Privacy Notice
Last updated
This notice says what Дэвтэр (devter.gege.mn) keeps about you, why, who else handles it, for how long, and what you can do about it. Дэвтэр is run by L'Atelier Gege LLC (Лателиэр Гэгэ ХХК), a company of Mongolia, which is responsible for your information. Write to privacy@gege.mn with any question or request.
The short version: we keep what we need to sign you in, show what you publish, deliver the messages you write to one another, and keep the site safe. We count visits with Google Analytics, asking you first where the law asks it, and tell each writer how many people read them, never who. We show no advertising and sell nothing about you.
This notice is written in English.
What we keep
Your account. Your email address, which you sign in with. The name, handle, photo, cover, About and links you give your page. The aimag you pin as yours on the weather's map, if you do.
What you write and do. Your notes, replies, posts and drafts, with their earlier versions, the pictures you add and their descriptions, and your tags. Whom you follow, what you like and repost, whom you mute or block, what you report, and which writers you get by email.
Your messages. The messages you write to other people and they write to you, whom each conversation is with, when each message was sent, and what you have read. See Personal messages below.
When you write. The network address (IP address) your browser had, saved with each change you make, so that our staff can deal with abuse. It is erased after 90 days.
If you subscribe without an account. The email address you give, and which writer it is for.
What every website handles. When you open a page, your browser sends your IP address and details such as its kind and language. We use them to answer, and to count requests so that one source cannot flood the site; those counts are kept under a scrambled key for a few hours. Our host keeps technical logs of requests and errors for up to 7 days.
How many read. When a post, a note or the front of a page has been shown in your browser for five seconds, it counts one view of it for that day. So that each reader is counted once a day, we make a scrambled key from your account, or, if you are not signed in, from your IP address and your browser's details together; the key is erased once that day is over. The counts say nothing of who read: a writer sees only how many. A writer's reading of their own page on Дэвтэр is not counted; on their own domain, where nobody is signed in, it is counted as anyone's.
In your browser. Cookies that the site needs to work:
__Host-gp_sessionkeeps you signed in, for up to 30 days;__Host-gp_handleholds your place while you are signing in;gp-readerremembers how you like to read (light or dark, and the text size), for a year;gp-homeremembers which parts of the home page you closed, for a year;gp-placeremembers the aimag you last looked at on the weather's map, or pinned, for a year;gp-analyticsremembers whether you allowed Google Analytics, where we ask, for a year.
And Google Analytics' own, unless you declined it where we ask: _ga and _ga_ followed by letters, which tell one visitor's visits from another's, for up to 2 years.
What you type in the editor is also kept in your browser until it is saved, so that it is not lost if the page closes.
What is public
Everything you publish is public: your notes, replies and posts, your page's name, handle, photo, cover, About and links, what you repost, and how many people follow you. Anyone can read it without signing in, search engines can find it, and a link to it shows a preview with its words and pictures. Your page and its feed can be read by other programs.
Not public: your email address, your drafts, your messages, whom you mute or block, and what you report. Whom you follow and what you like are not listed for others to see, but the writer you follow, or whose writing you like, is told it was you; everyone else sees only how many. A writer sees how many people get their posts by email, never who they are.
Why we use it
- To give you the service you asked for: to sign you in, keep your page, publish your writing, show you the people you follow, tell you when someone answers you, and send the mail you asked for.
- To know how Дэвтэр is used, and to tell writers how many people read them.
- To keep Дэвтэр safe: to stop spam and abuse, act on reports, and enforce our Terms of Use.
- To meet what the law asks of us.
We send email to subscribers only after they confirm the first mail, and they can stop it at any time.
Who else handles it
We use a few companies to run Дэвтэр. They handle your information on our behalf, under their own security and privacy commitments, and their servers may be outside Mongolia.
- Cloudflare hosts the site, its database, your messages and its pictures, protects it from attack, and checks at sign-in and when you subscribe that you are a person and not a program (Turnstile).
- Amazon Web Services delivers our email, which we send through Ray, our own mail service. A record of each mail sent (to whom, and when) is kept for 30 days. A mail about unread messages names who wrote and how many messages wait, never their words.
