1. What We Do Not Collect
Code generation runs entirely in your browser. The following data is never sent to our servers:
- Your Telegram bot token
- Your group or chat IDs
- Your admin or owner user IDs
- Any bot configuration or feature settings
- The generated bot code itself
2. What We Do Collect
- License key verification: When you enter a license key, it is sent to our server to verify its validity. We store a one-way hash of the key (not the key itself) to track usage and prevent abuse. We do not store your key in plaintext.
- Generation count: We record how many times a license key has been used to generate a bot (limit: 3 per key). This is stored as a hashed identifier in our database.
- IP addresses: License key verification requests log your IP address temporarily for rate limiting and abuse detection. These logs are not sold or shared with third parties.
- Purchase data: When you buy a license, your email address and payment details are collected and processed by Dodo Payments. We receive only your email and the product purchased. We do not store payment card details.
- Feedback submissions: When you post a suggestion on the Feedback Board, we store the suggestion text, an optional Telegram username if you provide one, and a SHA-256 hash of your IP address. The raw IP is never saved. Submissions are public and visible to all visitors. Vote actions (upvote/downvote) are recorded as a hashed IP linked to the suggestion - no other identifying data is stored.
3. Third-Party Services
- Dodo Payments - payment processing and license key delivery. Their privacy policy applies to purchase data.
- Vercel - hosting and serverless functions. Standard server access logs apply.
- Supabase - stores hashed license key usage counters and Feedback Board submissions (suggestion text, optional username, hashed IP). No plaintext IPs or payment data are stored there.
4. Your Generated Bot
Your generated bot runs entirely on your own server. It does not send any data back to BotForge. It has no analytics, no kill switch, and makes no requests to tgbotforge.com at runtime. The only external requests it makes are to the Telegram Bot API.
5. Cookies
We do not use tracking cookies or advertising pixels. The site uses essential browser storage (localStorage) to remember your wizard progress within your session and to track which Feedback Board suggestions you have voted on. This data never leaves your browser and is not sent to our servers.
6. Data Retention
License key hashes and generation counts are retained as long as needed to enforce key limits. IP-based rate limit logs are cleared automatically after short rolling windows (minutes to hours). We do not retain logs beyond what is needed for abuse prevention.
7. Your Rights
You may request deletion of any data associated with your email or license key by contacting us. We will respond within 30 days.