Privacy

Privacy Policy

What data Dark Abishai Channel collects, why, how we protect it and how you can control it.

Effective date: 29 June 2026. Last updated: 30 June 2026.

This policy describes the current data-processing practices of dark-abishai.ru. We collect the minimum data needed to run accounts and the service, do not use third-party advertising or analytics trackers, do not store bank card details and do not sell your data. Core data is hosted on servers located in Russia.

In short#

If you don't have time to read everything — here is the gist.

Without an account we collect only the technical minimum needed for the site to work.
No Google Analytics, no Yandex.Metrica, no advertising pixels and no behavioural tracking.
We do not store bank card details — they are handled by the payment provider when one is connected.
You control notifications, watch history, profile visibility and sessions in your account settings.
You can request an export or deletion of your data at any time.

Operator and how to reach us#

The personal-data operator is Rodion Petrovich Averyanov (Аверьянов Родион Петрович), an individual applying the «Professional Income Tax» special tax regime (self-employed), INN 781425547803, owner of the Dark Abishai Channel website (dark-abishai.ru). The admin. and media. subdomains are internal and available to staff only.

For privacy questions and to exercise your rights, use the form on the «Contacts» page.
Email for personal-data requests: admin@dark-abishai.ru.
We handle personal-data requests within 30 days.

What data we collect#

Some data you provide yourself (registration, profile, comments, payments); some is collected automatically to run and secure the service.

Account data: username, email, password (stored only as an irreversible hash), optionally a name and avatar.
Settings: theme, language, profile visibility, player and notification preferences.
Content activity: watch history and progress, favourites, «watch later», series subscriptions, your collections (playlists).
Comments: the text and author name (for registered users — the username).
Payments and subscription: plan type and status, amounts and statuses of operations, internal wallet balance and transaction history.
Technical data: IP address and browser/device details on login and important actions — for security and bot protection.

What we do NOT collect#

We want the boundaries to be clear. We deliberately avoid a whole range of tracking technologies.

No third-party analytics or trackers: Google Analytics, Yandex.Metrica, Facebook Pixel and the like are not connected.
No session recording, heatmaps, mouse-movement tracking or cross-site tracking.
No login via third-party accounts (Google/VK/Yandex), so profiles from those services are not collected.
We do not determine your geographic location from your IP address.
We do not store bank card details and do not share your data with third parties for advertising.

Cookies and sessions#

Cookies are needed for login and attack protection. We have no advertising or tracking cookies.

A session cookie keeps you logged in; a CSRF cookie protects forms against request forgery.
Cookies work across all subdomains (.dark-abishai.ru) so login works on the main site, admin and media areas.
A trusted-device cookie lets you skip re-entering the 2FA code for 30 days.
During a session we temporarily store the IP and browser details — only to warn you about a login from a new device.
You can disable cookies in your browser, but then login and trusted devices will not work.

Two-factor authentication and trusted devices#

To protect your account we offer two-factor authentication (one-time codes) and trusted devices.

A 2FA code is a 6-digit one-time code from an authenticator app, changing every 30 seconds.
Backup codes are issued once when you enable 2FA — save them immediately; new ones are available by re-enabling 2FA.
A trusted device is remembered for 30 days; you can view and revoke devices in security settings.
All 2FA secrets and device tokens are stored in protected (hashed) form.

Security events and login history#

Actions related to account security are logged so you can spot unauthorised access.

Logged events: logins, password and email changes, enabling/disabling 2FA, ending sessions.
For each event we store the date, IP address and browser details — without determining geography.
You can see your login and security-event history in your account.
You receive an email notification about important events, if it is enabled in settings.

Payments and monetisation#

Paid features (subscription, individual items, supporting authors) work via accounting of operations on the site.

We store subscription and operation details: type, amount, currency, status and date — for accounting and support.
Bank card details are not stored on our server.
When an external payment provider is connected, it processes payment data on its side under industry standards (PCI DSS).
If you support authors and have agreed to it, your name may appear on the «supporters wall»; this consent can be withdrawn in settings.

Sharing data with third parties#

We use a limited set of partners — only for specific tasks and in the minimum necessary scope.

Email provider (Unisender Go): receives your email and message text to deliver notifications and digests; you can unsubscribe via the link in each email. Servers are in Russia.
Cloud storage and CDN (VK Cloud, Gcore): store and quickly deliver static files, media and video; the IP address and browser type are passed for delivery. Video is served via signed links with a limited lifetime.
YouTube: if an episode is available on YouTube it is embedded via the standard youtube.com player; while watching, Google may collect data per its own policy.
Yandex SmartCaptcha: on registration and password reset it verifies you are human; for this the IP and browser details are passed.
Telegram: used only for internal administrator notifications about security events — an operator channel, not user notifications.

Data retention#

We keep data no longer than needed for the processing purposes or than the law requires.

Account data is kept while the account is active; after deletion — for a short period in case of cancellation, then erased.
Watch history is kept for 365 days by default; you can change the term or disable auto-cleanup in settings.
Low-priority and snoozed notifications are cleaned up automatically (30 days by default).
Security events and operation records (payments) are kept longer — for audit and as required by law.
Technical video-quality metrics are kept anonymised and aggregated for a limited time; database backups are kept for a few days and then deleted.

Your rights and control over data#

Under Russian law (152-FZ) and general data-protection principles you have the following rights.

Access and export: request the composition of your data; key sets (history, favourites, «watch later», notifications) are available for export.
Rectification: update your email, name and other profile data in settings.
Erasure: request deletion of your account and related data; operation and audit records may be retained where required by law.
Withdraw consent and object: turn off mailings and notifications, hide your public profile — in settings or via the link in an email.
Access management: end active sessions and revoke trusted devices in security settings.
Complaint: if you disagree with our response, you may contact Roskomnadzor (rkn.gov.ru).

How we protect your data#

We apply technical and organisational protection measures, though no system is 100% secure.

Passwords are stored as an irreversible hash; 2FA secrets and device tokens are stored in protected form.
The connection is always encrypted (HTTPS/TLS), with strict HSTS enabled.
Forms are protected against request forgery (CSRF); login and registration rate-limits apply — after many failed attempts access may be temporarily blocked.
Access to the internal admin area is restricted; video is served via signed links with a limited lifetime.

Children, hosting and international transfer#

A few important notes about age and where data is located.

The site is not intended for children under 13; if you are younger — do not create an account. If we discover such an account we will delete it.
Core data (database, avatars, media, captcha, email) is hosted on servers in Russia.
Content delivery networks (CDN) and YouTube may use servers in other countries to speed up video delivery.

Changes to this policy and contacts#

We may update this policy. Material changes are published on this page.

For significant changes affecting your rights, we will try to notify you by email.
The date of the current revision is shown at the top of the page.
Questions and data requests — via admin@dark-abishai.ru or the «Contacts» page.

Privacy Policy

1 In short#

2 Operator and how to reach us#

3 What data we collect#

4 What we do NOT collect#

5 Cookies and sessions#

6 Two-factor authentication and trusted devices#

7 Security events and login history#

8 Payments and monetisation#

9 Sharing data with third parties#

10 Data retention#

11 Your rights and control over data#

12 How we protect your data#

13 Children, hosting and international transfer#

14 Changes to this policy and contacts#