privacy

what we store

• telegram login — when you log in (site widget, openid connect, or inside the mini app), we keep your telegram id, username and first name. that's the whole identity record. sessions are signed tokens stored in your own browser; we can't read them from anywhere else.
• likes & watches — your votes and watchlist entries, keyed to your telegram id. one human, one vote is the whole system, so this link is the product.
• pro wallets — if you use /pro, the wallet address you submit is stored and re-checked on-chain daily. it's a public blockchain address; we never ask for keys, seed phrases, or signatures we don't need.
• analytics — pageviews and outbound clicks with a random per-tab session id. no ip addresses, no cookies, no user agents, no fingerprinting. pruned after 90 days.
• sticker provenance — the docket itself: creator ids, set metadata, market data. sourced from telegram's own apis and public chains; it's a public record about public artifacts, not about visitors.

what we don't do

• no selling or sharing of your data with anyone. period.
• no ad trackers, no third-party analytics beyond vercel's aggregate web vitals.
• no email, phone, or payment-card collection — payments in the ecosystem are on-chain and never touch us as custodian.
• no reading your chats. the bot sees what you send it, nothing else.

removal

want your likes, watches, or pro record gone? message @stickercapbot with /tip and ask — an admin removes it, no argument. provenance records about sticker sets are the public docket and stay.