Privacy Policy

Last updated: September 29, 2026

1. About this policy

1.1. This policy explains how TSB ("we", "us") handles the personal data of visitors to rumto.com (the "site").

1.2. The site is informational. It describes the Rumto service, publishes help articles and, on its Russian-language pages, answers questions in a chat window. Sign-up, the wallet, cards, payments and support for transactions are handled in the Rumto app (app.rumto.com) and its Telegram bot under the app's own terms and privacy policy. Data you enter in the app or its bot is not covered by this policy.

1.3. The site is intended for people aged 18 and over.

2. Data we collect

2.1. Chat window (Russian-language pages only). To ask a question, you give your name and email address. We store them together with a record of your consent to data processing, your consent to marketing emails if you gave it (with the date and wording), the page where you opened the chat, and your questions.

2.2. Technical data. Our hosting provider and the service that runs the chat record your IP address, browser and device type, and the time of your visit. They need this to run the site and protect it from abuse.

2.3. We never ask for passwords, codes from emails or text messages, CVV codes, full card numbers, seed phrases or wallet keys.

3. Why we use your data

  • To answer your questions in the chat window. Legal basis: your consent.
  • To send emails with a promo code and Rumto offers, only if you separately agreed to receive them (section 5).
  • To protect the site from abuse and improve answers to common questions. Legal basis: our legitimate interest.
  • To understand how visitors use the site and improve it with Google Analytics, and with Yandex Metrica on Russian-language pages, only if you accept analytics cookies (section 8).
  • To comply with the law.

4. Who we share data with

We do not sell personal data. We share it only with the services the site cannot work without:

  • our hosting provider;
  • the service that runs the chat window and stores contact details (Cloudflare, Inc., USA);
  • the service that helps the chat bot write answers (OpenAI, USA). It receives only the text of your question and a few previous messages, never your name or email;
  • the email service we use to send messages to people who subscribed;
  • analytics services: Google (Google Analytics, Ireland and USA) and, on Russian-language pages, Yandex LLC (Yandex Metrica, Russia), only if you accept analytics cookies;
  • public authorities, only when the law requires it.

These companies may process data outside your country, including in the USA. When we transfer data of people in the EU, we rely on the safeguards provided by the GDPR, such as the European Commission's standard contractual clauses.

5. Marketing emails

5.1. Emails with a promo code and Rumto offers (one or two a month) are sent only to people who opted in separately in the chat window. Agreeing to data processing so that we can answer your question does not sign you up for these emails.

5.2. You can unsubscribe at any time by replying "Unsubscribe" to any of our emails or writing to support@rumto.com.

6. How long we keep data

  • Name, email and questions of subscribers: for as long as the consent is valid.
  • Name, email and questions of people who did not subscribe or who unsubscribed: one year after their last question in the chat.
  • Questions the chat could not answer (without name or email): 90 days.

After that, the data is deleted.

7. Your rights

You can ask what data we hold about you, get a copy, correct or delete it, restrict or object to its processing, and withdraw your consent at any time. Send requests to support@rumto.com and we will reply within 30 days. You can also complain to the data protection authority where you live (in Sweden, Integritetsskyddsmyndigheten, IMY).

8. Cookies and browser storage

8.1. On your first visit, the site asks for your consent to cookies. The "Necessary only" button is as easy to use as "Accept all", and you can change your choice at any time with the "Cookie settings" link at the bottom of the page. Fonts are served from our own server, without requests to third parties.

8.2. Necessary cookies are always on because the site cannot work without them:

  • hc_js_gate: a cookie our hosting provider uses to block automated requests (the "Checking your browser" check);
  • rumto_consent: stores your choice in the consent window for 12 months;
  • rumto-chat-lead: a browser storage (localStorage) entry created only after you submit the chat form. It keeps your name and contact ID so the chat does not ask for them again, and stays until you clear the site data in your browser.

8.3. Analytics cookies are used only with your consent:

  • Google Analytics (Google): the _ga and _ga_* cookies. Aggregated visit statistics; IP addresses are truncated.
  • Yandex Metrica (Yandex LLC), on Russian-language pages only: the _ym_uid, _ym_d, _ym_isad and similar cookies. They show which pages people visit, where visitors come from and what works well on the site. Session recording (Webvisor) is not used.

The services set their own retention periods: usually up to 2 years for Google Analytics and up to 1 year for Yandex Metrica. If you do not consent, or withdraw consent, these scripts do not run.

8.4. Advertising cookies are not used on the site at the moment. If we add advertising services, they will run only with your consent, and we will update this section.

9. YouTube and YouTube API Services

9.1. We use YouTube API Services to manage the Rumto channel on YouTube. Through them, the Rumto team uploads videos to its channel, edits their titles, descriptions, thumbnails and visibility settings, reads comments on Rumto videos and replies to them. This API access is used only for Rumto's own channel.

9.2. By using YouTube, you agree to the YouTube Terms of Service. Google's handling of personal data is described in the Google Privacy Policy.

9.3. Data we access through the API: information about the Rumto channel and its videos (titles, descriptions, thumbnails, visibility settings and statistics), and comments on Rumto videos, including the comment text, the author's public YouTube name and a link to their channel. We do not access any other YouTube user data through the API.

9.4. How we use and store it: we use this data only to manage the channel's videos and reply to comments. We do not sell it, share it with third parties or use it for advertising. Data received through the API is not saved in our databases; it is used at the time of the request. The only thing we keep is the access key for the Rumto channel (a Google authorization token), stored on the team's work computer and available only to the people who run the channel. If we ever need to keep a copy of the data, we will refresh or delete it within 30 days.

9.5. Deleting data and revoking access: you can delete your own comment on YouTube. To ask us to delete data about you obtained through the YouTube API, write to support@rumto.com. You can revoke an app's access to your Google account on the Google security settings page: https://security.google.com/settings/security/permissions.

10. Security

Connections to the site are encrypted (HTTPS), and only the people who need contact details for their work can access them. We take reasonable security measures and will report a data breach where the law requires it.

11. Changes

We publish each new version of this policy on this page with its date. We will tell subscribers about significant changes.

12. Contact

TSB
Email: support@rumto.com