Privacy Policy
This Privacy Policy defines how data is processed by the IOL Calculator service (iolcalc.ru), which is intended solely for educational and research purposes. The service is not a medical device and is not registered with Roszdravnadzor (the Russian medical-device regulator).
Personal Data
The service does not collect or process personal data within the meaning of Article 3(1) of Federal Law No. 152-FZ of July 27, 2006 “On Personal Data.” The eye biometric parameters entered by the user (axial length, keratometry, anterior chamber depth, etc.) are de-identified numerical values that, without the use of additional information, cannot be attributed to a specific individual (Article 3(9) of Law No. 152-FZ).
The service does not request or store surnames, given names, patronymics, dates of birth, contact details, document data, or any other identifying information. User registration and account creation are not provided.
Calculation Parameters
The Service does not store individual calculation parameters. Biometry, intraocular lens parameters and calculation results are processed in the server’s memory for the duration of the request only and are not written to a database, to disk or to any other storage. Once the response is produced the data are destroyed. Processing is strictly limited to the purpose of the calculation (art. 5 §2 of Federal Law 152-FZ).
Special Categories of Data
The service does not process special categories of personal data within the meaning of Article 10 of Law No. 152-FZ. The entered parameters are not tied to a specific personal data subject and do not make it possible to determine the health status of a particular individual. The data is not retained on the server after the calculation.
User Consent
Before performing a calculation, the user confirms that the entered data is de-identified and cannot identify a specific patient. This confirmation is given by checking the corresponding box in the calculation form. The user is responsible for the de-identification of the entered data. The service is not intended for entering data that could identify an individual.
Because the service does not in fact process personal data (the data is de-identified, is not stored on the server, and users are not identified), formal consent to the processing of personal data under Article 9 of Law No. 152-FZ is not required.
Analytics and Monitoring
A self-hosted analytics system, deployed on the operator's servers within the Russian Federation, is used to analyze the operation of the service. Cookies are not used. Users' IP addresses are irreversibly anonymized and cannot be restored.
The following de-identified metrics are collected:
- device type, browser, operating system;
- country and language;
- URLs of viewed pages;
- de-identified records of performed calculations: IOL model name, manufacturer, lens type, and ranges of biometric parameters (without exact values).
A self-hosted error-monitoring system is used to ensure reliability. The following are recorded: the type of technical error, the source-code file and line, the service version, and the browser type. Biometric parameters, IP addresses, and request contents are not stored.
Detailed analytics and error-monitoring records are kept for a limited period and are deleted automatically. Aggregated statistical metrics (total number of calculations, distributions across ranges) are stored indefinitely, with no ability to reconstruct individual parameters.
Search Engines
The site is registered with search-engine webmaster services (Yandex Webmaster, Google Search Console) to monitor indexing and the site's technical status. These services do not place any client-side scripts, counters, or cookies on the site and do not receive user data or calculation parameters. Their role is limited to crawling the site's public content with search robots and providing the site owner with reports on indexing.
Browser Local Storage
The following stay in the user’s browser: the acceptance mark for the terms of use (24 hours), the list of recently chosen lens models, the pairing session parameters and the values sent from the phone or recognised from a file. While the recognition page is open, the values already typed into the form are kept there so they can be brought back, together with the IOL calculation printout file itself for no longer than ten minutes. These data are not sent to the server and are available only in this browser on this device. The single cookie stores the interface language.
Calculation results are not stored on the server. In the browser, values sent from the phone or recognised from a file are removed with the “Delete” button, when the pairing session ends, automatically within a day, or by clearing the site data.
Data transfer from a phone
To enter biometry from a phone the Service creates a temporary pairing session. The encryption key is generated in the user’s browser, exists only in the QR code and in the two browsers (computer and phone) and is never sent to the server. The server receives and temporarily holds the encrypted messages, the session identifier and the IP address the session was created from; it cannot read the contents of the messages. All of it is deleted when the session expires (30 minutes by default, 7 days at most) or when the user ends it.
The session identifier and the value derived from the key do not allow the encryption key or the message contents to be recovered. Photos of IOL calculation printouts are processed on the phone and are never sent to the server. Files uploaded on the computer (photos, screenshots, PDFs) are likewise processed in the user's browser and never sent to the server; pasted text is not stored.
External Resources and IP Addresses
All of the service's resources (fonts, scripts, styles) are hosted on its own infrastructure. When using the service, the user's browser does not contact any third-party servers.
Users' IP addresses are not stored in the database or in the analytics systems. Application request logs are disabled. The analytics system performs irreversible anonymization of IP addresses. The error-monitoring system is configured without collecting IP addresses. The reverse proxy may keep a technical access log for security purposes; these records are rotated automatically and are not linked to calculation parameters.
Storage and Security
The service's server infrastructure is located within the Russian Federation. Access to the servers is restricted and protected by authentication. The connection is secured with the TLS (HTTPS) protocol, with mandatory redirection and the HSTS header. The data is not transferred to third parties, is not used for commercial purposes, and is not sold.
User Rights
In accordance with Article 14 of Federal Law No. 152-FZ of July 27, 2006, a personal data subject has the right to submit a request to: confirm the fact of data processing; obtain information about the purposes and methods of processing; and rectify, block, or delete the data.
Since the Service does not store the entered parameters on the server and does not identify users, providing, correcting, blocking or deleting the data of a particular subject is impossible for want of such data. Values sent from the phone and the pairing session parameters are removed by the user through the Service or by clearing the site data in the browser. For general enquiries write to info@iolcalc.ru.
Notification of Roskomnadzor
Because the service does not process personal data (all processed data is de-identified, is not stored on the server after the calculation, and users are not identified), the service owner is not a personal data operator within the meaning of Article 3(2) of Law No. 152-FZ, and no obligation to notify Roskomnadzor (Article 22 of Law No. 152-FZ) arises.
Contacts
For data processing inquiries: info@iolcalc.ru. See also Terms of Use.