- KLIPY (Kikliko, Inc., in the United States) answers a search for a GIF and serves the GIFs, where Messages offer GIF search. Your browser asks KLIPY itself, and only once you press, so KLIPY receives your IP address with what you search, under KLIPY's privacy policy.
- Google measures visits with Google Analytics: which pages are opened, from which country and city, on what kind of device, and from which site you came. It receives your IP address to tell where you are, and does not keep it. We have turned off its advertising features. In the European Union, the rest of the European Economic Area, the United Kingdom and Switzerland, and wherever we cannot tell where you are, it runs only once you allow it. It does not run on a writer's own domain, nor on the pages that confirm or stop an email subscription, whose addresses hold a key.
When you add a link, our server fetches that page to make its preview, and when you add a picture from Wikimedia Commons, our server fetches it. When a message holds a link to one of the sites whose links show a card, our server fetches the card, and its picture once, and shows it to you from Дэвтэр. Those sites see our server, not you. A GIF is the exception: it comes from KLIPY, above, to your browser, and only when you press.
Our staff can see account email addresses, and the network addresses saved with changes, only to run the site and deal with abuse. They read a message only when one of the two people in its conversation reports it (see below). We give information to authorities only when Mongolian law requires it, and messages only on a prosecutor's permission or a court's order.
How long we keep it
- Your account and what you publish: until you delete them.
- Your messages: until you delete them, or your account. The other person's messages in your conversations are theirs, and stay until they delete them.
- The copy of messages a report keeps: until our staff deal with the report, and 90 days after.
- The record of when you agreed to the notice of messages, or withdrew, while we asked it, in November 2026: as long as our staff's records.
- Network addresses saved with your changes: 90 days.
- Request counts: a few hours. Our host's logs: up to 7 days.
- How many read: the counts of each day are kept; the scrambled key that counts you once, until that day is over.
- Google Analytics: the details of visits, up to 14 months; its reports add them up and hold no one's details.
- A subscription by email: until you stop it. One that is never confirmed is erased after 7 days.
- Records of mail sent: 30 days.
- Backups: our database can be restored to any moment of the last 30 days, and we also keep copies of it, and of the files we keep, the pictures of messages among them, for safety. Something you deleted, and the network addresses saved with your changes, stay in a copy made before then for as long as that copy is kept.
Your choices and rights
- See and correct. Your page's settings hold what you gave us, and you can change it.
- Download. Your settings have a download of everything you wrote. Your settings of messages have a download of every conversation you are in, both sides of each, in one or more files.
- Stop email. Every mail has a link to stop it; signed in,
/settings/maillists them all. - Analytics. Where we ask, this notice asks you again, and your new answer stands from then on; a no also removes Google Analytics' cookies. A no holds wherever you read from. Anywhere, your browser's settings, or Google's own opt-out add-on, can stop Google Analytics.
- Messages. In your settings of messages you choose who may begin a conversation with you, and can let no one (see below).
- Delete. You can delete your account from your settings (see below).
- Ask us. Write to privacy@gege.mn to ask what we hold about you, to correct or erase it, or to object to how we use it.
Personal messages
You can write to another person on Дэвтэр in a conversation that only the two of you read. By using Messages, and by going on using them after this section changes, you accept how they work, as it says; nothing asks you to agree first. How messages work, linked from Messages and from your settings of messages, says the same in short.
- What we keep, and why. Your messages and those written to you, the pictures in them, whom each conversation is with, when each message was sent, whom a message mentions, what you have read, and your settings of messages: who may begin a conversation with you, whether we mail you about unread messages, and which conversations you mute. We keep them only to show your conversations to the two people in them, to tell you when a message waits, and to deal with reports.
- Where. On Cloudflare's servers, outside Mongolia. The mail about unread messages is delivered by Amazon Web Services, also outside Mongolia; it names who wrote and how many messages wait, and never holds their words.
- Pictures. A picture you send is kept as a message is, and only the two of you can open it. Before we keep it, we remove what its file says of where and when it was taken and of the camera or phone, and keep only which way up it was held. A picture you take out before sending is erased at once; one you chose but did not send, within a day. A deleted message's pictures are erased within a day, unless a report's copy holds them.
