Privacy Policy
Revision:
English translation prepared:
This policy describes data processing when you use the MAYAK calculator and when you contact us separately by email. Local calculations, correspondence and technical processing by the infrastructure are described separately.
1. Website operator and contact details
The operator of the MAYAK ONE APP website and the controller of personal data for processing for which MAYAK is responsible is Oleh Sosnihin, a private individual in Finland without a registered company.
MAYAK ONE APP is a free, personal, non-commercial project. The current version has no advertising, monetisation, affiliate programmes, subscriptions or payments.
For questions about the website or personal data processing, and to exercise your rights under the GDPR, you can write to contact@mayakone.com.
2. Categories of data processed
The calculator uses gross pay, the tax card percentage, the payment month, answers about the profile conditions and the calculated result. These remain in your browser during normal use of the tool.
When you visit the website, the infrastructure may process technical request data. If you send a separate email, the sender's address, any name they provide, the date and subject, the message, attachments and replies in the correspondence are processed. Send only the information needed for your question.
If visit statistics are available and you have separately allowed them, Vercel receives the technical pageview information described in section 4. Financial values and the result are not included in these events.
When forwarding email, Cloudflare Email Routing also processes service-related information: sender and recipient addresses, the subject, message ID, authentication results, delivery statuses and decisions about how to handle the message.
3. Local salary calculations
The calculation takes place in your browser. The application uses gross pay, the tax card percentage, the month and confirmations of the profile conditions to validate your input and produce an estimate. It does not send these values or the result to a MAYAK server or include them in the page address, analytics or error logs.
The calculator has no server-side calculation history or salary database. The application does not save financial values in localStorage, sessionStorage, IndexedDB or cookies. This does not rule out the browser's or device's own mechanisms. Technical data involved in loading the website are described separately in section 4.
When you select “Copy result”, a short calculation summary is sent to the system clipboard; if automatic copying is unavailable, text is shown for manual copying. “Share result” sends the text to the system share menu if the browser supports this function. The text contains the month, gross pay, tax card percentage, deductions, net pay and an explanation; profile confirmation answers, files and a link containing financial data are not shared.
You choose where to paste the text, or which application to use and whom to send it to. Your device and the applications you choose may save, synchronise and transmit copies under their own rules. MAYAK does not control their subsequent processing. Changing the calculator inputs does not recall text that has already been copied or shared.
Entering data is optional. Without the required values and confirmations, the calculator will not perform a calculation. Copying and sharing are also optional and do not affect your ability to obtain a result.
4. Technical data about visits
Loading a page and its files creates HTTPS requests. The hosting service may process the IP address, requested URL, time, browser information and technical information about how the service operates. This is different from transmitting values from the calculator form.
The website is hosted on Vercel. Separate private test versions are protected by Vercel Authentication; access protection may process technical sign-in and service-request data and use cookies for access. This is not registration with MAYAK. The full actual contents of infrastructure logs and cookies, their parameters, the operator's access and their retention periods for the public version have not yet been confirmed.
Observations of an individual private test version do not establish the full set of cookies before and after sign-in or the parameters of the public infrastructure. The specific technical data available to MAYAK or retained by it, actual access and the adequacy of protection have not been fully confirmed.
The validity period of authentication or a cookie, the Runtime Logs viewing window, and retention of Firewall data, separate diagnostics and the provider's internal copies are considered separately. A log viewing window does not confirm when all data are deleted or establish a necessary retention period for MAYAK's own copies.
The application has no advertising trackers or cookies for saving calculations. The Vercel Authentication infrastructure may use cookies for access. See Vercel's Privacy Notice and Cookie Policy. The provider's documents do not replace this policy. External links open only when you choose to follow them.
Optional visit statistics
On mayakone.com, Vercel Web Analytics may count ordinary pageviews only after the visitor has separately allowed this.
Before permission is given, and if you decline, the statistics collection script is not loaded and events are not sent. Choosing “Without statistics” does not restrict the calculator, Copy/Share, explanations or legal pages. When the function is available, the “Statistics settings” button at the top of the page lets you change your choice and withdraw permission. Closing the settings, remaining silent and confirming the profile conditions do not count as consent.
Only ordinary views of the Russian and English versions of the home page, Privacy Policy, Terms of Use and Disclaimer are counted. The application does not send calculation events, form values, pay, the tax card percentage, the result or user identifiers. The event address is restricted to these eight pages without a query string or fragment; visits with query strings and unsafe referrers are excluded. The statistics therefore do not reflect all visits.
