1. Who We Are
This Privacy Policy applies to ohnice.space (the "Service"), operated by:
Mochalov Dmitri Andrei (Individual Entrepreneur)
Registered in the Republic of Armenia
Registration number: 20268705
Registered address: Yerevan, Kentron, Arghishti str. 7, suite 0015, Armenia
Email: legal@ohnice.space
For the purposes of GDPR, we are the data controller for personal data collected through the Service.
2. Information We Collect
2.1 Information You Provide
When you contact us or purchase a course, we collect:
- Name (first name, optional last name)
- Email address
- Phone number (optional, for contact form)
- Payment information (processed by our payment provider — we do not store full card details)
- Messages you send through our contact form
2.2 Automatically Collected Information
When you visit the Service, we automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referring URL
- Cookies and similar tracking technologies
2.3 Cookies and Similar Technologies
We use cookies and similar technologies (localStorage, pixels) for the following categories:
- Essential — required for the site to function (session, security, consent storage). Always active and cannot be disabled.
- Analytics — help us understand how visitors interact with the site (Google Analytics 4). Only set with your consent.
- Marketing — used to show relevant ads on other sites. Currently not active, but the toggle is available for future use; only set with your consent.
Cookies and storage we use:
ohnice_consent_v1(localStorage) — stores your cookie preferences. Essential. Expires after 13 months._ga,_ga_JM5BH6B1G8(Google Analytics 4, ID: G-JM5BH6B1G8) — distinguishes unique users and sessions. Analytics. Expires after up to 2 years. Google Privacy Policy.- Google Tag Manager (GTM-TKSCKZW5) — loads tags conditionally based on your consent. Tag delivery only; no tracking on its own.
2.4 Managing Cookies
For users in the EU, EEA, UK, and California, we use Google Consent Mode v2: analytics and marketing cookies are denied by default until you make a choice in our cookie banner. For users in other regions, analytics cookies are loaded by default but can be opted out.
You can manage your preferences at any time by:
- Clicking the "Cookie preferences" link in the footer of any page on this site
- Clearing your browser's localStorage for ohnice.space (the banner will reappear on your next visit)
- Adjusting your browser's cookie settings — see your browser's help pages for instructions
- Using Google Analytics Opt-out Browser Add-on to opt out of GA across all sites
Disabling essential cookies may limit Service functionality. Your consent choice is stored for 13 months, after which we will ask again.
2.5 AI Chat Assistant
We provide an AI-powered chat widget on our site to answer questions about our courses. When you use this feature:
Data we process:
- Your messages are sent to our chat service and forwarded to Anthropic Inc. (our AI provider) to generate responses. Anthropic processes messages according to their Privacy Policy and does not use them to train their models without consent.
- Your messages and IP address are logged on our server in JSON format. These logs help us improve the service and respond to support requests.
Retention:
- Server-side chat logs are stored for 30 days, then automatically deleted via logrotate.
- Browser-side conversation history is stored only in
sessionStorageand disappears when you close the tab.
Your rights (GDPR):
- Right to access: email info@ohnice.space with your session ID to receive your chat history.
- Right to erasure: email info@ohnice.space to request deletion of your chat data before the 30-day window.
Email collection:
- We do not ask for email proactively. The chat may offer to forward your inquiry to our team only if you explicitly request human help.
- Email addresses provided through chat are sent to our team via Telegram and stored alongside the conversation log.
Children under 13:
- The chat asks for age confirmation before engaging. If you indicate you are under 13, the chat will not engage and will direct you to ask a parent to email us instead.
- We do not knowingly collect data from children under 13. If you believe a child under 13 has used our chat, please contact info@ohnice.space and we will delete the relevant data.
Third-party processors used by the chat:
- Anthropic Inc. (USA) — processes message content for AI response generation.
- Telegram Messenger LLP — receives notifications about chat activity (anonymized session IDs and message bodies are forwarded to our internal monitoring channel).
