Data and privacy
Version dated 31 October 2026.
Data controller
Sole proprietor Anton Nikolaevich Sinitsyn, Tax ID 183112316682, registration No. 304183118800038. Postal address: Apt. 184, 71 7-ya Podlesnaya Street, Izhevsk, 426069, Russia. Contact phone: +7 (950) 159-33-43.
What data is used
Your name, email and a protected password representation are used for your account and access recovery. Event settings, hashtag, dates, selected source and templates are needed for search and design. Instagram/Facebook connection data and tokens are stored privately; VK uses the available server-side search of public posts.
Photos, post identifiers, moderation decisions and print jobs belong to a specific account and event. PrintStation stores its jobs and, if saving is enabled, separate copies on the customer's computer. Windows queue status is not proof of physical printing.
Storage and processors
The application and database are hosted on Timeweb; cloud images are stored in private Yandex Object Storage. Timeweb SMTP sends system emails and YooKassa processes payments. PhotoBaker stores payment identifiers and statuses, amounts and access periods, but not bank card numbers, CVV or bank verification codes.
New cloud photos and layouts are deleted 24 hours after the event ends. Earlier events retain the date displayed in the dashboard. History, statistics and templates remain in the account until the relevant event is deleted or an account deletion request is processed. Account data and service records are not automatically deleted when paid access expires. Payment records are stored separately from photos and are not deleted during event cleanup; deletion requests are assessed against mandatory retention requirements. Customers manage their own local copies. Separate routine photo backups are not enabled.
Emails, access and requests
Email verification, recovery, payment and expiry notifications are system messages and do not imply consent to advertising. One-time links expire. Session cookies are required for sign-in; a session lasts 30 days and signing out ends the current session. Private photos and another account's data are unavailable without authorisation.
System emails are sent from no-reply@photobaker.su. Contact support@photobaker.su for assistance. Deletion procedure: data deletion request. Support email: support@photobaker.su. Social media posts must be deleted by their owner on the social platform itself. The English documents for Meta remain available at their existing addresses.
Optional analytics on public pages
If the site owner has configured counters and you allow analytics, the home and PrintStation pages use Google Analytics 4 (Google) and/or Yandex Metrica (Yandex) to measure visits. Their scripts do not load before permission or after refusal. Analytics is disabled if counter identifiers are not configured.
Counters may receive your IP address and technical browser and device information, and create their own cookies and visit identifiers. In the explicit page-view event, PhotoBaker sends a cleaned public page URL with permitted marketing tags, without arbitrary parameters or a hash, and a predefined title. Names, emails, form fields, photos, event hashtags, account and payment data are not sent in analytics events. Counters are not installed in the dashboard, on sign-in or recovery pages, in the API or on this privacy page. After consent, visits through parameterised links are also counted. Before counters load, the browser address is cleaned: only permitted utm_source, utm_medium and utm_campaign values and a numeric yclid are retained. Arbitrary values, utm_term, utm_content and other parameters are removed. The referrer is sent only as a domain with its protocol, without its path, query or hash. Counters do not start with an unknown hash.
The integration does not enable advertising signals, session recordings, click maps, automatic link or form tracking, or e-commerce tracking. PhotoBaker explicitly sends a public page-view event; providers may add technical session events such as a first visit or session start. This integration does not send PhotoBaker registration or purchase events. The owner must disable additional automatic features in the providers' dashboards when connecting them.
Your choice is stored in this browser's localStorage under photobaker.analytics-consent.v1: the setting version, permission or refusal and the modification time. It is not a user identifier. Refusing does not limit PhotoBaker, and you can change your choice in Analytics settings. When you withdraw consent, the site saves your refusal, stops the counters, attempts to remove accessible analytics cookies and reloads the page. Requests already sent or in transit cannot be recalled; the site cannot remove another domain's cookies itself. Clearing browser data resets your saved choice.
Provider processing is described in their policies: Google Privacy Policy and Yandex Privacy Policy. Contact the support address above about PhotoBaker data processing and deletion.
Analytics settings
Permission is optional. Refusing does not prevent use of the service. Your choice applies in this browser.