Version privacy-2026-11-09
Effective date: 9 November 2026.
The effective date is displayed with this policy on Time&Place. The Terms governing an earlier purchase and the processing grounds applicable to it are not retroactively replaced merely by publishing this policy.
1. Who is responsible and how to contact us
Time&Place is operated by Ефимов Максим Александрович, an individual based in the Russian Federation who uses the professional-income-tax regime (НПД), without individual-entrepreneur registration. The seller's publicly approved Tax ID (ИНН) is 667111125683. In this policy, “we”, “us” and “the operator” refer to that person.
For personal-data requests, write to privacy@timeandplace.club. For account, payment and service help, write to support@timeandplace.club. Both addresses reach the operator's support mailbox. A reply may come from the operator's Proton Mail address; the public role addresses are receiving forwards.
This policy explains our handling of personal data. It does not make every supplier our processor: a supplier may also determine its own processing purposes under its own terms. Our Terms of Service govern use of the service.
2. Information we receive
| Category | Examples and source |
|---|---|
| Account and profile | Email supplied at registration, account identifier and status, accepted document versions and dates; optional profile name and country supplied in Account Settings. |
| Authentication and security | One-time-code and OAuth challenge records, Google account identifier/email/profile information if you choose Google, session records, request/network/browser information, IP/User-Agent hashes and security timestamps. A hash linked to an account is not anonymous data. |
| Searches and access | Text and filters sent to process a search; execution identifiers, normalised hashes, selected catalogue identifiers, credit allocation/spending and Work-access cooldown records. See section 4 for the different treatment of query text. |
| Private selections | Likes, collection names, collection membership and related save/remove activity. |
| Purchases and documents | Order/provider references, amount and currency, demo/live mode, payment/access/refund/dispute status and dates, accepted document versions and conditions, any separately submitted early-performance request, purchase-confirmation delivery status and necessary case decisions/evidence references. |
| Support, privacy and withdrawal requests | Account/contact information, the statement or correspondence you send, purchase reference, original receipt time, verification/decision records, receipt, refund calculation and necessary provider-confirmation references. Please avoid unnecessary sensitive information. |
| Personal promo administration | A neutral recipient label or pseudonym, optional contact/note when specifically needed, code state and the minimum record of a gift's activation. The intended recipient and the account that actually redeems a code may differ. |
| Technical operation | Limited access, error, administrative and recovery records needed to run, secure, troubleshoot and restore the service. |
We receive information from you, from your interaction with Time&Place and, where you choose the relevant feature, from Google and the payment platform. For lava.top checkout, we send your account email, offer identifier, total/currency and return URLs containing an order reference. We receive invoice references and payment, refund or dispute information needed to verify the purchase and manage its related access. You enter payment details on the external payment pages. Time&Place does not receive or store complete card numbers or CVV and does not request your email password or a passport copy for routine registration.
3. Why we use information and the grounds we rely on
We use information for the purposes below, limited to what the relevant purpose needs.
| Purpose | Information and ground |
|---|---|
| Create and authenticate your account; provide Search, Work, collections, credits and paid or gift access | Account, authentication and activity information needed for the arrangement you request and its performance. Optional profile details are used only for the profile or preference feature you choose; they are not required for registration. |
| Handle checkout, purchase evidence, withdrawal and account support | Information needed to take the steps you request, perform the purchase arrangement, respond to your statement and meet specifically applicable consumer duties. |
| Protect the service and prevent misuse or duplicate transactions | Limited security records and operation identifiers for our legitimate interests in reliable operation, fraud prevention and safe recovery, where that ground is permitted and does not override your rights. |
| Keep necessary financial and deletion evidence | The specific Russian tax or personal-data obligation requiring that evidence. Under another applicable data-protection regime, we assess a ground recognised by that regime; a Russian obligation is not automatically an EU or UK statutory ground. |
| Establish, exercise or defend an identified claim | Only the information reasonably necessary for that claim, for a permitted legitimate interest in addressing that claim, or a specific law or court requirement, with a finite period and review. |
| Administer a personal promo invitation | A neutral label by default. A contact is used for a particular delivery you request or agree to, or on separately documented consent where required. A label or previous contact does not authorise advertising. |
For processing governed by Russian law, the relevant grounds include contract necessity, Russian legal duties and proportionate legitimate interests under Article 6(1)(5), (2) and (7) of Federal Law No. 152-FZ, or consent under Article 6(1)(1), as appropriate. Where EU or UK GDPR applies, we assess the corresponding contract, legal-obligation, legitimate-interest or consent ground separately. In particular, legitimate interests can include keeping necessary evidence of a Russian tax obligation or a specific claim, subject to necessity, safeguards and your rights.
