Document
Privacy policy
Version of 9 November 2026
This document describes the personal data that Fogio sites and apps (fogio.org and its subdomains, such as map.fogio.org) process when you sign in to a Fogio account: what, why, where it is kept and how to delete it. By creating an account you agree to the processing on these terms.
Who processes the data
The operator is the owner of fogio.org. Questions and requests about your data: team@fogio.org.
What is stored
- The account: e-mail address, name and username (if you gave them), language of letters, date created.
- Signing in with Yandex ID (if you use it): your Yandex account's identifier, to recognise you next time. Yandex also passes us your e-mail address and name. We do not keep the Yandex access key.
- Sign-ins on devices: for each sign-in, its date, last activity and the browser string (User-Agent), so you can see your devices and end a sign-in you do not recognise. The session key itself is stored only as a hash.
- Sign-in codes: only as hashes and for no more than 15 minutes.
- Travel Map: marked countries, regions, cities and airports, years and flights — if you are signed in and sync is on. Without signing in they stay in your browser and never reach us.
There are no passwords: you sign in with a code from a letter or with Yandex ID.
Public map
You can publish your travel map at map.fogio.org/u/your-username. This happens only when you do it, with a separate consent to make the data public (art. 10.1 of Federal Law 152-FZ). The link shows your name (or username) and what you chose: countries always, and regions and cities, airports and flights, years of trips — each by its own switch. Anyone with the link can open the page; search engines are asked not to index it. You can hide the map at any time in its settings — that also withdraws the consent, and the page stops opening at once.
Why
To let you sign in, see your data on every device and receive sign-in codes. The data is not sold, not shared for advertising and not used for mailings.
Where it is kept
On servers in Russia. Backups are encrypted and kept in Yandex Object Storage, also in Russia.
Who receives it
The mail service that delivers sign-in letters receives your address and the letter. No one else, except where the law requires it. A map you publish is visible to anyone with its link, as far as you chose.
For how long
For as long as the account exists. When you delete the account, your address and name are erased at once, your data in Fogio products is deleted and every sign-in ends. Encrypted backups may hold the data for up to six months, after which they are deleted. Server logs with IP addresses and requested paths are capped in size and overwritten.
Cookies, analytics and ads
fogio_session— your sign-in, 180 days, not readable by page scripts.fogio_handoff— only while signing in to the installed app, 10 minutes.fogio_oauth— only while signing in with Yandex ID, 10 minutes.- The sites use Yandex Metrica and Google Analytics (Google processes data outside Russia as well), and some pages show Yandex Advertising Network ads. They set their own cookies. They are never linked to your account: neither your address, nor your marks, nor any place goes to analytics.
Your rights
You can see and change your account data, end sign-ins and delete the account in Account. Deleting the account also withdraws your consent. For anything else write to team@fogio.org; we answer within 10 working days.
Changes
If what is stored or these terms change, a new version will appear on this page with a new date.