Privacy policy
This policy describes how personal data is processed on the website and when you use VRChat Admin Tools.
This is a courtesy translation of the Russian original. If the two differ, the Russian version prevails.
1. Operator
Personal data operator: Грищенко Тихон Сергеевич, INN (Russian taxpayer ID) 637605598112, professional income tax payer. E-mail: vrchatadmintools@gmail.com.
2. What data is processed
- the e-mail address provided when placing an order or contacting support;
- the order number, amount, status and technical payment identifier;
- details of the issued license: term, activation status, Team ID and device binding;
- for the Owner feature: the ID of the VRChat group being connected, the VRChat ID of its owner, the result of checking the code in the owner's profile description (the description text itself is not stored) and the service account's rights in the group;
- team notes about VRChat players: the player's VRChat ID and display name, the tag and note text, change history, cases in the team journal and member lists in the session archive. Only team members see this information; shared publications are visible to all teams with access to them. The team lead can turn on automatic deletion of notes that have not changed for 90, 180 or 365 days;
- anonymous usage statistics of the app: a random installation number created by the app itself (the server stores only its hash), the app version, the key type and the date. The IP address, key, names, VRChat IDs and device data are not included in the statistics. Records are kept for no longer than 180 days. Statistics can be turned off in the app: “Settings” → “Privacy” → “Anonymous launch statistics”;
- the content of support requests and diagnostic information provided by the user;
- technical information about requests to the website and server needed for security and troubleshooting.
The Operator does not receive or store the full bank card number, CVC/CVV or the password to a banking app. This data is processed on the secure side of the payment service.
The translator in the app runs on the user's computer. Text that you translate or send to the VRChat chat is not transferred to the Operator and is not saved by the app. The exception is ready-made phrases that you save yourself: they are stored only on your computer. Microphone audio for voice input is processed only on the user's computer, only while recording is in progress, and is neither saved nor transferred. The app downloads translation models once directly from Mozilla's servers and speech recognition models from Hugging Face. If those addresses are not reachable from your network, the app downloads the same files from the Operator's server (vrchatadmintools.ru/models); the files are verified by checksum. Like any website, these services receive an ordinary network request with an IP address.
Subtitles for other players' speech are turned on by the user separately. While they are on, the app receives system audio (the sound of the default Windows output device, including other players' voices) to recognize English, Chinese or Japanese speech and show its translation into Russian. Windows provides system audio only together with screen capture, so the app formally requests the screen but immediately stops the video stream and does not use the image. Other players' audio and speech are processed only on the user's computer, are not recorded, are not saved to disk and are not transferred to the Operator or third parties. The last 20 recognized phrases are kept only in the app's memory and are deleted when subtitles are turned off. Other players' speech is never sent to the VRChat chat.
3. Purposes and legal grounds for processing
- concluding and performing the contract, confirming payment and issuing the key;
- license activation, prevention of abuse and order recovery;
- user support, diagnostics and bug fixing;
- estimating the number of active installations and versions in use to develop the app;
- compliance with tax, accounting and consumer protection laws;
- protection of the rights and legitimate interests of the Operator and users.
The legal grounds are the conclusion and performance of a contract, the consent of the data subject, the performance of legal obligations and a legitimate interest in keeping the service secure, where applicable.
4. Transfer and engagement of processors
To run the service, data may be processed by the following providers to the extent necessary for the relevant function:
- YooKassa: processing payments via SBP (the Russian Faster Payments System) and refunds;
- a Russian hosting provider: hosting the website, the API and the main order database;
- Google Gmail: sending and receiving e-mail;
- Discord and Telegram: only if the user chooses that support channel.
The use of Gmail may involve a cross-border transfer of the e-mail address and the message content. Such a transfer is carried out only on a legal basis provided by law and in compliance with applicable requirements. The user may contact support through another published channel.
5. Storage and protection
The main information about orders and licenses is stored on a server in the Russian Federation. Data is kept no longer than required by the purposes of processing and the mandatory document retention periods set by law. Once the purpose is achieved, data is deleted, anonymized or kept only where there is a legal basis.
Access control, encryption of secrets, a secure HTTPS connection, backups and operation logging are used. No storage method rules out risk completely, so the amount of data is limited to what is necessary.
6. User rights
The user has the right to request information about processing, correction, blocking or deletion of data, to withdraw consent and to challenge the processing in the manner provided by law. Requests are sent to vrchatadmintools@gmail.com. To protect the data, the Operator may verify the requester's connection to the order.
A VRChat player about whom teams have left notes can request their deletion by writing to vrchatadmintools@gmail.com and stating their VRChat ID. The Operator deletes the notes of all teams, shared publications, change history, cases and mentions in the session archive. In completed operations with a VRChat group, only the ID needed to lift a ban is kept. The Operator may ask the requester to confirm that the account belongs to them, for example by temporarily placing an issued code in their VRChat profile description.
Withdrawing consent does not affect the lawfulness of processing before the withdrawal and does not require deletion of data that the Operator must keep by law or may process on another legal basis.
7. Cookies and policy changes
The public information pages do not use advertising cookies. The server may process technical connection data for security and page delivery. If a payment form is added, the technical mechanisms it uses will be described before it is launched.
The current edition of the policy, in Russian, is published at https://vrchatadmintools.ru/privacy. Material changes apply from the date stated in the new edition.