- Cards of links. When a message holds a link to one of a short list of well-known sites, our server fetches the link's title and picture to show a card, and keeps it for a week, for anyone who sends the same link. The site sees our server, never you or the person you write to.
- GIFs. Where Messages offer GIF search, opening it and what you search there go from your browser straight to KLIPY (Kikliko, Inc., in the United States), with your IP address, under KLIPY's privacy policy; so does a GIF you choose to load. A GIF sent to you stays a box saying "GIF · KLIPY" until you press it: nothing goes to KLIPY until you press. A message keeps which GIF it is, by KLIPY's address for it, and we keep no copy of its file.
- Not end-to-end encrypted. Messages travel over an encrypted connection, but they are not end-to-end encrypted: our servers can read them.
- Who reads them. The two people in the conversation. Our staff read a message only when one of the two reports it: they see that message and up to ten before it, from both people, copied when it was reported, and each time a member of staff opens that copy is recorded. Nobody at Дэвтэр browses conversations, and no page lists them for our staff. Whoever is reported is never told who reported them.
- Authorities. We give messages to authorities only on a prosecutor's permission or a court's order, as Mongolian law provides, and we record each time we do. A request from abroad is answered only when it comes through a Mongolian prosecutor or court.
- Stopping messages. In your settings of messages you choose who may begin a conversation with you, and can let no one, and whether we mail you about unread messages. A conversation already begun goes on; blocking someone stops yours with them. To have your messages erased, delete them, or your account, or write to us.
- Reports. A report keeps a copy of the message reported and up to ten before it, with their pictures and the cards of their links, so that deleting a message, or an account, does not hide it from our staff. The copy is kept until our staff deal with the report, and for 90 days after, as evidence; then it is erased.
Deleting your account
Deleting your account is immediate and cannot be undone. It erases your email address, your page's name, photo, cover, About, links and look, the text of everything you wrote (notes, replies, posts, drafts and all their versions, with the network addresses saved with them), your pictures, your follows, likes, reposts, mutes and blocks, your notifications, your email subscriptions and your page's subscribers, how many people read your writing, your own domain's connection, and your messages, with their pictures, whom they mention and your side of each conversation. You are signed out everywhere.
A few things stay:
- your handle, and the handles your page had before, stay held, so that nobody else can sign up with them and pass as you; we may give one to someone with a right to it, as our Terms of Use say;
- the messages other people wrote to you stay theirs, shown beside "Deleted account", and copies that reports kept stay until our staff deal with the report, and 90 days after (see Personal messages);
- what other people wrote in answer to you, or quoting you, stays, and shows that what it answered or quoted was deleted, and when that was written; where others mentioned your handle, the mention stays as plain text;
- our staff's records of what was done on the site, and the reports made by you or about you, stay. What you did yourself is shown as done by a "former editor" with a number, not by your name; records about your page keep its handle;
- the record of when you agreed to the notice of messages, and to which version, or withdrew, while we asked it, stays with our staff's records; it holds no message;
- if you were one of our staff, the changes you made to other people's writing stay as part of it, without the network addresses saved with them.
Copies in our backups stay as long as those backups are kept (see above). A picture that was already shown can still be served for a while from copies kept by our host's network and by browsers. Mail already delivered to your subscribers, and copies that search engines or other sites made while your writing was public, are beyond our reach.
If Дэвтэр changes hands
If L'Atelier Gege LLC sells Дэвтэр, or it passes to another company, your account and what you wrote pass with it, and the new owner must keep to this notice.
Children
You must be at least 16 to have an account, and you need a parent's or guardian's permission if you are under 18. If we learn that an account belongs to someone under 16, we may delete it.
Security
You sign in with a code sent to your email, so there is no password to steal. Everything travels over an encrypted connection, the codes and session keys we keep are stored only as scrambled values, and the pictures you upload are stripped of hidden details such as where they were taken.
Changes to this notice
We may change this notice. The version in force is the one published here, with its date.
Contact
L'Atelier Gege LLC (Лателиэр Гэгэ ХХК), privacy@gege.mn.