Privacy Policy

Last updated: September 17, 2026

1. Who we are

nO shOes Studio ("we", "us", "our") operates this website and its tools. We are the data controller for the personal data described in this policy. Contact: noshoeswebstudio@gmail.com.

2. Scope

This policy applies to visitors in the United States, the European Union / European Economic Area, and Russia. It explains what personal data we collect, why we collect it, and the rights you have under applicable laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA) where it applies, and the Russian Federal Law No. 152-FZ on Personal Data.

3. Information we collect

Information you provide

  • Contact form: your name, email address, and message when you contact us.
  • Accounts: if you create an administrator account, your email address and a hashed password.
  • Text extraction tool: images you upload for OCR are processed in memory only. We do not store the uploaded image on our servers; the extracted text and a preview are held temporarily in your browser session and disappear when the session ends.
  • Audio transcription tool: this tool processes audio files already placed on our server. It does not collect audio or personal data from visitors.

Information collected automatically

  • Log data: standard web-server logs may record your IP address, browser type, device, pages visited, and timestamps.
  • Cookies: strictly necessary and preference cookies as described in our Cookie Policy.

4. How we use your information

  • To respond to your enquiries and provide the tools and services you request.
  • To operate, secure, and improve the website.
  • To protect against fraud, abuse, and security incidents.
  • To comply with legal obligations.

5. Legal bases (GDPR)

For visitors in the EU/EEA we process personal data on the following legal bases: consent (where you voluntarily provide information), performance of a contract (providing a requested service), legitimate interests (security, fraud prevention, and basic website operation), and compliance with legal obligations.

6. Sharing and third parties

We do not sell, rent, or trade your personal data. We may share data with:

  • Hosting and infrastructure providers that host the website and databases.
  • Google Fonts, which may receive your IP address when fonts are loaded.
  • Authorities, where required by law.

7. International transfers and data localization

Our servers may be located outside your country. Where data is transferred outside the EEA, we rely on appropriate safeguards as required by the GDPR. For users in Russia, personal data is processed in accordance with Federal Law No. 152-FZ, including its data-localization requirements where they apply.

8. Data retention

  • Contact messages: kept only as long as needed to respond and for follow-up.
  • Accounts: kept until you delete your account or ask us to remove it.
  • Uploaded OCR images: processed in memory only and not retained.
  • Server logs: kept for a limited period for security and diagnostics.

9. Your privacy rights

EU / EEA (GDPR)

  • Access, correct, delete, or restrict processing of your personal data.
  • Data portability.
  • Object to processing based on legitimate interests.
  • Withdraw consent at any time.
  • Lodge a complaint with your local data-protection supervisory authority.

United States (CCPA/CPRA where applicable)

  • Right to know what personal information we collect, use, disclose, and sell (we do not sell).
  • Right to delete your personal information.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information (we do not sell or share for advertising).
  • Right to non-discrimination for exercising these rights.

Russia (152-FZ)

  • Right to access, correct, block, or delete your personal data.
  • Right to withdraw consent to processing.
  • Right to contact Roskomnadzor if you believe your rights have been violated.

10. Children's privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS) and restricted access to administrative systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

13. Contact us

For privacy requests or questions, contact us at noshoeswebstudio@gmail.com.