1. General provisions
This Policy is adopted by Индивидуальный предприниматель Сташевская Арина Евгеньевна, TIN (INN) 650113327100, state registration number (OGRNIP) 323650000020211, postal address: 693000, г. Южно-Сахалинск, пер. Мебельный, д. 6 (the Operator).
The Policy describes the cookies and similar technologies used on the website www.cloudybus.com (the Website), including the client portal of the Cloudybus ERP Service.
A cookie is a small piece of data that a website stores in the browser and receives back on subsequent requests. It lets the site recognise the browser between requests: without that, neither keeping a user signed in nor protecting a form against request forgery is possible. A cookie holds no user name, but combined with other details (IP address, device identifier) the data in it may constitute personal data.
The Policy elaborates on the cookies section of the Personal Data Processing Policy and applies together with it. The current version is published openly at https://www.cloudybus.com/en/cookies and is available without signing in.
2. Which cookies the Website uses
The Website uses first-party cookies only — set by the Website itself, not by third-party services. By purpose they fall into strictly necessary ones, without which signing in and form protection do not work, and functional ones, which remember the user's choice. The Website sets no analytics, advertising or profiling cookies.
2.1. The public part of the Website
Public pages — the home page, Features, documentation, contacts, and legal documents — open without signing in. Until you make a choice in the cookie notice, nothing is stored in your browser except the form token on the contacts page. After you choose, a cookie holding the decision is added, and — if you consented to analytics cookies — the web analytics service cookies as well.
| Cookie | Purpose | Category | Retention |
|---|---|---|---|
.AspNetCore.Antiforgery.* |
Protection of the contact form against cross-site request forgery (CSRF). Set by the contacts page — the other public pages have no forms | Strictly necessary | Until the browser is closed |
cb_consent |
Stores your cookie category choice so the Site does not ask again on every page. | Strictly necessary | 12 months |
_ym_* |
Yandex Metrica cookies: anonymised visit statistics. Set only after you consent to analytics cookies. | Analytics | up to 12 months (set by the service) |
2.2. The client portal
Signing in adds the cookies the portal cannot work without: the sign-in session and form protection. A functional cookie holding the selected language is added as well — it is written only when the language is switched manually.
| Cookie | Purpose | Category | Retention |
|---|---|---|---|
cloudybus.auth |
Keeping the user signed in to the client portal. Set after a successful sign-in and holds only a session identifier | Strictly necessary | Up to 200 minutes after the last action. Without the “Remember me” option it is deleted when the browser is closed; signing out deletes it in any case |
.AspNetCore.Antiforgery.* |
Protection of the portal forms against cross-site request forgery (CSRF) | Strictly necessary | Until the browser is closed |
.AspNetCore.Mvc.CookieTempDataProvider |
A one-off message about the result of an action — that settings were saved, for example. Deleted as soon as it is shown | Strictly necessary | Until the browser is closed |
cb_lang |
The selected interface language of the portal. Written only when the language is switched manually | Functional | 12 months |
Every cookie listed above is set by the Website itself. They are marked HttpOnly — page scripts cannot read them — are not sent when a visitor arrives from another site (the SameSite attribute), and travel only over a secure connection: HTTP requests are redirected to HTTPS. They hold no name, phone number, email address or other details about the user: only a session identifier, a language code or a service token.
3. Analytics and advertising cookies
The following web analytics services run on the Website: Яндекс Метрика (включая Вебвизор — запись действий посетителя на странице). They set their own cookies and collect anonymised visit statistics; the terms of that processing are set by the owners of those services.
Advertising and profiling cookies, retargeting pixels and any transfer of data to advertising networks are not used. The Operator does not build visitor profiles, does not track visitors across other websites and makes no decisions about them based solely on automated processing.
4. Third-party cookies
Only the web analytics services listed in section 3 set their own cookies through the Website, in accordance with their own policies. The pages of the Website load no other resources from third-party domains.
5. Other technologies
Besides cookies, websites use browser storage (localStorage and sessionStorage), tracking pixels and web beacons, and device fingerprinting. The Website's and the client portal's own code uses none of them.
The data a user enters in the client portal is stored on the Operator's servers, not in the browser.
6. Managing cookies
Cookies can be deleted or blocked in the browser settings: “Privacy and security” in Chrome, Yandex Browser and Edge, “Privacy & Security” in Firefox, “Privacy” in Safari. The same settings allow blocking cookies for a single site and deleting them when the browser closes.
The public part of the Website remains fully available: its pages can be read without cookies.
Blocking strictly necessary cookies makes signing in to the client portal impossible: without the session cookie the system cannot tell one request from another and would ask for a sign-in on every page. Blocking the functional cb_lang cookie affects nothing else — the interface language will simply have to be chosen again in each session.
On your first visit the Site shows a cookie notice with two buttons of equal weight — “Accept all” and “Necessary only” — and a “Customize” link for choosing by category. Until you choose, only strictly necessary cookies are set and analytics scripts are not loaded: no requests are made to web analytics servers. Category toggles are off by default; scrolling, following a link, and closing the tab are not treated as consent.
You can change or withdraw consent at any time via the “Cookie settings” link in the footer of any page — it opens the same category window. When analytics cookies are switched off, the Site deletes the web analytics cookies already set, and statistics collection stops from the next page load. Withdrawing consent is as easy as giving it and does not affect access to the Site.
Your choice is recorded on the Operator’s server: date and time, the version of the consent text, the categories you selected, your IP address, and browser details (User-Agent). The record is kept for 3 years and used solely to demonstrate that consent was given or refused. The legal basis and your rights are described in the Personal Data Processing Policy.
Signing out of the client portal deletes the sign-in session cookie. The remaining cookies are deleted through the browser.
7. Final provisions
The Operator may amend the Policy when the set of technologies in use changes. A new version takes effect once published on the Website; the date of the current version is shown at the top of the document.
Data obtained through cookies is processed in accordance with the Personal Data Processing Policy and Federal Law No. 152-FZ of 27 July 2006 On Personal Data. The rules for using the Website are set out in the Terms of Use.
Questions about the use of cookies: info@cloudybus.com, postal address: 693000, г. Южно-Сахалинск, пер. Мебельный, д. 6. Phone: +7 (917) 114-98-80.
If the language versions of this Policy differ, the Russian version prevails.