Privacy Policy
Revision of 04.10.2026.
This Policy describes what data Shanraq.org collects and how we handle it, in accordance with the legislation of the Republic of Kazakhstan.
1. General Provisions
The operator of personal data is Qazna Technologies LLP, BIN 251040024862, Kostanay reg., Rudny, Kachar, Mkr. 2. Contact for enquiries: shanirak.org@gmail.com. Processing is carried out in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Its Protection”, the Law of the Republic of Kazakhstan “On Online Platforms and Online Advertising”, and other applicable legislation. The Policy is available before registration is completed; by registering, you consent to the processing of data on the conditions set out herein.
2. What Data We Collect
- Account data: email address; for authors — a mobile phone number (to verify identity) and a first and last name (the byline on articles).
- Content: articles, comments, listings, uploaded images.
- Place: the region, city, or town you choose yourself from a reference list. It is a choice from a list, not a determination of your location: we do not use GPS and do not derive coordinates from your IP. The place is used to show you local messages, and you can change or clear it in your profile.
- Organisation data (if you apply to publish on its behalf): name, kind, business identification number, website, and territory. The name of a verified organisation is shown publicly next to your own.
- Contacts in listings: a phone number or email that you provide yourself.
- Technical data: IP address, device and browser type, access logs — for security and diagnostics.
Uploaded images are re-encoded, which removes EXIF metadata (including geolocation) for your safety.
3. Purposes of Processing
Data is used only for the operation of the Platform: authentication and account protection; identification of authors; publication of content in three languages; showing material for your place; moderation and fraud prevention; connecting buyer and seller; responding to requests; and complying with legal requirements.
4. Legal Basis and Consent
The basis for processing is your consent, as well as the performance of a contract (the Terms) and legal requirements. Consent is recorded at registration, specifying the operator, the list of data, the purposes, the term, and the conditions of transfer; we retain a record of consent (document, version, time, channel). You may withdraw consent; a withdrawal is reviewed within the period established by law (as a general rule, within 15 business days), unless this is contrary to the law.
5. Storage and Localization
Personal data is stored in databases located within the territory of the Republic of Kazakhstan. Passwords are stored only as an irreversible hash. Data is stored for as long as the account exists and for as long as required by the purposes of processing or the law. Identification data required for publication is stored for the term of the Terms and for the period established by law after their termination.
6. Transfer to Third Parties and Cross-Border Transfer
We do not sell personal data. Transfer is possible to providers of necessary services (for example, sending emails and SMS) to the extent needed to provide them, and to authorized bodies in the cases provided for by law. Cross-border transfer is carried out only where proper protection is ensured and where there are grounds provided for by law.
7. Your Rights
- to obtain information about the processing of your data and access to it;
- to demand the correction of inaccurate data and the deletion of unlawfully obtained data;
- to withdraw consent and request deletion of your account;
- to appeal the operator’s actions, including to the authorized body.
Send requests through the support page.
8. Security and Breach Notification
We apply organizational and technical protection measures (password hashing, access restriction, protection against request forgery, security headers, rate limiting of login attempts). If unauthorized access to personal data is detected, we notify the authorized body within the period established by law (as a general rule, within one business day).
9. Cookies and Analytics
We use technically necessary cookies – for the login session, the chosen language, and your time zone, so that times on the charts are shown by your clock rather than ours – and our own traffic analytics.
Why we count. To show advertisers the size and shape of the audience, and to see what is read. Without those figures the advertising does not sell, and without that the site does not run.
What is counted. A view is recorded only after the page has appeared in a visible browser tab. Views from one browser remain one visit until there has been 30 minutes without activity; the browser keeps a technical visit cookie and the database stores only its irreversible daily HMAC. Hosts, visitors, visits and views are split between Kazakhstan and the rest of the world and between mobile and other devices. These aggregate figures are shown openly to everyone on the Analytics page.
We also count book and excerpt openings, scroll depth, visible impressions and clicks on individual advertisements in aggregate. These events do not prove reading, are not linked to an individual, and are not shared with advertisers as a person’s activity history.
How the anonymous part works. A visitor who is not signed in is counted under an anonymous identifier, derived from the address and the browser string with a key that is generated afresh every day; the address itself is never stored anywhere. Yesterday’s key cannot be recovered, so the same signed-out visitor on Monday and on Tuesday yields two unrelated values.
For registered users, we retain the articles, courses and lessons viewed, reading time and exercise results. Administrators can use this history to analyze interests and learning progress; it is not shared with advertisers and is deleted with the account.
The official ZERO.kz JavaScript counter runs on public pages. It measures traffic independently of us so that readers and advertisers can verify our figures through an external service. When a page opens, the browser sends ZERO.kz the full page address and title, referrer, visit time, IP address, browser and device details, screen size, language and time zone, together with anonymous visitor and session identifiers; ZERO.kz may store its own cookies. These data allow pages, visitors, visits and traffic sources to be counted separately. The counter is disabled in the administration panel, account area, editor, sign-in, registration and account-recovery pages, and service forms. ZERO.kz processes the information it receives as an independent external service. We do not conduct targeted advertising based on race, ethnicity, political views, biometric data, or health data.
10. Processing with the Help of AI
AI is used to screen listings and articles for rule violations; it processes only the text of the material, to the extent necessary for that task. AI does not read comments — readers rate them. Automatic translation is switched off: the author writes the versions in all three languages. Materials of the AI columnist are clearly marked and closed to search engines. We do not make decisions of significance to the user solely automatically, without the possibility of recourse to a human.
11. Changes to the Policy
The Policy may be updated; material changes are published on the Platform with the date of the revision indicated. Where necessary, new consent is requested.
12. Contacts and Regulator
For questions about data processing, contact us through the support page. The authorized body in the field of personal data protection is the Ministry of Digital Development, Innovations and Aerospace Industry of the Republic of Kazakhstan.