Privacy Policy

Last updated: 25 August 2026

1. General provisions

This Privacy Policy sets out how personal data is processed and protected across the OrdenX products: the web platform at ordenx.ru and ordenx.com (the “Platform”) and the OrdenX Judge desktop application used to score competitions (“OrdenX Judge”). Together, the “Products”.

The data controller is Vladimir Alekseevich Ivanov, an individual entrepreneur registered in the Russian Federation (OGRNIP 324750000046810, INN 753707002016, registered on 02.10.2024, address: 672030, Zabaykalsky Krai, Chita, 5th microdistrict, 37, apt. 18, Russian Federation). For any question about data processing, contact [email protected].

The Policy covers both Products because an athlete's data entered on the Platform is used when a bout is scored and returns to the Platform as results. Sections that apply to only one Product are marked as such.

2. What data we collect

Account data: email address, the password as an irreversible hash, and the role held on the Platform.

Athlete data: surname, first name, patronymic, date of birth, weight, height, country, region, club and federation affiliation, profile photograph, sporting results and bout history.

Data entered by a coach: a club coach may create an athlete record and enter the data listed above. Where the athlete is a minor, the coach confirms that consent of a parent or legal guardian has been obtained, and that confirmation is recorded together with the person who gave it and the date.

Technical data: IP address, browser and device information, and service access logs. Used to operate, diagnose and protect the service from abuse.

Analytics data: collected only with your consent — see “Cookies and analytics”.

OrdenX Judge licence data: licensee details, federation name, the serial number of the device the licence is bound to, the term of the licence and activation records.

Files: images and documents you upload, including tournament documents.

3. Purposes and legal bases

Registering and identifying users and providing access to the Products — on the basis of our contract with you (these Terms of Use).

Organising and running tournaments, generating brackets, scoring, calculating ratings and publishing results — on the basis of the contract and of our legitimate interest in maintaining sporting records.

Processing a minor's data — on the basis of the consent of a parent or legal guardian.

Website usage analytics — solely on the basis of your consent, which you may withdraw at any time.

Sending service notifications (address confirmation, password recovery) — on the basis of the contract.

Compliance with legal obligations.

4. Retention periods

Account and profile data is kept while the account exists and is deleted within 30 days of the account being deleted.

Sporting results, protocols and bout history are kept indefinitely as part of the official competition record, including after an account is deleted. Following deletion of an account, such records are de-identified as far as is possible without destroying the meaning of the sporting result.

Consent records (the fact, the date and the document version) are kept for the whole processing period and for three years after it ends — they are the evidence that the processing was lawful.

Session tokens are kept for no more than 7 days from last use.

Technical logs are kept for no more than 12 months.

OrdenX Judge licence data is kept for the term of the licence and for three years after it expires.

5. Who we share data with

We do not sell personal data and do not pass it to third parties for their own purposes.

We use service providers that process data on our instructions and only as far as the service requires: hosting and server infrastructure; S3-compatible object storage for uploaded images and documents; an email service provider for delivering service messages; and Yandex.Metrica for analytics, only where you have consented.

Tournament organisers receive access to the data of entered participants to the extent needed to run the competition: surname, first name, date of birth, weight category, club and region.

Data may be disclosed to competent authorities where the law requires it.

6. Cookies and analytics

Strictly necessary cookies keep you signed in and maintain your session. The service cannot work without them and they do not require consent.

Yandex.Metrica analytics cookies are loaded only after you press “Accept” in the banner. Before that the counter is not loaded and no request is made to it. If you press “Decline”, or make no choice at all, analytics does not run and the Platform remains fully functional.

Session recording (Webvisor) is switched off: we do not record pointer movement, scrolling or what you type into forms.

You may withdraw consent at any time — the “Cookie settings” link at the foot of the site brings the banner back so the choice can be made again. On withdrawal we delete the analytics counter's cookies that are reachable from the browser and stop loading it on subsequent visits.

7. OrdenX Judge and result synchronisation

OrdenX Judge is installed on the organiser's equipment and works with or without an internet connection. The application receives entered participants and bout brackets from the Platform and, once bouts have been held, sends back results, judges' decisions and protocols.

A judging device is paired with a tournament using a one-time code valid for a limited period. A paired device is issued a session token bound to that tournament; it gives no access to any other tournament's data.

To operate the licence, the application reads the device serial number and sends it to the Platform on activation. We use it solely to control the number of devices a licence covers.

As regards data the organiser enters themselves during their own competition, the organiser acts as an independent controller and OrdenX acts as a processor on their instructions.

8. Public profiles and search indexing

Profiles of adult users (18 and over) are public and may be indexed by search engines. Profile information — including first name, surname, club affiliation, region, sporting results and photograph — may appear in search results and in link previews shared through messengers and social networks.

Profiles of users under 18 are closed to search engine indexing and are excluded from the sitemap. Minors' personal data is not included in link previews shared through messengers and social networks. Where no date of birth is recorded, the profile is treated as a minor's.

Any user may request that their profile be excluded from indexing by writing to [email protected].

9. Processing of minors' data

Minors' personal data is processed with the consent of their parents or legal guardians, in accordance with Federal Law No. 152-FZ “On Personal Data”.

Consent is requested at the point where the date of birth given shows the user is under 18: from the account holder when a profile is completed, and from the coach when a coach creates an athlete record. The fact of consent, the date and the person who confirmed it are recorded. Without that confirmation the data is not saved.

Additional measures apply to minors: their profiles are closed to search engine indexing, excluded from the sitemap, carry no personal data in link previews, and are de-identified in demonstration material.

If you become aware that a child's data has been entered without a guardian's consent, write to [email protected] and we will delete it.

10. Your rights

You have the right to obtain information about the data processed about you, to have it corrected, blocked or deleted, to withdraw consent, and to object to processing.

Withdrawing consent to the processing of personal data entails deletion of the account, because the service cannot be provided without that data. Sporting results are retained to the extent described under “Retention periods”.

Send requests to [email protected]. We respond within 30 days. We may ask you to verify your identity where the request does not make clear whose data is concerned.

11. Users in the EEA and the United Kingdom

If you are located in the European Economic Area or the United Kingdom, the GDPR and UK GDPR apply to the processing of your data. The legal bases are set out under “Purposes and legal bases”.

In addition to the rights listed above, you have the right to data portability, the right to restriction of processing, and the right to lodge a complaint with the supervisory authority where you live.

The Platform's servers are located in the Russian Federation, so transferring your data is a transfer to a third country for which the European Commission has not issued an adequacy decision. The transfer is made on the basis of your explicit consent, given at registration after you have been informed of the risks involved.

Use [email protected] to exercise any of these rights.

12. Data security

Passwords are stored only as irreversible hashes. Access to data is separated by role, and operations on objects belonging to others are checked on the server.

Connections to the Platform are protected with TLS. Session tokens are carried in cookies that JavaScript cannot read.

We apply organisational and technical measures to prevent unauthorised access to, alteration of and destruction of data, though no service can guarantee absolute security.

13. Changes to this Policy

We may amend this Policy. The current version is always available on this page and the date of the last update is shown at the top.

We notify registered users of material changes by email. The version of the document you agreed to is stored together with the date of your agreement.

14. Contact

For any question about the processing of personal data, and to exercise your rights: [email protected].