Consent, privacy
& your data.

Website storage

The website code does not set cookies, create visitor identifiers, or use localStorage or sessionStorage. Fonts and logos are hosted with the site. Browser caching may store page resources as part of normal browsing.

Cloudflare security

Cloudflare delivers and protects the website. Depending on protections applied to a request, it may use security cookies such as cf_clearance after a challenge or __cf_bm for bot protection. These examples are not a claim that every visitor receives them. Cloudflare documents their purposes and lifetimes; __cf_bm expires after 30 minutes of inactivity, while challenge-cookie lifetime depends on the protection settings. See Cloudflare's cookie information.

Your choice

No optional cookie consent is requested because no optional tracking is installed. If consent-based features are added, they will stay off until you choose to enable them. Refusal will leave the basic portfolio available, and you will be able to withdraw consent as easily as you give it. Browsing or scrolling does not constitute consent. Withdrawal does not invalidate earlier lawful processing.

You can inspect and delete stored cookies using your browser. Blocking a necessary security cookie can cause a security check to repeat or prevent access.

References: Bulgarian Electronic Commerce Act, Article 4a; EDPB consent guidance.

Who is responsible?

Krosnov-Laps is the personal portfolio of Emil Krosnov. It presents interests and projects in technology, content and games. It does not provide an online checkout or offer paid services through this website.

Website operator / controller

Emil Krosnov

Website

krosnov-labs.com
krosnov-labs.pages.dev

Privacy and general contact

krosnov.labs@gmail.com

Telephone

+359 893 450 800

Scope

This notice covers this portfolio and correspondence sent to its contact address. It is based on the EU General Data Protection Regulation (GDPR) and Bulgaria's Personal Data Protection Act (ЗЗЛД). Future games and external platforms have their own data practices and require separate notices.

Information and purposes

Website delivery and security: Cloudflare processes technical connection information such as IP addresses, requested URLs, timestamps and browser/request metadata to return pages and protect the service. The purpose is reliable, secure access to this portfolio. The operator relies on legitimate interests in running and protecting the website (GDPR Article 6(1)(f)). The site does not use this information for personalised advertising.

Contact messages: If you email or call, your contact details and information you choose to provide are used to answer your enquiry. This is based on the legitimate interest in responding to correspondence. Information needed to handle a GDPR request is processed to meet legal obligations (Article 6(1)(c)). Providing general correspondence is voluntary; without a reply address or enough context, a response may not be possible. Please do not send passwords, financial details or unnecessary identity documents.

The site has no account registration, payment processing, visitor database, profiling or automated decisions with legal or similarly significant effects. It does not intentionally solicit sensitive information or personal information from children.

Providers and international processing

Hosting: Cloudflare, Inc. provides Pages delivery and network/security services. It can process data globally, including outside the EEA. Where it acts as processor, its Data Processing Addendum applies; that addendum provides mechanisms including EU standard contractual clauses for relevant restricted transfers. Cloudflare also describes processing for its own purposes in its privacy policy.

Email: The contact address is a Gmail mailbox provided by Google. Sending email involves Google and any mail provider you use. Google's handling and international processing are described in its privacy policy. Opening this website alone does not contact Gmail or Google Fonts.

Access to correspondence is limited to the operator and providers involved in handling it; information may also be disclosed where required by law or to establish or defend legal claims. External reference links lead to independently operated websites.

Retention

The website application keeps no separate visitor access-log database. Cloudflare's technical and security records follow its service-specific retention and legal/security requirements; they are not all controlled by the website operator, and no single fixed provider-wide retention period is claimed.

Correspondence is kept while needed to resolve the enquiry and for any continuing issue or applicable legal obligation or claim. When those purposes no longer apply, it should be deleted. Privacy-request records are kept only as necessary to demonstrate handling of the request and meet applicable obligations. Provider backup/deletion cycles can differ from deletion from the active mailbox. You can ask about the retention of your particular correspondence using the contact above.

Provider details: Cloudflare DPA, Cloudflare privacy policy, Cloudflare subprocessors, Google privacy policy and Google retention information.

Your rights

Under the applicable conditions, you may request access, correction, erasure, restriction or portability of personal data. You may object to legitimate-interest processing on grounds relating to your situation, and to direct marketing at any time. Where processing relies on consent, you may withdraw it. Rights have legal limits and do not always require immediate deletion.

How to make a request

Email krosnov.labs@gmail.com with the right you wish to exercise and enough context to locate the information. Requests are normally answered within one month. Complex or numerous requests may require up to two further months, with an explanation within the first month. Proportionate verification may be necessary. Requests are normally free, subject to the GDPR's limited exceptions.

Complaints

You may complain to Bulgaria's Commission for Personal Data Protection (Комисия за защита на личните данни / КЗЛД), another competent EU supervisory authority, or seek a judicial remedy. You do not need to ask the operator's permission or contact the operator first. Follow КЗЛД’s current submission instructions: an unsigned ordinary email may not satisfy the formal requirements.

Security and changes

The public site uses HTTPS and contains no online form for submitting private information. Only public website files are included in deployments. No system is completely secure. If hosting, tracking or collection practices change, this notice will be updated and consent requested where necessary.

For an accessible explanation or a question about this notice, contact Emil Krosnov using the details in section 02.

Legal references: GDPR and the Bulgarian authority's legal framework.