Privacy policy

1. Who processes the data

Before public registration opens, the Roza Book project administration in Ukraine is responsible for the site and data processing. For data requests, use the “Contact” page. Once domain email is connected, [email protected] will be listed here.

2. What data we collect

• When you register: forum name, email, password (stored only in encrypted form; we cannot see the password itself), city or region — if you provided one. Optionally, in your profile: a photo (avatar), a few words “about me” and a climate zone. When you sign in with Google: your name, email and the internal number of your Google account.
• What you publish: posts, photos, “Helpful / Not helpful” ratings, complaints.
• Technical data: the IP address is used to protect the forum and contact form from spam and to protect sign-in against password guessing; a sign-in cookie, so that the site remembers you are signed in.
• Browser settings: text size and “My climate” are stored only in your browser and are not sent to the server. The chosen language is also stored in your browser; if you submit an enquiry using the form, its language is sent along with it. “My roses” (hearts) are also stored in the browser, and if you are signed in, in your account as well: they are shown on your gardener page as “Roses in the garden”.

Enquiries through the form

You can use the form on the “Contact” page without registering. We store the name or pseudonym, email and message text you provide, together with the language, address of the page used for the enquiry and the time it was received.

These details are available to the Roza Book administrators so they can process your enquiry and possibly contact you at the email provided. The message is stored in the site’s private inbox and is not published on the website. The form does not automatically send an email.

To protect the form from spam, the IP address is used to limit the frequency of requests.

There are no advertising or analytics counters on the site.

3. Why we use it

• so that you can sign in, write on the forum and see notifications about replies on the site (later, also emails to your email address);
• so that your posts and photos can be shown on the site (see Terms of use, section 4);
• to protect the site from spam, abuse and hacking.

For registration and use of the forum, the legal basis is your consent given at registration and the performance of the terms of use.

4. Who else can see the data

• Other visitors can see your gardener page: name, profile photo, city, climate zone and “about me” (if you provided them), the roses in your garden, posts and photos. No one can see your email except the administration.
• Cloudflare: protects the site and speeds up its operation; all requests to the site pass through it.
• The hosting provider on whose server the site runs.
• Google: if you sign in with Google. In addition, the site's fonts are loaded from the Google Fonts service, so Google sees your browser's IP address.
• YouTube: if a post contains a link to a video, the preview image is loaded from the YouTube server, and the video itself only after you click on it (via youtube-nocookie.com). YouTube then sees your browser's IP address.
• The automatic translation service Anthropic: receives the text of a post when someone clicks “Translate”. Your name and email are not passed to it.

We do not sell your data or pass it on for advertising.

5. How long we keep it

Account data is kept for as long as the account exists. After the account is deleted, we delete the email, password, city, profile photo, “about me”, climate zone and the list of roses in the garden within 30 days; posts and photos may remain on the site without your name. The server's technical logs are kept for no longer than 30 days.

The enquiry is not linked to an account. Marking it as processed does not delete the message or email address. The current version of the site does not include automatic deletion of enquiries.

6. Your rights

You may ask to see or correct your data, delete your account, or withdraw consent. Until domain email is connected, use the “Contact” page and include the address used for registration; we will reply within 30 days. Afterwards, use [email protected]. You may also contact your country’s data protection authority.

7. Children

Registration is from the age of 16. If we find out that an account was created by a younger child, we will delete it.

8. Changes

We may update this policy. The new version takes effect from the moment it is published on this page.

Version of 04.11.2026.