Skip to main content

Privacy Policy

Privacy Policy

Last updated: April 3, 2026

What data we collect

OmniGest collects the minimum data necessary to provide its services:

  • Telegram account data — When you log in via Telegram, we receive your Telegram user ID, username, first name, and profile photo URL. This data is provided by Telegram's Login Widget.
  • Email and password — If you register with email, we store your email and a bcrypt-hashed password. We never store passwords in plain text.
  • Group activity data — Message counts, moderation actions, and engagement statistics for groups where the bot is active. We do not store message content.
  • Click tracking — When users click affiliate links, we record the click timestamp, anonymized IP address, country (via GeoIP), and user agent. IPs are anonymized after 90 days (GDPR compliance).

How we use your data

  • To provide and improve the OmniGest bot and web dashboard
  • To display group statistics and moderation logs to authorized administrators
  • To send coupon broadcasts to groups where the bot is active
  • To authenticate your identity when you log in

Third-party services

  • Telegram — For bot functionality and login authentication
  • Cloudflare — For CDN, DDoS protection, and SSL
  • Google Fonts — For typography (Inter font)

Data storage and security

  • Data is stored on servers located in the EU (OVH, France)
  • All connections are encrypted via HTTPS/TLS
  • Database access is restricted to authenticated services only
  • We use security headers (CSP, HSTS, X-Frame-Options) on all pages

Your rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Delete your account and all associated data
  • Export your data in a portable format

To exercise these rights, contact us at [email protected].

Cookies

We use the following cookies:

  • session_id — Authentication session (expires after 30 days)
  • lang — Language preference (EN/ES, expires after 1 year)
  • theme — Dark/light theme preference (expires after 1 year)

We do not use tracking cookies or third-party analytics.

Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top reflects the most recent revision.

Contact

For questions about this privacy policy, contact [email protected].