Lana Orchestra · privacy notice revised 12 October 2026

Privacy and counters

I’m Anton Grushin. I run Lana Orchestra as a personal project and determine how data are processed here. For privacy questions, email me at grushin.anton@gmail.com. You can also reach me at @person_phoenix on Telegram.

This notice covers the pages, language selection and counters at lanaorchestra.com. It does not cover independent websites reached through external links.

Website language

On your first visit to the home page without a saved preference, the site selects Russian for Armenia, Azerbaijan, Belarus, Kazakhstan, Kyrgyzstan, Moldova, Russia, Tajikistan, Turkmenistan and Uzbekistan, and English for other countries. The country is estimated from the IP address; a VPN may change the result. If the country cannot be determined, the site uses your browser’s language preferences (Accept-Language).

This uses a local copy of DB-IP Country Lite, October 2026 edition, under the CC BY 4.0 licence. The language selection system does not record the IP address or country and does not create a visitor list. The IP address is not sent to an external country lookup service.

The direct /en/ address always opens the English version. Your manual RU/EN selection on the home page takes priority over automatic detection. Only a manual choice is saved in the lana_language cookie for 180 days: its value contains only ru or en, with no visitor identifier. Automatic language selection does not set this cookie. The language preference is independent of analytics and your permission for the optional counter.

The cookie has the HttpOnly and SameSite=Lax attributes, plus Secure over HTTPS. You can delete it in your browser settings or replace it with a new manual RU/EN selection.

Two different numbers

Views are counted whenever the server serves a page with a counter in response to a GET request, including reloads and automated requests. Using Back to return to a page kept in browser memory without a new server request does not increase the number. These privacy notice pages are not included in the statistics. Your browser does not store or send anything extra for this number. The server stores only a total per page. This measures page loads, not people.

Unique views help me understand interest in my material and are counted only with your consent, after you select “Allow” and the page has been visible for 10 seconds. Here, unique means one count per page in this browser per UTC day, not the number of different people over all time. The daily marker stays in this browser only. It contains no person identifier and is not sent to the server. The server receives the page name, consent version and a temporary technical token, then increases the total. The token links the start and completion of one count, expires within 15 minutes and is not stored in the counter database.

Loading the same page from the server again an hour later within the same UTC day increases “Views”, but does not increase “Unique views” while the daily marker remains. On the next UTC day, loading it adds another view; consent and 10 seconds of visibility allow a new unique view to be counted.

Both numbers are approximate. A different browser or cleared browser data can allow another count; blocked scripts and some simultaneous or delayed requests may reduce the total. Neither number proves that someone has read the text.

Your choice

Allowing and declining are equally easy. Declining does not restrict access. Your choice is valid for six months. Your browser stores the choice, its date, consent version and expiry solely to honour it. An expired entry is removed when you next use the site; without another visit, it may remain until you clear browser storage. You may be asked again after expiry, cleared storage, a different browser or a substantial change to these conditions.

You can change your choice using “Privacy settings” at the bottom of every page. Withdrawal stops further optional measurement and removes local daily markers. Previous totals are not linked to individual people, so an individual view cannot be located within them.

A daily marker is valid until the end of the current UTC day. Expired entries are cleared when you next use the site; if you never return, they may remain in browser storage until you clear it. Optional measurement stays off if storage is unavailable.

These two preferences use your browser’s localStorage, rather than cookies. The lana.privacy.consent entry holds your choice, date, version and expiry. Entries named lana.views.day.* contain only the date on which a particular page was counted. The first entry is necessary to honour your choice without asking on every page. Daily entries are used only after permission. The current choice version is 2026-10-12.1.

Server data

The counter database holds a page name, two totals and a technical timestamp used to reject repeated submissions. It contains no IP addresses, browser information, hashes of those details, visitor lists or individual visit histories. Totals remain while the counters are in use.

A network connection uses an IP address to deliver the page. The counter service does not read or record it for analytics. HTTPS access logs for pages, assets and counters are disabled. However, a plain HTTP request before redirection to HTTPS enters the web server’s general technical log. It may contain the IP address, time, requested URL, response status, browser information and the referring page address supplied by the browser. These entries are not used by the counters.

Separate infrastructure error and security logs also operate. General web server logs are checked for rotation daily, retaining up to 14 archives. This limits the number of archives; it does not guarantee deletion after 14 days. Old archives may remain longer when there are no new entries. This rule does not describe the provider’s own logs or backups.

Hosting is provided by Timeweb Cloud. The provider and communications networks participate in delivering and protecting the connection. The provider’s contractual documents and privacy policy are available on its documents page.

No third-party web analytics or advertising pixels are connected. Fonts, images and scripts load from this website. Protection includes HTTPS, restricted access to service data and validation of counter requests. The database and service keys are kept outside the public website directory.

Legal bases and your rights

In protecting personal data, I take into account the applicable legal requirements of Bulgaria, the Netherlands and the Russian Federation.

Optional browser measurement relies on your voluntary consent. Remembering your preference is necessary to honour it. Technical connection processing serves page delivery and site security, relying on the legitimate interest in operating the website. Totals are not used to make decisions about people or create profiles.

Messages and your rights

If you contact me, I receive the name, email address or messaging username you supply, the message and our correspondence. I use them to respond and handle your request. Requests to exercise your rights are processed to meet applicable data protection obligations; ordinary website enquiries are handled on the basis of my legitimate interest in responding. Permission for the counter is not required for this.

Email to the address above is received in Gmail; Telegram messages are handled through Telegram. These are separate services with their own terms: Google and Telegram. Correspondence is not published on the website or joined to its statistics. Please do not send passports, passwords, medical information or other unnecessary data for an ordinary enquiry.

You may request information about processing and access to your data, correction, deletion or restriction, object to processing, or withdraw consent. Data portability depends on the data and legal basis. Withdrawal does not affect the lawfulness of earlier processing. If I cannot link an aggregate total to you, I will explain this rather than collect additional identifiers solely to create that link.

You can send a request to grushin.anton@gmail.com, for example with the subject “Personal data”. Explain what you wish to know or change. Under the GDPR, a response is provided without undue delay, normally within one month. If a legally permitted extension is necessary, I will explain it within that month. Where Russian law applies and sets a shorter deadline for your particular request, that deadline applies. Further identity information may be needed only where there are reasonable doubts and only to the extent necessary.

You may contact a competent supervisory authority: the Autoriteit Persoonsgegevens in the Netherlands, the Commission for Personal Data Protection in Bulgaria or Roskomnadzor in Russia. Your right to judicial remedies remains.

External links and future features

Telegram, X and the professional website are ordinary links. Their own policies apply after you follow them. Social sign-in, comments and data submission forms are not connected in this release.