Reading this policy or accepting the Terms is not blanket consent. Where consent is required, including for a particular optional use, direct promotion or processing entrusted to a supplier, it is obtained separately as required by law. You can withdraw it through the privacy contact, or remove optional profile information in Account Settings. Withdrawal does not retrospectively invalidate processing lawfully carried out before it, and a separate lawful ground may require limited retention.
We do not sell private account information for advertising or use your searches and collections to build advertising profiles. Automated checks apply credits, access eligibility and payment/security rules; you can ask support for human review of a decision affecting your account or transaction. We do not treat that review as a substitute for any additional right provided by applicable law.
Email, necessary authentication records and required acceptance information are needed to register and sign in. Without them we cannot provide the account. A paid order requires the transaction information needed to process it. Optional name/country fields, Google sign-in and promo contact information are not general registration requirements.
4. Search text and private collections
We process the original search text for the request and does not save that text in new server-side search-execution records or the shared search-response cache. It retains the execution/hash/catalogue/credit information needed to continue a search and account for access. Application diagnostics are designed to omit search text and arbitrary URL state.
The browser still receives the query, filters and results to display the service. Search URLs, browser history and temporary browser state can contain search information, including the full return URL used during authentication. Account deletion on our systems does not clear your browser history, screenshots, downloaded files or text you share yourself. Text you include in a support message is handled as correspondence.
Likes and collections are private account features. Collection Share prepares an ordered text snapshot for a channel you choose; it does not automatically publish a collection or create a public collection page. Copying text or opening an email/social service transfers control of the copy to you and that service. Their policies apply to what you send there.
5. Browser storage and external links
Your selected language is saved in a functional cookie for up to one year and used when you open the site without a language prefix in the address.
We use a session cookie to recognise a signed-in browser and a short-lived cookie to bind a Google sign-in attempt to the browser that started it. Browser session storage supports return navigation, search continuation and restoration of result positions. A local-storage event marker helps open tabs reconcile saved selections. These are functional uses; storage may contain account/execution identifiers and is not anonymous.
Most tab-session records last for that browser tab's session, although browser session restoration can preserve them. An authentication return record is removed when its continuation is completed or dismissed. The local synchronisation marker may remain until replaced or cleared. You can clear browser storage in your browser settings; doing so may sign you out or prevent restoration of a search. Clearing browser storage does not itself delete your server account.
Following an external link, choosing Google sign-in, opening a payment form or using a share channel brings you into contact with that provider. We do not claim that an external service receives data merely because its name appears in the catalogue. Any additional non-essential browser tracking must be reviewed and disclosed before activation, with the choices required by applicable law.
6. Suppliers and other recipients
| Supplier or recipient | Purpose and relevant information |
|---|---|
| FirstVDS hosting and technical support | Hosts the application and database; recovery/configuration operations may involve account and operational information. The VPS region is Amsterdam, the Netherlands. |
| FirstVDS S3 | Stores public catalogue/Landing image assets, in Moscow, Russia. This image store is distinct from the account database. |
| Postmark | Delivers authentication, verification and, when you use the corresponding purchase or withdrawal feature, transactional acknowledgements and purchase documents. It receives the destination email and the corresponding message and delivery information. |
| Google OAuth | Provides optional sign-in/account linking. We request identity scopes for the account identifier, email and profile; the reviewed sign-in path does not request offline access or keep Google access/refresh tokens as a long-term account store. |
| Porkbun email forwarding | Routes messages sent to the public role addresses to the selected mailbox, processing message/routing information in that delivery path. |
| Proton Mail | Holds support/privacy correspondence, sent replies, attachments and related mailbox/contact information. |
| lava.top and payment participants | lava.top is operated by LAVALANE LTD, Cyprus. Its platform arranges checkout and payment collection; licensed third-party providers process payments. The platform and payment participants handle the information needed for payment, fraud prevention, recordkeeping, refunds and disputes under their respective terms and policies. |
| Other payment providers for earlier orders | If an earlier purchase used another provider, including Prodamus, the information needed for that purchase and its payment, refund or dispute may still be processed. This does not make that provider the checkout platform for a new lava.top order. |
| Authorities and specifically necessary professional assistance | Only information needed for a valid legal requirement, a particular dispute or other specifically justified purpose. |
Supplier processing may include its own legal, security, fraud-prevention and recordkeeping purposes. We do not assume that every supplier has the same retention period or that our deletion of a database record deletes its independent copy. Supplier privacy information and terms are available from FirstVDS, Postmark, Google, Porkbun, Proton, lava.top and, for an applicable earlier order, Prodamus.
