you accept them in the banner. We do not sell data and do not hand it to ad networks.

Who processes your data

The data controller is [ЗАПОЛНИТЬ: юридическое лицо или ИП], registration: [ЗАПОЛНИТЬ: регистрационный номер / ИНН], address: [ЗАПОЛНИТЬ: юридический адрес]. Website: mihalkevich.com.

For anything about your data: a.hypesquad@gmail.com.

What we collect

Your email address — it is also your login; sign-in is by single-use link, there is no password. Your email is also stored when you leave it in a sign-up form (for example, for the live sessions) or in the quiz — together with which form it came from.

Course progress: which tasks are done, on which attempt, whether you used a hint. The skill map is built from this.

The text of your answers and of your messages to the mentor — grading and your artifacts in the cabinet are impossible without it.

Your answers in the profession quiz, if you took it.

A funnel event log (on our own server): events such as 'chapter started', 'signed up', 'reservation created', 'went to Telegram' — with a pseudonymous visitor id and the source of your first visit (UTM tags, referring site, ad click id). We do not record keystrokes ourselves.

Technical records of requests and errors, including IP address — also used to protect sign-in from abuse (limiting the number of attempts).

Cookies and similar technologies

folderai_session — the functional sign-in cookie: keeps you signed in for 30 days and is not readable by page scripts.

NEXT_LOCALE — remembers your chosen language.

fa_ft — our own first-party cookie holding the source of your first visit (UTM tags, referrer, ad click ids), kept for 90 days. It tells us which channels bring students.

fa_id — our own first-party random visitor id with no name or email attached, kept for 12 months. It links funnel-log events together.

fa_ft and fa_id are set on your first visit, before any banner choice, and are read only by our server; they are not passed to third parties on their own. If you accept analytics, fa_id is also used as your PostHog id, and the visit source is sent to Metrica as a visit parameter.

Your banner choice is kept in your browser's local storage (fa_consent).

Only after consent: Yandex Metrica cookies (e.g. _ym_uid, _ym_d) and PostHog cookies (ph_…). If you click 'Decline' or have not chosen yet, these scripts are not loaded and set no cookies.

Analytics (only with your consent)

Yandex Metrica (YANDEX LLC, Russia) with Session Replay (Webvisor) on: visit statistics, click maps and session recordings — cursor movement, clicks, scrolling and input into form fields on our pages. We use it to see where a page gets in the way and fix it.

PostHog (PostHog Inc.; data stored in the EU): pseudonymous product analytics — page views and funnel steps, linked by the fa_id identifier.

You can withdraw consent at any time: clear this site's data in your browser and the banner will reappear so you can choose 'Decline'. Or write to us.

Why

To give you access, keep progress across devices, grade your work, issue a certificate and write to you about the course or your subscription.

To understand where students come from and where they get stuck, so we can rewrite those places.

To protect the service: limiting sign-in attempts and investigating errors.

Who we share it with

The payment provider (Stripe; for crypto payments, NOWPayments), to take payment. Card details go straight to them; we never see or store them.

The email service Resend (Resend Inc., USA), to deliver your sign-in link and course mail. It receives the address and the message.

The language-model gateway OpenRouter (OpenRouter Inc., USA), which routes the request to the selected model — the text of your answer is sent for grading and for mentor replies. What is sent is the answer, not your profile or your email.

Yandex Metrica and PostHog — only after your consent, to the extent described above.

The hosting and database providers the site runs on (Vercel Inc., Neon Inc., USA).

Nobody else. We do not sell data and do not give it to ad networks. Some of these services are outside your country of residence; by using the site you agree to that cross-border transfer.

How long we keep it

Account, progress and answers — as long as you have an account. Course access does not expire, so progress is kept for the same period — otherwise you would lose what you bought.

Funnel event log — no longer than 24 months. Sign-in attempt counters — one day. Metrica and PostHog data are kept under those services' own rules.

If you ask us to delete your account, we delete progress and answers. Payment records have to be retained for accounting.

Your rights

To get a copy of your data, correct it, delete your account, withdraw analytics consent or object to processing: a.hypesquad@gmail.com. We reply within 30 days.

You can unsubscribe from mail via the link in any message. Mail concerning access and payment is sent regardless of subscription.

If you believe we are breaching your rights, you may complain to the data-protection authority in your country.

Questions about these documents: a.hypesquad@gmail.com