Privacy Policy

Plain and simple: what data kurmanov.kz and its tools collect, why, who it is shared with and how you can have it deleted.

Effective date: October 3, 2026

01General provisions

1.1. This policy describes what data is collected by the website kurmanov.kz and its services (including kurmanov.kz/utm/, kurmanov.kz/go/, kurmanov.kz/tools/ and the SEO audit tool), why it is collected, and how it is used and protected.

1.2. Data controller: Ruslan Ranilevich Kurmanov, an individual, Almaty, Republic of Kazakhstan. Contact for data matters: ruslan@kurmanov.kz.

1.3. This policy follows the Law of the Republic of Kazakhstan “On Personal Data and Its Protection” No. 94-V of May 21, 2013.

1.4. By using the website and submitting forms, you agree to this policy. If you do not agree, please do not submit your data through the website.

02Data we collect

Data you provide

contact forms: name, phone number or Telegram, message text;
UTM service account: login, name, password (stored only as a hash, we never know the password itself), links you create;
SEO audit: the address of the website being checked, and your email or Telegram if you request the full report.

Data collected automatically

when someone follows a short link kurmanov.kz/go/: click time, device and browser type, referrer. The IP address is not stored in plain form, only as an irreversible hash;
visit statistics via Google Tag Manager, Google Analytics and Yandex Metrica: pages viewed, traffic sources, device, approximate location based on IP, on-page actions. Yandex Metrica uses Session Replay (Webvisor), an anonymized recording of on-page actions (mouse movement, scrolling, clicks). Form field contents are not recorded;
server technical data: IP address, request time, page address (hosting logs).

Data stored in your browser

Your selected color theme and the history of generated UTM links are kept in localStorage. This data stays on your device only and is never sent to us.

03How we use data

to contact you about your request and discuss your project;
to run the services: creating and tracking short links, client accounts, preparing SEO reports;
to collect statistics and improve the website;
to protect against spam and abuse (rate limiting, blocking password guessing).

We do not sell your data, do not share it for third-party advertising and do not send mailings without your consent.

04Who we share data with

Only with services the website cannot work without:

Hoster.kz hosting provider: hosting of the website and database on servers located in the Republic of Kazakhstan;
Telegram: notifications about new requests are delivered to the controller via Telegram;
Google (Google Tag Manager, Google Analytics): visit statistics;
Yandex (Yandex Metrica): visit statistics.

Telegram, Google and Yandex servers may be located outside Kazakhstan. By submitting a form, you consent to such cross-border transfer.

Data may be disclosed to government authorities only in cases expressly provided for by the laws of the Republic of Kazakhstan.

05Use of Google APIs

5.1. For its SEO tools, the website uses the Google Ads API to retrieve aggregated search query statistics (search volume, competition, estimated cost per click) through the controller's own Google Ads account.

5.2. The website does not request access to visitors' Google accounts and does not receive any personal data about them from Google. Data obtained through Google APIs is used only to build reports within our services, is not sold and is not transferred to third parties.

5.3. Our use of information received from Google APIs adheres to the Google API Services User Data Policy.

07Retention periods

requests: no longer than 3 years after our last contact, unless you ask us to delete them earlier;
UTM service accounts and links: for as long as the account exists; when an account is deleted, its links and statistics are deleted too;
SEO audit results: up to 12 months;
analytics data: according to Google's and Yandex's retention periods.

08Data security

The connection to the website is protected by HTTPS. Passwords are stored only as hashes, IP addresses in link statistics are hashed, access to service files and the database is restricted, and account sign-in is protected against password guessing. Only the controller has access to submitted requests.

09Your rights

You can:

find out what data about you we hold;
correct or update it;
request deletion of your data;
withdraw your consent to processing.

Email ruslan@kurmanov.kz or message @hamsterkz on Telegram. We will respond within the time limits set by the laws of the Republic of Kazakhstan.

10Children

The website is intended for entrepreneurs and companies and is not directed at persons under 18. We do not knowingly collect data from children.

11Changes to this policy

We may update this policy. The current version is always available at kurmanov.kz/privacy/en/, and the effective date is shown at the top of the page. In case of discrepancies between language versions, the Russian version prevails.