Document

Privacy and cookie policy

Updated: 27 October 2026. In short: I collect the minimum needed to reply to your request and to know how many people visit. No ads, no Google Analytics, no third-party trackers.

Who is responsible

cyberstalker.dev is run by a private individual under the Cyber Stalker brand. For any question about your data, email cyberstalker.dev@gmail.com.

What I collect and why

Project request: name, contact, project type, budget, description: To reply and discuss the project; a copy is sent to me on Telegram. Basis: steps at your request before a contract (Art. 6(1)(b) GDPR). Kept while we discuss the project, then up to 2 years, deleted earlier on request.
Telegram bot: chat ID, name and username, language, orders, messages, review, notification settings: To take your order, reply about it and send the notifications you subscribed to (streams, news). Basis: steps at your request (Art. 6(1)(b) GDPR), and your consent for notifications (Art. 6(1)(a)), which you can turn off in the bot settings. Kept while you use the bot and the order is in progress, then up to 2 years; deleted on request. If you block the bot, it stops messaging you.
Review: name, rating, text: Publishing on the site. Basis: your consent (Art. 6(1)(a)). Kept while published or until you ask.
Anonymous statistics: Page, referrer and UTM tags, device type, browser and OS, language, time zone or country, time on page, scroll depth, button clicks. To understand where visitors come from and what works. Legitimate interest (Art. 6(1)(f)), no persistent identifiers. 90 days.
IP address hash: One-way, with a secret salt. Spam protection, rate limiting, excluding sources from statistics. Kept with the record, up to 90 days.
cs_vid cookie: A random identifier to tell new visitors from returning ones. Only with your consent (Art. 6(1)(a) GDPR, Art. 5(3) ePrivacy). 13 months from your last visit.
Server logs: Masked IP, time, request, browser. Running and securing the server, rotated automatically, about 30 MB of logs.

Raw IP addresses are not stored in the database and are never geolocated. If your browser sends Do Not Track or Global Privacy Control, no analytics cookie is set and no banner is shown: only anonymous visits are counted.

Cookies and local storage

cs_vid · cookie, HttpOnly: Analytics: new vs returning visitors. Consent only. 13 months.
cs_tab_session · sessionStorage: So a page reload isn’t counted as a new visit. Gone when the tab closes.
cs_consent · localStorage: Remembers your cookie choice until you clear it.
cs_seen · sessionStorage: So the loading intro plays only once per visit.
cs_admin_session · cookie, HttpOnly: Admin sign-in, site owner only. 12 hours.

Who receives the data

Nobody, for advertising or sale. Technically, data is processed by the hosting provider of the server running the site, and by Telegram, where I receive notifications about new requests and reviews. If the site is served through Cloudflare, it sees requests as a network intermediary.

Your rights

access, correct or delete your data;
withdraw cookie consent at any time: the button above or “Cookie settings” in the site footer;
object to processing based on legitimate interest;
lodge a complaint with the data protection authority in your country.

You can delete the statistics linked to the cs_vid cookie in this browser right now: