Mistika
Sign In

Privacy Policy

How Mistika collects, uses, and protects your personal data.

Last updated:

Controller

The data controller for Mistika can be reached via email at alisii@internet.ru.

Account Data

When you register, we collect your email address and a securely hashed password. If you link a Discord account via OAuth, we store your Discord user ID and username.

Purpose: authentication, account access, and support. Legal basis: contract performance — for Discord connection, consent.

Subscription and Payment Data

When you purchase a subscription, we store your product selections, activation keys, subscription start and end dates, and purchase records. Payment processing is handled by third-party providers (FunPay, Oplata, Digiseller); we do not store full payment card details.

Purpose: service delivery. Legal basis: contract performance .

Device Binding (HWID)

To prevent unauthorised access, your subscription is linked to a hardware identifier (HWID) collected from your device during activation.

Purpose: security and fraud prevention. Legal basis: legitimate interest.

Product Settings

Your in-client configuration and preferences are stored on our servers to deliver the service consistently across sessions.

Purpose: service delivery. Legal basis: contract performance .

Referral Program

If you use a referral code, we store the referral relationship between your account and the referrer.

Purpose: referral program operation. Legal basis: contract performance or consent.

Cookies

We use the following cookies:

  • locale — stores your language preference (functional, persistent)
  • Session cookie — required for authenticated access (essential, session-based)
  • remember_* — set only if you check "Remember me" on sign-in (optional)

You can control cookies through your browser settings. Blocking essential cookies may affect site functionality.

Analytics

We use Ahrefs Analytics to understand how the website is used. This service collects anonymised or aggregated data about page views, referrers, browser type, and device type. It is loaded only in the production environment.

Legal basis: legitimate interest in improving the website. You can opt out by blocking analytics.ahrefs.com in your browser or with a content blocker.

Data Retention

Account data, subscription records, device bindings, and settings are retained while your account exists. After account deletion, your data is deleted or anonymised within 30 days, except where we are required by law to retain certain records.

Analytics data is retained by Ahrefs in accordance with their policy (anonymised after 26 months).

Service Providers

We share data only with necessary service providers:

  • Ahrefs Analytics — website analytics
  • FunPay, Oplata, Digiseller — payment processing
  • Hosting provider — server infrastructure

Each provider processes data under our instructions and is contractually bound to protect it.

International Data Transfers

If data is transferred outside your country of residence, adequate safeguards are in place (Standard Contractual Clauses or equivalent mechanisms).

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict processing in certain circumstances
  • Receive your data in a portable format
  • Object to processing based on legitimate interest

To exercise these rights, contact us at alisii@internet.ru. We will respond within 30 days.

Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and access controls on our servers.

Changes to This Policy

We may update this Privacy Policy when necessary. Material changes will be notified via the website. The effective date is shown at the top of this page.

Contact

For questions about this policy or to exercise your rights: