privacy

what we store

• telegram login: when you log in (site widget, openid connect, or inside the mini app), we keep your telegram id, username and first name. that's the whole identity record. sessions are signed tokens stored in your own browser; we can't read them from anywhere else.
• likes & watches: your votes and watchlist entries, keyed to your telegram id. one human, one vote is the whole system, so this link is the product.
• pro wallets: if you use /pro, the wallet address you submit is stored and re-checked on-chain daily. it's a public blockchain address; we never ask for keys, seed phrases, or signatures we don't need.
• analytics: our own first-party beacon, same-origin only: pageviews, outbound clicks and error reports, keyed to a random per-tab session id. no ip addresses, no cookies, no user agents, no fingerprinting. pruned after 90 days.
• sticker provenance: the docket itself: creator ids, set metadata, market data. sourced from telegram's own apis and public chains; it's a public record about public artifacts, not about visitors.

what we don't do

• no selling or sharing of your data with anyone. period.
• no ad trackers, no third-party analytics of any kind. the only measurement is the first-party beacon described above, and it never leaves our servers.
• no email, phone, or payment-card collection. payments in the ecosystem are on-chain and never touch us as custodian.
• no reading your chats. the bot sees what you send it, nothing else.

removal

want your likes, watches, or pro record gone? message @stickercapbot with /tip and ask. an admin removes it, no argument. provenance records about sticker sets are the public docket and stay.