AWS may be an infrastructure supplier of an email provider; that does not mean we operate the account database directly on AWS. Additional recipients for optional monitoring or other new processing will be disclosed before that use, with any separate choices required by law.
7. Countries and international processing
The operator works from Russia. The application and account database use FirstVDS hosting in Amsterdam, the Netherlands. The public catalogue-image service is in Moscow, Russia. Operator-managed recovery copies and deletion/recovery instructions can be held in Russia; hosting-provider backups are a separate category. The location where source code is developed is not, by itself, a location where your personal data is processed.
The email and identity services involve other countries. Postmark describes US processing and infrastructure suppliers. Google describes worldwide processing. Porkbun forwarding involves US infrastructure. Proton Mail describes servers in Switzerland, Germany or Norway. The lava.top operator is registered in Cyprus; its policy permits international transfers and does not restrict all processing to Cyprus. Payment participants and processing countries depend on the payment method and their own arrangements. Prodamus information relates only to an applicable earlier order. A supplier may use other support locations or copies under its own terms.
Your information therefore may be stored or accessed outside your country, and those countries may have different protections. We do not promise that all copies stay in Russia, the EU or a single supplier region. You can contact privacy@timeandplace.club for information about the recipients, countries and any transfer mechanism or safeguards applicable to your information, including how to obtain a copy where applicable.
This policy does not constitute consent to an international transfer or replace a separate consent, notification or other measure required by applicable law.
8. How long information is kept
We distinguish account operation, correspondence, payment evidence and specific exceptions. These are our retention rules; a shorter applicable deadline or an earlier end of the purpose takes priority unless a specific lawful reason requires continued retention.
| Information | Retention rule |
|---|---|
| OTP and OAuth challenge records | Removed within 24 hours of creation. A code or challenge stops being usable earlier. |
| Sessions | Authentication lasts at most 30 days. Records are removed within seven days after the earliest expiry, revocation or that maximum. |
| Routine technical/admin logs and raw payment-event records, where retained | Normally 30 days. Only specifically necessary financial or case evidence is separated before routine records are removed. |
| Account/profile, private selections, search/credit and minimum gift-accounting records | While the account and corresponding purpose exist, then removed or unlinked through account deletion, subject to the limited exceptions below. |
| Ordinary closed support correspondence | Up to 12 calendar months after closure, and earlier when no longer necessary. Privacy verification/export materials and specific disputes follow their own purpose and do not automatically receive an extra year. |
| Promo recipient contacts and notes | Until the particular delivery/correction purpose ends, or refusal/cancellation. Reversible code copies end when activation, revocation or closure removes the need. Minimum used-code/account records last while the relevant account and purpose exist. |
| Minimum administrative operation markers | Until the relevant administrator account is deleted, solely to prevent replay of a cleared operation. They do not retain the cleared contact or provide an email-based blacklist. |
| Demo/test payment orders and related snapshots/markers | Up to 30 calendar days from order creation; retries and inspection do not restart the period. |
| Ordinary unpaid checkout orders | Checkout links have at most a 30-day operational window from creation, followed by reconciliation. Link expiry alone does not prove that payment is impossible or that no payment occurred. |
| Proven closed unpaid orders | Full order/snapshot and unnecessary links are removed within 24 hours after confirmed closure; only a minimum closure marker remains for up to 30 days from that closure. |
| Uncertain orders | Review starts within one working day. By day 30 from creation we resolve the result or isolate only necessary evidence into a specific case, initially for up to 30 days with review within seven days. Any extension needs a fresh, documented justification before expiry; there is no automatic renewal. |
| Necessary paid/refunded financial evidence | Five complete calendar years after the relevant year, unless a specific applicable obligation or properly justified case requires a different period. This is not permission to keep the whole profile, private collections or unrelated correspondence. |
| Full purchase documents | Until the applicable finite purchase-evidence deadline. Account deletion removes the full linked document; only separately justified minimum financial or case evidence can remain. |
| Independent evidence of completed personal-data destruction | Three years from destruction, kept separately from the deleted profile. |
| New registered operator-managed recovery copies | Retirement is scheduled within 30 days of original creation. Copying, inspection or restoration does not restart that period. |
A specific dispute, legal duty or security incident may justify isolating necessary evidence. We record the purpose, necessary fields, responsible person, end date or verifiable ending event and next review. This does not justify an indefinite account archive, all of your correspondence or a whole backup for one claim. A new account with the same email does not automatically inherit old records or a deleted account's gift history.
