Last updated: 10/7/2026
The operator processing personal data is the Sandoria platform. Contact address: info@sandoria.org. All requests related to the processing of personal data should be sent to this email address.
The following categories of personal data are processed: first name, last name, email address, technical account identifiers, and sandplay therapy session data (session metadata, notes, screenshots, placement of figures), as well as information about clients added by the psychologist.
Personal data is processed for user registration and authentication, account management, conducting and persisting therapeutic sessions, communication with session participants, analytics, and service-related communications about the platform.
The legal basis for processing is this consent, granted in accordance with Article 9 of Russian Federal Law No. 152-FZ on Personal Data.
Personal data is processed for the entire lifetime of the account and retained for no longer than three years from the date of a confirmed account deletion request, unless a different period is established by applicable law.
Supabase Inc. infrastructure (database hosting, authentication, file storage) is used to operate the platform. No personal data is transferred to other third parties, except where directly required by applicable law.
The user has the right to access, rectify, block or delete their personal data, restrict processing, port the data, and withdraw this consent. These rights are exercised by submitting a written request to the operator's contact address.
Consent may be withdrawn at any time by sending a written request to info@sandoria.org. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal was received. After consent is withdrawn, the account and associated data are deleted within the established timeframes.
For all questions related to the processing of personal data, please contact info@sandoria.org.