Privacy Policy

Last updated: October 2026

Information We Collect

When you create an account, we collect your name, email address, phone number and password. Your password is hashed immediately using bcrypt and is never stored in plain text. When you use our contact form, we collect the information you provide including your name, email and message content.

How We Use Your Information

We use the information we collect to create and manage your account, verify that you are 18 or older, log you in and maintain your session, reply to messages sent through our contact form, and protect the security of our site and users. We do not sell, rent or share your personal data with third parties for marketing purposes.

Fully Safe & Server Based

Rozh Soft is built on a fully server-based architecture. All account data, authentication and form processing happens on our secure server. No sensitive data is ever exposed to the client side or stored in browser-accessible databases.

• Encrypted data storage — all personal data is stored in protected server-side files that are not accessible from the web
• Secure bcrypt authentication — passwords are hashed using industry-standard bcrypt before storage
• HTTP-only secure session cookies — your session cookie (rs_sid) is httponly and secure, meaning it cannot be read by JavaScript and is only sent over HTTPS
• No payment data — we never collect credit card numbers, bank details or any payment information because Rozh Soft is completely free
• Server-side validation — all form submissions are validated and sanitised on the server, with rate limiting to prevent brute-force attacks
• Zero third-party data sharing — your personal data is never sold, rented or shared with any third party

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. All data transmission uses HTTPS encryption. Login attempts are rate-limited to prevent brute-force attacks (5 attempts, then a 15-minute lockout).

Your Rights

Under UK GDPR, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data. You can delete your account at any time from your account page, which will remove your personal data from our systems.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use a minimal number of strictly necessary cookies to keep the site running. For full details, please see our Cookie Policy.