Privacy Policy

Effective: May 26, 2026

This Privacy Policy describes how Web3defender (the "Service") collects, uses, and protects information when you use the website web3defender.tech, our Telegram bot, and related web applications (the "Platform"). We follow a principle of data minimization: we collect only what is necessary to operate the Service.

1. Information We Collect

1.1 Telegram Account Data

When you interact with our bot or open the Mini App, Telegram provides us with the following data points:

• Your numeric Telegram identifier (chat_id);
• Your first name (and last name, if set);
• Your Telegram username (if set);
• Your preferred language code.

We do not collect your phone number, email address, or any other personal contact information from Telegram.

1.2 Service Activity

To deliver the Service we store:

• Cryptocurrency addresses and URLs you submit for analysis;
• Scan history (results returned to you);
• Subscription plan, activation date, and expiration date;
• Referral relationships (if you used or shared a referral link).

1.3 Payment Data

We do not directly receive or store your payment-card information. All payments are processed by third-party payment partners:

• Telegram Stars: processed entirely within Telegram. We only receive a confirmation of successful payment.
• The Open Network (TON): on-chain transactions are public by design. We receive your transaction hash and sender address for the sole purpose of matching your payment to your subscription.

1.4 Technical Data

Our infrastructure provider (Cloudflare) may collect standard server logs (IP address, request timestamp, user agent) for security and abuse-prevention purposes. We do not link this data to your Telegram account.

2. How We Use Information

• To provide and operate the Service (perform scans, manage subscriptions, deliver results);
• To match payments to user accounts and activate paid plans;
• To prevent abuse, fraud, and unauthorized access (rate limiting, anti-abuse heuristics);
• To respond to your support requests;
• To improve the Service through aggregate, non-identifying analytics.

3. Legal Basis for Processing

We process the data described above based on:

• Contract performance: to provide the Service you have requested;
• Legitimate interests: to keep the Platform secure, prevent abuse, and improve the Service;
• Consent: implied by your initiation of contact with our Telegram bot and continued use of the Platform.

4. Data Storage and Security

Data is stored on Cloudflare's global infrastructure (Cloudflare D1 databases and Workers). Data is encrypted in transit using TLS 1.3. Access controls limit data exposure to authorized administrative functions only.

5. Third-Party Services

We share limited data with the following third parties strictly for service delivery:

• Telegram: messaging, authentication via Telegram Login, in-app payments.
• Cloudflare: hosting, database, content delivery, DDoS protection.
• Public blockchain APIs (e.g., Etherscan-family explorers): we query these APIs with addresses you submit; they may log such queries per their own policies.

6. Data Retention

• Active accounts: retained as long as you actively use the Service.
• Inactive accounts: data may be deleted after twelve (12) months of inactivity.
• Scan history: retained for up to twelve (12) months.
• Payment confirmations: retained for the period required by applicable tax and accounting regulations of our payment partners.

7. Your Rights

You have the right to:

• Request a copy of the data we store about you;
• Request correction of inaccurate data;
• Request deletion of your account and associated data;
• Withdraw consent and stop using the Service at any time.

To exercise these rights, contact us via the email or Telegram address in the contact section below. We will respond within thirty (30) days.

8. Cookies and Tracking

The Platform does not use advertising cookies, third-party analytics that profile users, or cross-site tracking. The only client-side storage we use is technical state required to keep you signed in to the web Mini App.

9. Children

The Service is not directed to individuals under the age of 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will delete it.

10. International Users

The Service is operated on global infrastructure and is accessible internationally. By using the Service, you acknowledge that your data may be processed in jurisdictions outside your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at web3defender.tech/privacy.