Informational translation. The documents are drawn up under the law of the Russian Federation; only the Russian text is legally binding.
COOKIE POLICY
Edition: 2.2 of — (in progress)
Published at: https://art-aristocrat.ru/cookie-policy
This Policy establishes the procedure for the use of cookies and similar
technologies on the website https://art-aristocrat.ru, owned by individual
entrepreneur Elizaveta Sergeevna Tamazova (creative agency
“ART Aristocrat”).
Operator: Individual entrepreneur Elizaveta Sergeevna Tamazova
INN 263211722452 · OGRNIP 322774600496477
Address: 107370, Moscow, Tyumensky proezd 3, bldg. 1, apt. 820 · Email: info@art-aristocrat.ru
This Policy forms part of the Personal Data Processing Policy
(https://art-aristocrat.ru/privacy) and has been developed in accordance with
Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and Federal Law
No. 149-FZ of 27 July 2006 “On Information, Information Technologies and
Information Protection”. For users accessing the website from the European
Economic Area, the requirements of the General Data Protection Regulation
(GDPR) and of Directive 2002/58/EC are additionally taken into account.
1. WHAT COOKIES ARE
1.1. Cookies are small text files that the website saves in the user's browser
and reads on subsequent visits. Alongside cookies, the website uses similar
technologies: browser local storage (localStorage), session storage
(sessionStorage), pixel tags and counter scripts.
1.2. Cookies by themselves do not reveal the identity of the user. At the same
time, the identifiers contained in cookies, combined with other data, may make
it possible to identify the user indirectly — in that case they are treated as
personal data and processed in accordance with the Personal Data Processing
Policy.
1.3. The website does not use cookies to establish the identity of the user
unless the user has provided their data themselves through a form on the website.
2. CATEGORIES OF COOKIES
The website uses three categories. Managing them is described in section 5.
2.1. Necessary (technical) — used without consent
They ensure the basic operability of the website: authentication in the personal
account and in the administrative panel, protection against cross-site request
forgery, storage of the user's own choice regarding cookies, protection of forms
against automated submissions. Without them the website cannot function
correctly, therefore their use is based on the necessity of providing the service
requested by the user and does not require consent. They can be disabled only by
means of the browser — with a loss of the website's operability.
2.2. Analytics — the procedure differs by domain (section 5)
They collect information about traffic: which pages are viewed, how much time
viewing takes, where the user came from, at which step of the form the filling in
is interrupted. The data is used in aggregated form to improve the structure and
the content of the website.
Recording of actions on the page (Webvisor). Yandex Metrica includes a
session recording feature: pointer movements, scrolling, clicks and the sequence
of pages viewed are saved. The recording is carried out by the analytics service
in the territory of the Russian Federation and serves to find inconvenient parts
of the interface; it is not used to establish identity. Passwords and bank card
numbers are not recorded by the service. Visit recordings are stored by the
service for a limited time and, once it expires, are deleted by it automatically.
It is disabled together with the rest of the analytics under the procedure of
section 5.
2.3. Marketing — only where consent has been given
They make it possible to assess the effectiveness of advertising and information
campaigns and to limit the frequency with which advertising materials are shown.
They are set by advertising and analytics platforms, including as third-party
cookies.
3. LIST OF COOKIES USED
3.1. The website's own cookies:
| File | Category | Purpose | Retention period |
|---|---|---|---|
next-auth.session-token | Necessary | session of the authenticated user (personal account, administrative panel) | 30 days |
next-auth.csrf-token | Necessary | protection against cross-site request forgery (CSRF) | browser session |
chat_sid | Necessary | identifier of the dialogue with the AI assistant: makes it possible to continue a conversation already started and to link it to the fact that consent was given. The file is technical, inaccessible to page scripts (httpOnly), and contains only an opaque identifier | up to 1 year |
aa_ref | Necessary | storage of the referral code when following the referral link of an existing client; makes it possible to link the enquiry to the person who recommended it and to grant a discount. Contains only an opaque code | 90 days |
| form session identifier | Necessary | storage of the progress of filling in a multi-step form | browser session |
3.2. Browser local storage (not cookies). Part of the user's choice is saved
not in cookies but in local storage (localStorage). Such records are not sent to
the server on every request and have no expiry date — they are kept until the
user clears the website's data in the browser.
| Key | Purpose |
|---|---|
art-aristocrat-cookie-consent | storage of the user's choice regarding cookie categories |
aa_ref_notice_dismissed | marker that the notice about the referral link has already been dismissed |
3.3. Third-party service cookies:
| File | Service | Category | Purpose | Period |
|---|---|---|---|---|
_ym_uid | Yandex Metrica | Analytics | visitor identifier | 1 year |
_ym_d | Yandex Metrica | Analytics | date of the first visit | 1 year |
_ym_isad | Yandex Metrica | Analytics | detection of ad blockers | 2 days |
_ym_visorc | Yandex Metrica | Analytics | operation of Webvisor — recordings of actions on the page (see clause 2.2) | 30 minutes |
_ga, _ga_* | Google Analytics 4 — only on the international domain | Analytics | user identifier and session state | 2 years |
__cf_bm, cf_clearance | Cloudflare (Turnstile) — only on the international domain | Necessary | distinguishing a human from an automated script when a form is submitted | up to 30 minutes / up to 1 year |
| Yandex SmartCaptcha files | Yandex SmartCaptcha — on the Russian domain | Necessary | the same task: to distinguish a human from an automated script when a form is submitted and on sign-in | under the rules of the service |
3.4. The list may change when new services are connected. The current version is
always published at the present address.
