Privacy Policy

1. Operator

Personal data is processed by:

STEAM FLOW LLC (Общество с ограниченной ответственностью «СТИМ ФЛОУ»)

Country of incorporation: Kyrgyz Republic. Russian tax ID (INN) 9909770268, KPP 772587001.

Registered with the Russian tax authority since 18.06.2026.

The registered address is being confirmed and will be published here.

Referred to below as “the operator”. The site irinlabs.com operates under the IRIN LABS trade name.

Data questions: offer@irinlabs.com.

2. What is collected

Through the site form you provide:

• your name — optional, you may leave it blank;
• a way to reach you — email or a messenger handle, your choice;
• a description of the task, in your own words;
• a budget range, if you selected one;
• the page the form was sent from, and the interface language;
• your IP address — recorded automatically;
• your User-Agent string — the browser and operating system details your browser reports on its own;
• the date and time of submission, and the fact of your consent.

The IP address serves one purpose: rate limiting — no more than five submissions per hour from one address. The User-Agent string helps tell a person from a bot. They serve no other purpose: the operator builds no profiles and does not track you between visits.

Nothing else is collected. The form contains no hidden fields at all. Automated submissions are filtered by fill time: anything sent faster than a few seconds is discarded.

3. Purpose

The data is processed for one purpose — to answer your enquiry and, if it leads to work, to discuss the task and terms.

The operator does not use your data for marketing, does not build profiles, makes no automated decisions and sells data to no one.

4. Legal basis

The basis is your consent, given by ticking the box before submitting the form. Without it the form does not submit.

Consent is voluntary. You do not have to use the form: write to offer@irinlabs.com instead, and processing will be limited to the contents of your message.

5. Where data is stored

Submissions are written to a file on a server physically located in the Russian Federation. Access is limited to the operator’s administrator account.

The site is served over HTTPS; form data travels encrypted.

6. Disclosure

The operator discloses your data to no third party, with one exception: a notification of each new enquiry is sent to Telegram. This is a cross-border transfer — Telegram’s servers are outside the Russian Federation.

The notification contains what you entered in the form. If that is unacceptable to you, do not use the form — write by email.

The site carries no advertising pixels, social widgets or remote fonts. Visit statistics are collected by the operator’s own counter and never leave the operator’s server. No third party — Google, Yandex or anyone else — learns of your visit.

7. Retention

Submissions are kept for 3 years and then deleted automatically. Earlier deletion on request.

Email correspondence is kept for as long as the operator’s mailbox exists.

8. Your rights

You may:

• ask whether your data is processed and obtain a copy;
• require inaccurate data to be corrected;
• withdraw consent and require deletion;
• complain to the supervisory authority or to a court.

Write to offer@irinlabs.com describing what you want. The operator responds within thirty days. Withdrawing consent means the enquiry is deleted and correspondence stops.

9. Visit statistics

The operator runs its own counter to see which pages are read and where people stop reading. It records:

• the address of the page you opened;
• the domain you came from — without the path or query;
• interface language and approximate window width (five brackets, not an exact number);
• how many seconds you stayed and how far down the page you got.

No cookies are used and your IP address is not stored: it is combined with the browser string and a random salt into a short fingerprint from which the address cannot be recovered. The salt changes daily and lives only in the server’s memory, so visits on different days cannot be linked — not even by the operator.

If your browser signals Do Not Track or Global Privacy Control, the counter sends nothing at all.

Statistics are kept for six months and then deleted automatically.

10. What is stored in your browser

The site keeps one value in your browser’s local storage — the display currency you selected. It exists so your choice survives to the next visit, is never transmitted anywhere and cannot identify you.

The site sets no cookies.

11. Changes

The operator may amend this policy. The current version is always published at irinlabs.com/en/privacy/ with the date of last change at the top.