Privacy Policy

1. What we collect

To operate licensing and Pro accounts, we collect the minimum necessary:

• Email address — to create your account and send magic-link sign-in and transactional emails.
• Device ID — a random identifier generated by the extension to enforce per-plan device limits.
• User agent & extension version — to support your devices and debug issues.
• IP address — processed transiently for rate-limiting and fraud prevention; not stored long-term.
• Subscription data — your plan, status and renewal date (we never see or store card numbers). If you start the free week of Pro, we record that your account and this browser's Device ID have used it, so each can claim it once. To limit free weeks per internet connection, we also keep a one-way scrambled code derived from your IP address (never the address itself) for 30 days, then delete it.
• Product usage events — the extension reports which steps of the product are used, so we can see where people get stuck: that it was installed, that it ran on Telegram Web for the first time, that a Save button was shown, that a first save worked, that a save failed (as one of a fixed list of categories such as “network” or “timeout”, never the error text), that the free daily limit was reached, that the free week of Pro was offered, accepted and started, that the pricing page was opened, that a plan was chosen, which sign-in method was chosen and that sign-in was completed, and that the review prompt was shown or tapped. They are identified by the same Device ID above, plus your account identifier if you're signed in, and sent via Google Analytics. These events never include message content, filenames, or which Telegram chat you were in.
• Website activity — on this website we record which pages you view, how far down the home page you scroll (by section), and which “Add to Chrome” / “Add to Edge” button you click. When you click through to a browser store, the link carries a campaign tag (utm_source, utm_medium, utm_campaign) naming this website and the button, so the store's own statistics can show how many installs came from here. The tag contains no personal data.
• Uninstall feedback — if you uninstall the extension, the page that opens asks why. The reason you pick is recorded as an anonymous analytics event. If you choose “Something else” and type a message, that text (with your approximate country) is emailed to us so we can read it; it is not linked to your account.

2. What we do NOT collect

• Your Telegram messages, chats, contacts, or group memberships.
• The content of any media you download — downloads happen locally in your browser.
• Your browsing history outside of web.telegram.org.
• Payment card details — these are handled entirely by our payment processor.

3. How we use your data

We use the data above to provide the service: authenticate you, validate your license, enforce device limits, send required transactional emails, and prevent abuse. Product usage events are used only to understand how the product is used and to prioritize what to build or fix next. We do not sell your data or use it for advertising.

4. Legal basis (GDPR)

We process account and license data to perform our contract with you (providing the service). Any optional marketing email is sent only with your consent and you can opt out at any time.

5. Sub-processors

We share the minimum data needed with trusted providers:

6. Data retention

• Active subscription data is kept while your subscription is active.
• Billing records are retained as required by tax law.
• Device activations are deleted within 90 days of being revoked.
• On account deletion, personal data is erased promptly (see your rights below).

7. Your rights

You can, at any time:

• Access / export your data — from the extension's Options page, or by email request.
• Delete your account and personal data — from the Options page, or by email request.
• Withdraw consent for marketing email via the unsubscribe link.

8. Cookies

The website uses three kinds of cookies, and no others:

• Essential — your authentication session, so you stay signed in. The site cannot work without these.
• Analytics — Google Analytics sets _ga and _ga_* cookies to count visits and measure how people move through the site. We use these only to understand product usage, never for advertising, and we do not sell or share the data with advertisers.
• Interaction analytics — Microsoft Clarity, which we use to see where visitors click, scroll and get stuck, including replays of a visit. It only runs once we have switched it on, and only on the public pages: never on checkout, sign-in, account or billing pages, and never in our admin tools. It records interactions such as clicks, scrolling, mouse movement and the pages visited, with on-page text masked, and Clarity never captures what you type into form fields. Its own cookies are _clck and _clsk (first-party, holding a pseudonymous ID and tying page views into one visit). Microsoft's documentation also lists the third-party cookies CLID, ANONCHK, MR, MUID and SM, which Clarity can set on Microsoft's own domains. We tell Clarity that advertising storage is denied, because we run no ads. Clarity is operated by Microsoft; see Microsoft's privacy statement.

If you visit from the EU/EEA, the UK or Switzerland, the analytics and interaction-analytics cookies are off until you choose Accept in the cookie banner: Clarity is not loaded at all until then. If you decline, Google Analytics sets no cookies and receives only anonymous, cookieless signals, and Clarity never loads. Everywhere else they are on by default. You can change your choice at any time: Change your cookie choice.

We set no advertising or retargeting cookies of our own. The extension itself sets no cookies at all.

9. Children

The service is not directed to children under 13, and we do not knowingly collect their data.

10. Changes

We may update this policy; material changes will be reflected by the “last updated” date above.

11. Contact

Questions or data requests: support@tgvideodownloader.online