Privacy Policy

Data we store

Developer account details, projects, API key prefixes and hashes, webhook configuration, and authentication event records needed to operate the service.

Data we avoid

We do not collect Telegram login codes and we minimise personal information in authentication logs. IP addresses are stored as hashes where logged.

Credentials

API secrets are hashed at rest and displayed only once at creation. Telegram and server credentials are never exposed to browser code.

Retention and deletion

You can revoke API keys and delete projects at any time. Deleting a project removes its associated keys, webhooks and logs.