Supplier and historical-copy limits: Postmark's selected message Activity Retention is 45 days. Suppressions, aggregate statistics, queues and backups have separate rules. Hosting-provider automatic backups and historical copies may last longer than the 30-day rule for new registered operator-managed copies; their complete age/deletion outcome is not established. We do not promise that every independent supplier copy is erased within 30 days or immediately on account deletion. We restrict the use of recovery copies and apply current deletion instructions before restored account data returns to ordinary service.
9. Access, export, correction and deletion
Write to privacy@timeandplace.club to ask about processing, correct information, request a copy/export or request deletion. Other rights, including objection, restriction, portability or withdrawal of consent, apply where the relevant law provides them. Tell us what you need; using an exact phrase or an unnecessary identity document is not a prerequisite.
We verify ownership or authority proportionately before releasing private data or deleting an account. The current account process uses a one-use email verification code and operator review. Where an account is inaccessible or deleted, contact us so the request can be assessed through support rather than creating a new account and assuming it owns old records.
An approved export is a time-limited download of the allowed account data. It excludes secrets, authentication-token material and other people's data. Deletion revokes account access and removes linked account/selections/search/access records and the full purchase document. Only specifically justified financial/case/deletion evidence can remain separately. Account deletion is distinct from withdrawal from a purchase contract and does not prevent an applicable refund claim.
We respond without undue delay and within the applicable deadline. Under Russian personal-data law, an access/information request is ordinarily answered within ten working days, with a reasoned extension of at most five working days where permitted. Where EU GDPR applies, the ordinary response period is one calendar month, with any permitted extension or refusal explained within the required period. Under UK GDPR, the ordinary period is one month calculated under its applicable request-handling rules, including lawfully necessary identity information and any permitted pause for clarification. It is not restarted merely by our internal approval. We distinguish a response deadline from a separate deadline to correct, stop processing or destroy information; internal approval does not restart a legal clock.
You may complain to Roskomnadzor or another competent supervisory authority, including the relevant EU authority or the UK Information Commissioner's Office where applicable, or use a remedy available under applicable law. Contacting us first does not remove that right.
Deletion does not remotely clear your browser, a copy you downloaded/shared or another independent controller's records. Recovery copies may retain an earlier state until their controlled retirement. Before a restored database returns to ordinary use, the independent deletion instructions and current retention deadlines must be applied so deleted records are not restored into active service.
10. Safeguards
We use access restrictions, protected transport, limited operational logging, separate handling of secrets, scoped administrative operations and controlled recovery/deletion procedures. No online system can be guaranteed completely secure. If you suspect unauthorised account access or disclosure, contact support or the privacy address promptly. We assess incidents and provide notices required by applicable law; we do not promise an unconfirmed supplier incident-response period.
11. Age and sensitive information
Time&Place is intended for people aged 18 or older. We do not ask users to submit sensitive personal information about themselves or other people in searches, collection names or support messages. If you believe an under-age account or unnecessary sensitive information has been submitted, contact the privacy address for review.
12. Changes and contact
This Policy is available in Russian and English. Both language editions are equivalent; neither edition has automatic priority.
We will date and version a material policy update and provide an appropriate notice through the service or account email. If an update also materially changes the Terms, the advance-notice standard in section 18 of the Terms applies. If a new purpose or technology needs a separate consent or other legal step, publishing a changed policy alone does not replace it.
Privacy: privacy@timeandplace.club. General support and purchase claims: support@timeandplace.club. The version and effective date are displayed with the published policy.