Privacy Policy
Version of 30 September 2026
This page describes what data appears when you visit werra.site, why it is needed and who receives it. It describes what the site actually does, rather than a generic set of clauses.
1. Who processes the data
The data controller is the owner of werra.site.
FILL IN BEFORE SHOWING THE SITE: full legal name of the controller, registration number and postal address.
Send questions about data processing and the requests described in section 9 to:
FILL IN: contact email address.
2. The site in short
werra.site is a single-page site. It has no forms, no sign-up, no account area, no cart, no comments and no payment. It sets no cookies, runs no web analytics, loads no advertising or tracking scripts and stores nothing in your browser.
The only action available is pressing a button that opens a Telegram bot. Section 6 explains what happens then.
3. Web server logs
The web server records every request. This is a built-in nginx mechanism that runs before and independently of the page content. Each record contains:
- the IP address the request came from;
- date and time;
- the requested address and request method;
- the response code and the number of bytes served;
- the User-Agent string — browser and operating system name and version;
- the referring page address, if the browser sends one.
- Purpose
- Keeping the site available and secure, diagnosing failures, detecting break-in attempts and automated attacks.
- Legal basis
- Legitimate interest of the controller.
- Retention
- 14 days. Logs rotate automatically; they are not exported or archived by hand.
- Use
- Not combined with other data, not used for profiling, advertising or building a visitor profile.
4. Cookies and browser storage
The site sets no cookies and writes nothing to localStorage or sessionStorage. That is also why there is no cookie consent banner — there is nothing to consent to.
5. Google Fonts
The pages load the Onest and Jost typefaces from fonts.googleapis.com and fonts.gstatic.com. Your browser contacts Google directly, and Google receives your IP address, your User-Agent string and the address of the page that needed the font.
The site owner does not receive, see or store any of this. Google's handling is described in the Google Privacy Policy. Google's servers sit outside Russia and the EEA, so this is an international transfer.
6. Opening the Telegram bot
The «Join the waitlist» buttons point to an address like t.me/…?start=en_hero. The start parameter records which part of the page the click came from — the header, the first screen, the closing block. It carries no information about you.
Opening t.me tells the site owner nothing. Data appears only if you start the bot: Telegram then passes the bot your numeric user ID, your first and last name and your username, where your profile has them. Telegram does not pass your phone number to the bot.
- Purpose
- Sending you one message when access to WERRA opens.
- Legal basis
- Your consent, given by starting the bot. Nothing is processed before you press Start.
- Withdrawing
- Block the bot in Telegram or send it the stop command. Messages stop and your waitlist entry is deleted.
- Where
- Within Telegram's infrastructure, on servers outside Russia.
7. Who receives the data
The controller does not sell data and does not pass it to ad networks or data brokers. Data reaches three parties, and only to the extent described above:
- The hosting provider — the request logs physically sit on its server;
- Google — when fonts load, section 5;
- Telegram — if you started the bot yourself, section 6.
Data is disclosed to authorities only where the law requires it and the request is properly issued.
8. Security
The site runs over HTTPS; connections are encrypted. Server access requires a cryptographic key — password login is disabled. Logs are available only to the people maintaining the server.
9. Your rights
You may:
- ask whether your data is processed and obtain details of that processing;
- ask to correct, restrict or delete data that is incomplete, outdated, unlawfully obtained or no longer needed;
- withdraw your consent;
- complain to the competent supervisory authority.
Send requests to the email address in section 1. You will get an answer within 30 days. Note that server logs contain no name and cannot be linked to a person without further information, so a request about them needs an IP address and a date.
10. Children
The site is not aimed at children and does not knowingly collect their data. If you learn that a child has submitted data through the Telegram bot, write to the address in section 1 and the record will be deleted.
11. Changes
New versions are published on this page and the date at the top is updated. No separate notifications are sent, so it is worth checking back when you return to the site.