Vercel may process the request time, page address, permitted referrer and technical information to determine geography, browser, operating system and device type. Receiving the request also involves the IP address and HTTP metadata. According to Vercel's documentation, standard statistics are aggregated, and a visitor is distinguished using a hash of the incoming request with a lifetime of up to 24 hours. This is not a claim that all underlying technical processing involves only non-personal data.
After permission is given, the application and script may read browser storage to check attribution. If such an entry already exists, or its absence cannot be verified, the application blocks analytics events and does not clear the entry. MAYAK does not invoke identity/group tracking or opt in to optional analytics cookies. The application itself does not create a persistent record of the statistics choice, a visitor profile or financial values; this is not a promise that all service cookies used by the infrastructure are absent.
Permission applies only within the currently loaded page. After a refresh or a new page load, statistics are switched off again until a new choice is made. Changing the language starts a new page load and requires a new choice. After withdrawal, no new events are created; requests already started cannot be recalled from the network. Previously received data and the rights relating to them are considered separately.
5. Email enquiries
The contact link opens your email application without a pre-filled subject, message or calculation data. The website itself does not send an email. Incoming messages to contact@mayakone.com are forwarded through Cloudflare Email Routing to Gmail, where the operator handles correspondence.
This email flow is separate from the local calculation. If you include pay or other personal information in an email yourself, it becomes part of the correspondence. For a general question, do not send personal identifiers, tax cards, payslips, bank details or personal documents.
Writing to MAYAK is optional; it is not a condition of using the calculator. Without contact details for a reply or a sufficient description of your question, we may be unable to give a substantive reply.
6. Purposes and legal bases for processing
For its own optional pageview statistics, MAYAK's purpose is to understand use of the eight public pages in Russian and English without financial values or user profiles. The separate legal basis for this processing is the visitor's consent under Article 6(1)(a) GDPR. Consent is expressed by actively choosing “Allow statistics” after being informed and can be withdrawn through “Statistics settings”. It is not a condition of performing a calculation, and legitimate-interest assessments for delivering the website do not extend to analytics. Consent does not replace the necessary conditions for processing by the recipient or for international transfers.
Local values are needed to perform a calculation at your request. Correspondence is needed to consider and answer enquiries, including personal data requests. Technical processing by the infrastructure relates to delivering pages, access control and operating the service.
For the local calculation and the initial copying or sharing actions described in section 3, Article 6(1)(f) GDPR is being considered as a legal basis: MAYAK's legitimate interest in providing a working, free tool at the user's request and allowing the user to use its result.
The owner has approved the assessment of this interest subject to data minimisation, clear information and restricting processing to the stated function. The applicability of the legal basis is currently assessed as conditional; approving the assessment does not itself confirm that all its conditions have been met.
This assessment does not automatically cover technical logs, the browser's and operating system's own operations, or subsequent processing by platforms you choose. Pressing buttons and confirming the profile conditions are not automatically treated as GDPR consent.
The specific legal bases for ordinary correspondence and technical data have not been fully confirmed. A possible legitimate interest in considering ordinary enquiries and protecting the service under Article 6(1)(f) GDPR requires an assessment of necessity and a balancing of interests. These bases are not established merely by the existence of the website or an email; sending an email does not in itself constitute consent to all processing.
For MAYAK's own necessary processing when delivering requested pages and files, Article 6(1)(f) GDPR is being considered: a legitimate interest in providing a working website at the visitor's request. A limited assessment of this interest has been approved subject to conditions; the applicability of the legal basis is assessed as conditional. This assessment does not mean that every technical field is necessary and does not automatically cover logs, diagnostics or subsequent retention.
For MAYAK's own necessary processing for minimal access control to a separate private test version, Article 6(1)(f) GDPR remains a candidate legal basis. A limited assessment has been approved subject to conditions, but the final applicability of the basis, a fully positive balancing of interests and actual fulfilment of the conditions have not yet been confirmed.
These assessments do not establish the legal bases for processing carried out by Vercel for its own purposes, do not automatically cover all logs or all operations of the public infrastructure, and do not replace a separate check of the applicable conditions for using cookies.
Personal data requests and objections are considered separately from ordinary correspondence. For necessary processing to comply with specific GDPR obligations, including those under Articles 12, 17 and 21, Article 6(1)(c) is being considered: compliance with a legal obligation. This basis applies only to the extent necessary for the relevant obligation.
