How BASHLAM handles your data. Plain and short — as it should be.
BASHLAM is an independent heritage project about the North Caucasus, designed and operated by Coderov Arsaev. It carries no advertising and sells nothing.
One first-party cookie: bashlam_vid — a random, signed identifier. It lets us keep you signed in and count how many distinct people visit. It is HttpOnly (JavaScript cannot read it), SameSite=Lax, and set as Secure over HTTPS. No third parties. No advertising cookies. No cross-site tracking.
Your login token is stored in your browser's local storage on your device, used only to prove you are signed in.
To keep the site secure and understand traffic, the server records for a limited time:
For members, we also store your username, email and the IP of your last sign-in. Passwords are never stored in readable form — only a one-way bcrypt hash.
We process this data on the basis of our legitimate interest in operating a secure, functional website (Art. 6(1)(f) GDPR). The bashlam_vid cookie is technically necessary for sign-in and basic audience measurement.
You may request access to, correction of, or deletion of your data at any time. Deleting your account removes your profile and your guest-book entries. To exercise any right, contact the operator at hoposaurus9@gmail.com.
Live traffic and security logs are kept in memory and rotate automatically (a few hundred recent entries). Account data is kept until you delete your account.
Fonts and the 3D engine (three.js) load from public CDNs (Google Fonts, unpkg). The optional TEPTAR AI sends only the messages you type to Groq when you supply your own API key. Historical images are served from Wikimedia Commons. No data is sold or shared for advertising.