Privacy policy

Controller: the operator of nftpars.app.

Accounts on NFTPARS

When you sign in with Telegram we receive your Telegram user id, name, username and profile photo URL, signed by Telegram. To verify Telegram Premium we record whether Telegram reports your account as Premium, with the time and source of each check. We store your applications, hashed API keys, usage, balance and transaction history to provide and bill the service.

Indexed gift data

NFTPARS indexes collectible gifts and their publicly observable ownership on Telegram and the TON blockchain. Owners can hide gifts in Telegram; hidden ownership is shown as “Hidden”. We do not infer anyone's gender, country or other personal characteristics from names, photos, phone numbers, language settings or usernames.

Self-declared attributes (optional)

You may declare your country and/or gender so developers can filter gift owners. This happens only with your explicit consent on the Privacy & attributes page. You can withdraw at any time; the attributes are then deleted from the index. Developers never receive your declaration as a field, but they do see aggregate coverage counts, and a filtered result (for example “country: RU”) implies that a listed verified owner matches that filter.

What we never store

• Telegram passwords, login codes or BotFather tokens.
• Plaintext API keys after they are shown to you once.

Retention

Request logs are kept for 30 days, security events for 180 days. Ledger and deposit records are kept as long as required for accounting. You can ask us to delete your account; ledger records may be retained where the law requires.

Your rights

You can request access, correction, deletion or a copy of your personal data, and object to processing, by contacting support.