Minimal information from correspondence — contact details, dates, the type and scope of the enquiry, the decision, actions taken and the reply — may be needed to demonstrate compliance with obligations and accountability under Articles 5(2) and 24 GDPR. The organisational procedure provides for recording this mainly within existing correspondence. A separate permanent enquiry log is not created; salary history is not collected for this purpose. Actual implementation of the procedure still requires verification.
After an enquiry has been completed, the need for further retention and the applicable legal basis are assessed separately. Article 6(1)(c) and accountability do not amount to permission to retain any evidence indefinitely. Retention for a specific complaint or legal claim requires a separate justification of the purpose, legal basis and necessary scope; the undefined possibility of a future dispute does not in itself establish this.
7. Data recipients and service providers
When statistics are permitted, Vercel also receives technical Web Analytics events and produces aggregated reports for MAYAK. MAYAK does not create its own event archive, export events to external systems or use them for advertising or profiling. The contractual roles and limitations of the plan described below are not considered confirmed merely because the visitor has consented.
Processing involves the MAYAK operator, Vercel for hosting the website and separate private test versions, Cloudflare for forwarding incoming email, and Google/Gmail for the mailbox. Providers may use their own service providers under the applicable terms.
The MAYAK operator determines the purposes of handling enquiries and the retention policy for its own correspondence. Providers' official documents describe their processing of different categories of data; this does not confirm an identical contractual role for all services. An ordinary personal Gmail account (consumer Gmail) is used for correspondence.
The specific contractual roles and terms for the accounts in use still require verification. The published Vercel Data Processing Addendum refers to Pro and Enterprise; its applicability to Hobby has not been confirmed. The existence of a general document does not prove that an appropriate agreement has been concluded for MAYAK.
On 8 October 2026, optional use and sharing of data for AI model training was disabled for the MAYAK team in Vercel; the project settings were checked and showed OFF because of the team-wide setting. According to Vercel's explanation, opting out applies to future data sharing and does not undo previous sharing. This does not mean that all technical processing by the infrastructure is disabled. No prior sharing of MAYAK data for training has been established.
See Cloudflare's privacy policy, the Cloudflare Data Processing Addendum and Google's privacy policy. Google Workspace terms are not automatically attributed to ordinary Gmail. With Copy/Share, you choose the recipients; external websites apply their own rules.
8. International data processing and transfers
Providers use international infrastructure; processing outside Finland and the EEA is possible. We do not promise that all email and technical data are stored only in the EU.
The actual recipients, countries and applicable transfer mechanisms for the services and accounts in use still require confirmation. Standard contractual clauses or other safeguards cannot be assumed to apply automatically to MAYAK merely because they are mentioned in a provider's general policy. The completeness of applicable legal bases, transfer safeguards and information about them across the entire chain of services in use has not been confirmed.
9. Retention periods
The statistics choice is kept only in the memory of the loaded page and is not moved by the application into persistent storage. Vercel documents a visitor identifier lifetime of up to 24 hours and a one-month window of reports available on Hobby. Vercel allows statistics to be retained for longer: the reporting window does not guarantee that all events, logs and backups are deleted after one month. In its Privacy Notice, the provider describes retention for as long as necessary for its stated purposes and obligations, followed by deletion or de-identification; backups may be retained separately. The full actual period for deleting all copies for MAYAK has not been confirmed. MAYAK does not create its own exports or an additional visit archive.
Local values are used in page state for input, calculation and displaying the result. The application does not create a persistent calculation history. When an input changes, the previous result is removed. The exact time when all copies are deleted from browser memory has not been established; closing a tab is not presented as a guarantee that data the browser or device may have saved or restored have been deleted. Copies in the clipboard and chosen applications have a separate lifecycle which MAYAK does not control.
Ordinary email enquiries are retained for no more than 12 months after the last exchange about the enquiry. This is MAYAK's policy, not an automatic Gmail retention period. Regular manual review and deletion are provided for; automatic deletion has not been configured, and actual implementation of the procedure still needs to be checked.
For ordinary correspondence, exceptions may apply for unfinished enquiries, legal obligations and other justified cases. Each exception requires a specific reason, the necessary scope of data and a period or review date. An exception does not permit indefinite retention. When the need ends, the data must be deleted; earlier deletion may be available where a GDPR right applies.