3. How We Use Information
We use collected information to:
- Provide access to purchased courses
- Process payments
- Respond to inquiries
- Send course updates and important notices
- Improve our Service
- Comply with legal obligations
- Prevent fraud and abuse
4. Children's Privacy (COPPA)
4.1 Age Restriction
Our Service is designed for users aged 11–17. We comply with the U.S. Children's Online Privacy Protection Act (COPPA) and EU GDPR provisions for children.
4.2 Children Under 13
We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are a parent and learn that your child has provided personal information to us without your consent, please contact legal@ohnice.space and we will:
- Delete the information promptly
- Refund any associated purchase
- Confirm deletion via email
4.3 Children Aged 13–17
For users aged 13–17, we recommend that a parent or legal guardian review and approve their use of the Service. Account-creating actions (course purchases, lead form submissions) should be performed with parental knowledge.
4.4 Parental Rights
Parents and legal guardians may at any time:
- Review the personal information we have collected about their child
- Request deletion of their child's information
- Refuse further collection of their child's information
To exercise these rights, contact legal@ohnice.space with proof of parental relationship.
5. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process personal data based on:
- Contract performance: To deliver purchased courses (Article 6(1)(b) GDPR)
- Legal obligation: To comply with tax, accounting, and consumer protection laws (Article 6(1)(c))
- Legitimate interests: To prevent fraud, improve our Service (Article 6(1)(f))
- Consent: For marketing communications and non-essential cookies (Article 6(1)(a)) — you may withdraw consent at any time
6. Sharing Information
We do not sell your personal information. We share information only with:
6.1 Service Providers
- Payment processors (Stripe, Paddle, PayPal, or similar) for transaction processing
- Email/communication services for transactional emails
- Hosting providers for Service delivery
- Analytics providers (Google Analytics) for aggregated usage data
These providers are contractually bound to protect your information and use it only for specified purposes.
6.2 Legal Requirements
We may disclose information when required by law, court order, or to:
- Protect our legal rights
- Investigate fraud
- Comply with regulatory requests in Armenia, EU, or other relevant jurisdictions
6.3 Business Transfers
If our business is acquired or merged, your information may be transferred as part of the transaction. You will be notified via email in advance.
7. Data Retention
We retain personal information for:
- Account information: As long as your course access is active, plus 3 years after for tax and legal compliance
- Payment records: 7 years (Armenian tax law requirement)
- Marketing data: Until you unsubscribe or 2 years of inactivity
- Cookies and analytics: Per cookie/provider expiration (typically up to 2 years)
After retention periods, data is deleted or anonymized.
8. Your Rights
8.1 GDPR Rights (EEA Users)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion ("right to be forgotten")
- Restriction: Limit how we process your data
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: For consent-based processing
- Lodge a complaint: With your local data protection authority
8.2 California Privacy Rights (CCPA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt out of sale (we do not sell data)
- Right to non-discrimination for exercising rights
8.3 How to Exercise Rights
Email legal@ohnice.space with your request and proof of identity. We respond within 30 days.
9. Data Security
We implement reasonable security measures to protect personal information:
- HTTPS encryption for all data in transit
- Secure password hashing
- Limited access to personal data on a need-to-know basis
- Regular security reviews
However, no system is 100% secure. We cannot guarantee absolute security of data transmitted online.
10. International Data Transfers
We are located in Armenia. Data may be transferred to and processed in:
- Armenia (our location)
- United States (some service providers — Google Analytics, payment processors)
- European Union (some service providers)
For EEA users, transfers outside the EEA are protected by:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Other safeguards under GDPR Chapter V
11. Third-Party Links
Our Service may contain links to external sites. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing any information.
12. Updates to This Policy
We may update this Privacy Policy. Material changes will be communicated via:
- Email notification (if you have an account)
- Prominent notice on our homepage
- Updated "Last updated" date
Continued use of the Service after changes constitutes acceptance.
13. Contact
For privacy questions, requests, or concerns:
Data controller: Mochalov Dmitri Andrei IE
Email: legal@ohnice.space
Postal address: Yerevan, Kentron, Arghishti str. 7, suite 0015, Armenia
For GDPR-related complaints, you may also contact your local data protection authority.