Privacy policy

Short version

We do not store your data. The token is encrypted in your browser cookie. Statistics pass through the server without being saved; your browser keeps a copy for a few minutes.

Telegram Ads token

You paste the token on the Connection page. The server checks it with one read request, encrypts it with AES-256-GCM and returns it as an HttpOnly cookie for 1 hour.

The server decrypts the cookie for each request to the Telegram Ads API and does not write the token anywhere. Disconnecting deletes the cookie.

Advertising data

Account, ads and statistics are requested from promoteapi.telegram.org and sent to your browser. The server does not save or cache them.

Your browser keeps loaded statistics for 5 minutes by default — from 1 minute to 1 hour, set on the Connection page — so the dashboard does not request them again. They are deleted on disconnect; after the session ends, they are deleted the next time the dashboard opens.

Ad images and videos load only when you open them in an ad card, directly from the address Telegram returned.

Cookies and browser storage

Session cookie with the encrypted token and a flag that a session exists. Both live 1 hour.

Local storage keeps the theme, the cache lifetime, saved report views, campaigns and tags, the change journal with snapshots of ad texts and settings, and report settings. IndexedDB keeps the statistics of a connected account. Disconnecting deletes the statistics and the snapshots of ad texts and settings; campaigns, notes and settings you created stay until you clear the site data. None of it leaves your device.

Feedback

The feedback form sends the category, your message, the interface language and, if you enter it, an email for the reply to our team chat in Telegram. Nothing else is attached.

Analytics

We use Cloudflare Web Analytics. It works without cookies and counts visits in aggregate, without identifying you.

Error reports

When the server fails, we receive the error code, route, API method name and Cloudflare data center. Tokens, account IDs and statistics are never included.

Hosting

The service runs on Cloudflare Workers. Cloudflare processes network requests as the hosting provider.

Contact

Questions and requests: adtally@dzhfrv.com.