No general six- or twelve-month period has been set for personal data requests and objections or for minimal information about their handling and fulfilment. The limit for ordinary correspondence does not automatically extend to them. While a request is being handled, only what is needed to fulfil it and verify the result is retained; unnecessary data must be deleted early, taking account of other applicable rights.
After an enquiry has been completed, only information for which a specific lawful purpose and necessity remain is retained. Further retention requires an applicable legal basis, the necessary scope, an end date or an objectively verifiable terminating event, and the next review date to be determined. The original email and attachments are not automatically retained in full. A repeated enquiry or a weekly review does not in itself extend retention.
An organisational decision provides for reviewing retained records of closed enquiries during the existing weekly retention review. If the need has ended or the established limit has been reached, the relevant data under the operator's control must be deleted without undue delay, without waiting for the next weekly review. This is a manual procedure, not automatic deletion; its actual implementation still requires verification.
Moving an email to Gmail Trash does not complete deletion: it may remain there for up to 30 days according to Gmail Help. MAYAK's procedure provides for permanently deleting the selected correspondence from Trash no later than the applicable retention limit, rather than adding another 30 days of retention.
Cloudflare's documentation states 31 days for the Email Routing events and metrics described there. This is not a universal retention period for all Cloudflare data. Vercel Runtime Logs documentation states a one-hour log window on Hobby; this is not a guarantee that all Vercel technical data are deleted after one hour. These periods do not replace MAYAK's 12-month correspondence policy.
The retention periods for other technical data and deletion of internal copies held by Cloudflare, Vercel and Google have not yet been confirmed for MAYAK. Deletion from the mailbox does not prove immediate deletion of all provider backups. The application does not create a saved history of financial values.
10. Users' rights under the GDPR
Depending on the legal basis and circumstances of processing, you may have rights of access and a copy of your data, rectification, erasure, restriction of processing, objection and data portability. Where processing is based on consent, it can be withdrawn without affecting the lawfulness of earlier processing. Portability and erasure apply under the conditions set by the GDPR, rather than unconditionally to all data.
You can lodge a complaint with a supervisory authority, including the Office of the Data Protection Ombudsman in Finland. Contacting MAYAK does not restrict this right. The calculator does not make decisions about the user that have legal effects: it displays an estimate based on the conditions entered.
Right to object to processing based on legitimate interests
You may object at any time to processing of your personal data based on Article 6(1)(f) GDPR for reasons relating to your particular situation. Write to contact@mayakone.com and identify the processing to which you object.
Such processing must cease under the GDPR unless the controller can show compelling legitimate grounds that take precedence over your interests, rights and freedoms, or that processing is needed to establish, pursue or defend legal claims.
You can stop using the local function, but this does not replace the option to submit an objection. Stopping use does not automatically delete copies already sent to your device or other applications.
11. Requests for access, rectification and erasure
If your enquiry concerns the local calculator, describe the action you want and the relevant function. You do not need to send salary values or documents for such an enquiry. MAYAK has no server-side history of these calculations; an email you send separately becomes part of the email processing.
Send your request to the contact given above, contact@mayakone.com: describe the action you want and the correspondence concerned. Where possible, use the address used for the earlier enquiry. Do not send a passport or other documents unnecessarily; if there are reasonable doubts about identity, only necessary additional information may be required.
The GDPR requires a response without undue delay and no later than one month after receipt of a request. For complex or numerous requests, the period may be extended by up to two months, with notice and an explanation during the first month. If a request is refused, the reasons and the options of a complaint and judicial remedy must be communicated. These are legal requirements, not confirmation that MAYAK's procedures have been fully implemented. Ordinary correspondence has been tested. Practical implementation of the rights-request procedure, the completeness of searches for and deletion of data under the operator's control, and the security of sending replies containing personal data have not been fully confirmed.
MAYAK has no server-side history of local calculations to provide or delete. An email received separately is handled under the email procedure. For data processed by a provider for its own purposes, it may be necessary to contact the provider; this does not remove the operator's obligations for data for which the operator is responsible.
12. Changes to the Privacy Policy
The policy is updated when the service, processing or confirmed conditions change. The revision date is shown at the beginning. Material changes must be clearly communicated before the corresponding processing begins.
The operator's details and contact for enquiries are given in section 1. Legal bases, service providers, international processing, retention periods and enquiry procedures are described in sections 6–11, subject to the limitations stated there. The limits of the calculation are described in the Disclaimer, the website rules in the Terms of Use, and the methodology in “How it is calculated / Sources”.