Legal

Operator

Lnk2Drv is the website lnk2drv.com and the Telegram bot @lnk2drv_bot.

• Operator: Miatov Mikhail Aleksandrovich, sole proprietor registered in the Russian Federation.
• Tax number (INN) 434549319259, registration number (OGRNIP) 321774600641423.
• Address: Pleteshkovskiy pereulok 3, bld. 2, Moscow 105005, Russia.
• Email for legally significant correspondence and data subject requests: info@seo-performance.ru.

Personal data is processed under Russian Federal Law 152-FZ of 27 July 2006. For people in the European Economic Area, Switzerland and the United Kingdom the GDPR and the UK GDPR apply as well; for US residents, state privacy laws. Both have their own sections below.

Personal data

Collected on the website

• Anonymous visit data: IP address, browser and device information, referrer, pages viewed and on-page actions. Collected by Yandex Metrica, including session recording (Webvisor).
• The language version you chose — stored in a cookie and in localStorage.
• The “turn motion off” setting — stored in localStorage.

There are no forms for a name, phone number or email. A file you drop into the fingerprint check never leaves the browser: the hash is computed on your device and is not sent anywhere.

Collected by the bot

• Your Telegram user id and username — to tell your uploads from other people’s and to answer in the same chat.
• The access token for the cloud you connected — stored encrypted, with the encryption key kept separately from the database.
• Upload history: file name, size, date, the Telegram file identifier, the link and the file identifier in your cloud.

File contents are neither stored nor analysed. Files pass through: Telegram → bot server → your cloud, after which the server copy is deleted.

Files with no cloud connected

With no cloud connected the file is placed on the operator’s server and stays reachable by link for 7 days, after which it is deleted automatically. The link is not indexed and carries a random identifier, yet anyone holding it can open the file. You can delete it earlier with /my. The operator does not inspect uploaded content and removes files on a substantiated request from a rights holder or a competent authority.

Purposes and legal grounds

• Providing the service you asked for. Ground: performance of a contract.
• Running /my and the delete button, and avoiding a second upload of the same file. Ground: performance of a contract.
• Site statistics. Ground: your consent, given on your first visit.

Who receives the data

• Yandex LLC as the analytics provider (Yandex Metrica), to the extent above.
• The cloud provider you connected yourself: Google or Yandex. Files go there on your instruction and with your access token.
• No data is sold or passed to anyone else. The site carries no advertising.

Retention

The access token is kept until you disconnect the cloud with /accounts, which erases it and asks the provider to revoke it. History records are kept until you ask for their deletion.

Your rights

You may ask what data is processed, request correction, restriction or erasure, withdraw consent, and complain to a supervisory authority. Send the request as a message to the bot.

Security

Access tokens are encrypted, the encryption key is stored separately from the database, and traffic to the site and to cloud providers goes over TLS.

Cookies

The site uses a minimal set of cookies and browser storage:

• lnk2drv_lang — the language version you chose, one year. Set only after you pick a language yourself.
• lnk2drv_consent — your answer to the cookie banner, one year.
• Yandex Metrica cookies — site statistics. Set after you accept.

You can refuse with the button in the banner, and clear cookies in your browser at any time. Refusing changes nothing in how the site or the bot works.

Terms of use

Subject

The operator gives access to a bot that, on your instruction, uploads files you forward into the cloud storage you connected and returns a download link. Using the service means you accept these terms.

What the user does

• Connects their own cloud with /connect and keeps their provider account secure.
• Does not upload material that is unlawful to distribute or that they hold no rights to.
• Understands that the returned link is ordinary link sharing in their own cloud: anyone holding the link can open the file.

Limits

• The public Telegram Bot API hands the bot files up to 20 MB.
• The service is not storage: files live in the user’s cloud and the operator is not responsible for how the provider keeps them.
• The service is provided “as is”, without a guarantee of uninterrupted operation and without liability for lost profit.

Changes

The operator may publish a new revision on this page; the revision date is shown at the top.

EU and UK visitors

This section applies to people in the European Economic Area, Switzerland and the United Kingdom. The data controller is Miatov Mikhail Aleksandrovich, sole proprietor; contact info@seo-performance.ru.

Legal bases

• Performance of a contract — Article 6(1)(b) GDPR: uploading your file to the cloud you connected, returning the link, the upload history and /my.
• Consent — Article 6(1)(a): website analytics and the cookies it needs. Consent can be withdrawn at any time; withdrawal does not affect processing carried out before it.
• Legitimate interest — Article 6(1)(f): protecting the service from abuse and overload (limits, flood control) and keeping technical logs.

Your rights

You may request access to your data and a copy of it, rectification, erasure, restriction of processing, object to processing, receive your data in a machine-readable form (portability) and withdraw consent. Write to the operator’s email or message the bot; the answer comes within one month. You may also lodge a complaint with the supervisory authority where you live or work — in the UK, the ICO.

Transfers outside the EEA

The bot server and the databases are located in Russia. There is no European Commission adequacy decision for Russia. The transfer relies on Article 49(1)(b) GDPR: it is necessary to perform the contract you enter into on your own initiative by sending a file to the bot. This means the level of protection may differ from the European one and your rights may be harder to enforce through European mechanisms. By sending a file you accept that risk; if it is unacceptable to you, do not use the service.

Other GDPR points

• No Article 27 representative has been appointed: the processing is occasional, not large-scale and involves no special categories of data — the exemption in Article 27(2)(a).
• Data is kept no longer than the stated purposes require: the access key until you disconnect the cloud, the history until you ask for deletion, files without a connected cloud for 7 days.
• No automated decision-making or profiling takes place.
• The service is not intended for anyone under 16.

US visitors

This section applies to residents of California (CCPA as amended by the CPRA) and of states with comparable laws — Virginia, Colorado, Connecticut, Utah, Texas and others.

Categories collected

• Identifiers: your messenger user id and username, IP address, cookie ids.
• Internet activity: pages viewed, on-page actions, referrer.
• Coarse location inferred from the IP address — country level, to open the site in a fitting language.
• User content: the files you forward to the bot. They pass through; their contents are neither read nor analysed.

Sale and sharing

The operator does not sell personal information and does not share it for cross-context behavioural advertising — neither for money nor for other valuable consideration. Sensitive personal information is not used to infer characteristics. There is no advertising on the site.

Your rights

You may ask what data has been collected, where it came from and to whom it was disclosed, receive a copy, ask for correction or deletion, and opt out of sale and sharing — that opt-out is moot here, because there is neither. Exercising these rights is free and does not worsen the service you get. Write to the operator’s email or message the bot; the answer comes within 45 days and may be extended by another 45 with notice. An authorised agent may submit the request with proof of authority.

The service is not directed to children under 13 and their data is not knowingly collected. If you believe a child has given us data, write to us and it will be deleted.

Contact

Questions about data processing, requests to delete history, withdrawal of consent and any claims under these terms go to @lnk2drv_bot.

Written requests, including data subject requests and legally significant correspondence, go to info@seo-performance.ru or to the postal address in the “Operator” section. Answers come within the period set by the applicable law: 10 working days under 152-FZ, one month under the GDPR, 45 days under US state laws.