01Introduction
We respect your privacy and process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Law of Ukraine on Personal Data Protection. This Policy explains what data we collect, for what purposes, and what rights you have.
02Data Controller
Operator / data controller: Savliak Vasyl (a natural person — the owner and operator of the KoloPlus platform, kolo.plus)
Country: Czech Republic
E-mail: privacy@kolo.plus
Support: support@kolo.plus
Send written requests about data processing and exercising your rights to privacy@kolo.plus — we respond within the timeframes set by the GDPR (up to 30 days).
03Data We Collect
- Account: username, email, password (hashed);
- Profile: avatar, bio and voluntarily added data;
- Content: posts, messages, media;
- Technical: IP (usually hashed), device/browser type, cookies;
- Activity: interactions within game mechanics.
04Purposes of Processing
We process data to: provide access to the Platform and its features; ensure security and prevent fraud; improve the service; with consent, show personalised content/ads; comply with the law.
05Legal Bases
- Performance of a contract - access to the Platform;
- Consent - optional cookies, marketing (withdrawable anytime);
- Legitimate interest - security, abuse prevention;
- Legal obligation - statutory requirements.
06Your Rights
You have the right to: access and a copy of your data; rectification; erasure ("right to be forgotten"); restriction and objection; portability; withdraw consent; lodge a complaint with a supervisory authority (Ukraine - the Parliament Commissioner for Human Rights; EU - your local data-protection authority). Requests: privacy@kolo.plus. You can delete your account yourself: account deletion guide.
07Data Retention
Data is kept only as long as necessary for the purposes or as required by law. Account data - until deletion; security logs - a limited period. After account deletion, data is deleted or anonymised.
08Sharing with Third Parties
We do not sell your data. We may share it with processors acting on our instructions (hosting, analytics, advertising partners such as Google) and as required by law. Processors must ensure appropriate protection.
09Third-Party Advertising (Google AdSense)
The Platform may display ads served by third-party vendors, including Google AdSense. Third-party vendors, including Google, use cookies (including the DoubleClick advertising cookie) to serve ads based on your prior visits to this and other websites.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and/or other sites on the Internet.
You may opt out of personalized advertising via Google Ads Settings or www.aboutads.info. You can manage consent for advertising cookies on our Platform via the consent banner and the Cookie Policy.
10Data Security
We apply technical and organisational measures: password and IP hashing, access controls. No transmission method is fully secure, but we continuously improve protection.
12KoloPlus app for Android
The KoloPlus app for Android (Google Play, package plus.kolo.app) opens the same kolo.plus website full-screen through the Chrome browser. It is the same account and the same data, so this whole Policy applies to the app.
The app itself has no permission to use the camera, microphone, contacts, location or files of your phone and collects no data outside the website. When you use a website feature that needs one of them, Chrome asks for your permission for kolo.plus — only at that moment and only with your consent: a voice message needs the microphone, a place on the map from GPS needs your location. You pick photos and files yourself in the file chooser. You can refuse or withdraw a permission at any time in Chrome’s site settings. KoloPlus never asks for your phone’s contacts.
Photos, videos or text you “share” to KoloPlus from another app become a post draft and are published only after you confirm; unpublished drafts are deleted automatically.
You can delete your account in the app (Account → “Data and deletion”) or by following kolo.plus/legal/delete-account.
13Children's Privacy
The Platform is not intended for persons under 9. Persons aged 9-17 use it only with guardian consent. Children aged 9-12 use only the game mode (no feed, posting, communities, classifieds, messages, media, geolocation or any ads). Teens aged 13-17 can publish posts and comments in the feed and in communities (no classifieds or geolocation; non-targeted ads only); their social profile is visible only to friends, and only friends whose request they accepted can send them private messages. Minors' profiles are not indexed by search engines. All users, including minors, see a reminder to take a break after every hour on the site: only their own device counts this time, and it is not sent to us. From 22:00 to 07:00 their local time, pop-up notifications are not shown. This is advice, not a limit: both can be switched off in the settings. The consent is recorded. If we learn that we process a child's data without proper consent, the account and the data are deleted (Art. 8 GDPR; Ukrainian law).
14Changes to this Policy
We may update this Policy. Material changes will be announced on the Platform with the date.
15Contact
For privacy and data-protection matters: privacy@kolo.plus.