MOROKPrivacy Policy
1. General provisions
This policy describes what data IPFB LLC (1207 Delaware Ave #1262, Wilmington, DE 19806, USA; hereinafter “we”) processes when operating the MOROK service: the MOROK app for iPhone and iPad, the website morok.io, the account area panel.morok.io and the service’s servers. Our principle is to keep only what is essential to provide access and record payments.
2. What we do not collect or store
- the addresses of websites and services you access through MOROK, or the content of your traffic;
- the IP addresses from which you connect to the service’s servers (connection logs on the servers are disabled);
- the IP addresses of visitors to the website and the account area — web server logs are disabled (the exceptions are described below);
- bank card details — payment takes place on the payment provider’s side;
- analytics data and advertising trackers — neither the website nor the account area has any; the website morok.io uses no cookies, and the account area uses only those strictly necessary for logging in (see Section 9).
The exceptions are the pages protected against brute force: account login and the subscription page. To prevent login codes and links from being guessed, they temporarily track the IP address the attempts come from: the attempt counter is kept in memory only and is forgotten within one hour at most. If guessing comes from a single address, that address is written to a service log and included in a notification to the administrator.
3. What data we store and why
| Data | Why it is needed |
|---|---|
| The email address the account was created with | Logging in to the app and the account area, identifying the account, making sure the free trial is used only once |
| One-time login code — only while it is valid | Confirming a login with your email address |
| Session cookie set after you log in to the account area (strictly necessary; valid for 30 days or until you log out), and the login session in the MOROK app | Only to keep you signed in to your account |
| Technical account identifier and personal connection link | Connecting your devices to the service |
| Subscription period, whether the free trial has been used, bonus days, the referring account, if any | Recording paid access and bonuses |
| Total traffic volume per account (not broken down by websites or addresses) | Operating the service and planning server load |
| Number of simultaneously connected devices and time of the last connection | Enforcing the limit of 3 devices per account |
| Type and version of the app used to load the connection settings | Helping the user with setup and support requests |
| Payment records: order number, amount, currency, payment method, status, the payment provider’s transaction ID, date | Recording payments, refunds, resolving disputes |
| Log of account operations (granting the free trial, renewal) — without IP addresses | Support and resolving disputes |
| Email address or Telegram username and message text — only if you write to us yourself | Replying to your request |
We process this data to perform our agreement with you (the Terms of Service) and to meet our obligations to record payments.
4. Sharing data with third parties
We do not sell user data and do not share it for advertising. Data is processed by the following parties only to the extent necessary for the service to work:
- Payment provider — accepts payment on its own page and under its own rules; it may ask you for additional data (for example, an email address). From the provider we receive only the order number, amount, currency, payment method and payment status.
- Apple — distributes the MOROK app for iPhone and iPad through the App Store. Downloading and updating the app are governed by Apple’s terms and privacy policy.
- Telegram — carries our support channel @moroksupport if you write to us there; data processing in Telegram is governed by Telegram’s privacy policy.
- Cloudflare — the delivery network through which the account area and subscription links operate. It technically processes the network data of a request in order to deliver the page and protect the service from attacks; we do not receive visit logs from it.
- Hosting providers — provide the servers on which the service runs.
We may disclose data upon a lawful request from competent authorities — only the data we have, as listed in Section 3. We have no information about visited resources or connection IP addresses.
5. Where data is stored
The database of accounts and payments is hosted on servers in the Russian Federation.
6. Retention periods
- Account data is kept for as long as the account exists. At your request, we delete the account and the data associated with it within 30 days.
- Your email address is kept for as long as the account exists and is deleted together with it at your request. A login session is deleted when you log out or after 30 days.
- Payment records are kept for as long as necessary for accounting, refunds and legal requirements, but for no longer than 5 years.
- Correspondence with support is kept no longer than needed to resolve the matter, and for no more than 1 year.
7. Security
Only staff who need data to operate the service have access to it. Administrative interfaces are closed to public access, and data is transmitted only over encrypted channels.
8. Your rights
You can ask what data about you is stored, request that it be corrected or deleted, and withdraw your consent to processing by stopping using the service. Write to us at support@morok.io and include the email address of your account or your order number — we will reply within 30 days. Deleting the account ends access to the service.
9. Website
The website morok.io is static: it uses no visit counters, analytics systems, advertising trackers or cookies.
The account area panel.morok.io uses no cookies except strictly necessary ones: a session cookie that is set after you log in and is used only to keep you signed in (it is deleted when you log out or after 30 days), and a technical cookie that protects the login form against forged requests (valid for up to 2 hours). These cookies are not used for analytics, advertising or tracking.
10. Children
The service is not intended for persons under 18 without the consent of a legal guardian.
11. Changes to this policy
We may update this policy. A new version is published on this page with its date. If the changes expand the range of data collected, we will notify you in advance on the website and by email.
12. Contacts
For questions about data processing: IPFB LLC, 1207 Delaware Ave #1262, Wilmington, DE 19806, USA; support@morok.io.
This English text is a translation of the Russian version, provided for convenience. In case of any discrepancy between the English and Russian versions, the Russian version prevails. Русская версия