3.5. Third-party services process the data they collect in accordance with their
own policies:
- Yandex Metrica and Yandex SmartCaptcha — https://yandex.ru/legal/confidential/
- Google Analytics — https://policies.google.com/privacy
- Cloudflare — https://www.cloudflare.com/privacypolicy/
4. PURPOSES OF USE
4.1. Cookies and similar technologies are used for:
- ensuring the operability of the website and the correct display of pages;
- authenticating users and maintaining the session;
- protecting forms and the website against automated attacks and spam;
- storing the user's choice regarding cookies;
- storing the progress of filling in multi-step forms;
- analysing traffic and user behaviour in depersonalised form;
- identifying inconvenient parts of the interface and improving the structure of the website;
- assessing the effectiveness of advertising and information campaigns.
4.2. Cookies are not used for: selling data to third parties, building
profiles for transfer to external advertisers, taking automated decisions that
produce legal consequences for the user.
5. CONSENT AND MANAGEMENT
5.1. On the first visit to the website a banner is displayed. **The way the
banner works differs by domain** — because both the applicable requirements and
the set of connected services differ.
5.1.1. The Russian website — art-aristocrat.ru
Web analytics is carried out by a Russian service (Yandex Metrica), the data is
processed in the territory of the Russian Federation, and there is no cross-border
transfer here. The counter is connected when the page loads; **the banner
informs** about the use of cookies and gives a link to the present Policy.
Analytics cookies may be refused:
- by means of the browser — section 5.7;
- by contacting the Operator at info@art-aristocrat.ru with the subject line “Cookie” — the Operator will send the analytics service a request to delete the information collected.
5.1.2. The international website — art-aristocrat.com
Until consent has been obtained, no analytics service is connected — neither
foreign nor Russian. Scripts are not loaded, cookies are not set. The reason is
not only the foreign services: for a visitor accessing the website from outside
the Russian Federation, the transfer of information about their behaviour to a
Russian analytics service is likewise a transfer of data and requires consent.
The banner offers three courses of action: accept all categories, keep only the
necessary ones, configure the categories individually.
5.2. The technical cookies listed in clause 3.1 are used **without consent on
both domains**: without them the website cannot do what the user came to it for —
let them into the personal account, accept a form, remember the very choice
regarding cookies.
5.3. Continuing to browse the website, scrolling the page or closing the banner
without making a choice are not deemed to be consent.
5.4. The user's choice is saved in the browser (clause 3.2) and remains in effect
until it is changed or until the website's data is cleared.
5.5. The user has the right at any time to change or withdraw their decision:
- through the cookie settings management button on the present page;
- by deleting the saved website data in the browser settings — on the next visit the banner will be displayed again.
5.6. Withdrawal of consent does not affect the lawfulness of the processing
carried out before it was received. Data already collected by analytics services
is deleted in accordance with the procedures of those services; to have it
deleted, the user has the right to contact the Operator at info@art-aristocrat.ru.
5.7. Managing cookies by means of the browser:
- Google Chrome — Settings → Privacy and security → Cookies
- Safari — Settings → Privacy → Manage Website Data
- Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data
- Microsoft Edge — Settings → Cookies and site permissions
5.8. Disabling necessary cookies by means of the browser may render individual
functions inoperable: it may become impossible to sign in to the personal account,
to submit a form, or to save the choice regarding cookies (the banner will appear
on every visit).
6. TRANSFER OF THE DATA COLLECTED THROUGH COOKIES
6.1. The data collected through cookies may be processed by services engaged by
the Operator (section 8 of the Personal Data Processing Policy).
6.2. Some of these services are located outside the Russian Federation:
Google Analytics 4 (USA) and Cloudflare (USA). **Both are connected only
on the international domain and only after the user's consent**
(https://art-aristocrat.ru/consent). On the Russian domain they are not connected
at all, and no data is transferred to them.
6.3. Where analytics and marketing cookies are refused on the international
domain, the scripts of the corresponding services are not loaded and no data is
transferred to them. On the Russian domain, refusal is effected under the
procedure of clause 5.1.1.
6.4. Yandex Metrica and Yandex SmartCaptcha process data on servers in the
Russian Federation. If the analytics of the Russian service is connected on the
international domain (after the user's consent), information about the behaviour
of a foreign visitor is transferred to the Russian Federation — which is
precisely why consent is requested for it on the international domain as well.
7. RETENTION PERIODS
7.1. Session cookies are deleted when the browser is closed.
7.2. Persistent cookies are stored for the period specified in section 3, or
until they are deleted by the user.
7.3. The maximum retention period for the website's own cookies is 1 year. The
retention periods for third-party service cookies are determined by those
services and are specified in section 3.
8. USER RIGHTS
8.1. The user has the right to:
- obtain information about the data collected through cookies;
- withdraw consent to the use of the optional categories;
- demand the deletion of data collected on the basis of consent;
- file a complaint with Roskomnadzor, the Federal Service for Supervision of Communications, Information Technology and Mass Media (https://rkn.gov.ru), or with a court.
8.2. Enquiries are to be sent to info@art-aristocrat.ru with the subject line
“Cookie”. The procedure for their consideration and the response deadlines are set
out in section 11 of the Personal Data Processing Policy.
9. CHANGES
9.1. The Operator has the right to amend the present Policy when new services are
connected, or when the technologies of the website or the legislation change.
9.2. A new edition takes effect from the moment it is published on the website.
Where services are added that set cookies of new categories, the user's consent
is requested anew.
9.3. The current edition is published at the address
https://art-aristocrat.ru/cookie-policy.
Version 2.2 of 2026-08-27