Privacy Policy
This document describes what happens to data on gramdirectory.com and in our Telegram bot. It is written to be read in full: short sections, no references to "applicable provisions".
The data controller is the operator of GramDirectory. For anything in this document: privacy@gramdirectory.com.
In short
- While you are just reading the site, we collect nothing — no cookies, no counters, no third-party scripts.
- Data appears only once you sign in to your account through Telegram.
- We do not sell data and do not share it with ad networks. There are no advertising or analytics cookies on this site at all.
If you have not signed in
We collect nothing and place nothing on your device. There is no Google Analytics, no Yandex Metrica, no advertising pixels, no social widgets.
The only thing your browser keeps by itself is your light or dark theme choice. It stays on your device (localStorage), is never sent to us and goes nowhere else.
Separately: the web server, like any web server, keeps a technical access log — page address, time, IP address, browser version. It exists to handle abuse and diagnose failures. The log is kept for 14 days and then deleted automatically.
If you signed in through Telegram
Signing in uses Telegram's official mechanism. By pressing "Log in" you allow Telegram to pass us:
- your Telegram identifier;
- your username (@username), if you have one;
- your first and last name as they appear in your Telegram profile;
- a link to your profile photo;
- your app's language code.
Your Telegram password, phone number and the contents of your chats are not passed to us and are not stored by us.
Then, as you use the product, we come to hold:
- a record of your sign-in session — browser version and the IP address the sign-in came from. This exists so you can spot someone else's session and end it;
- the channels you have claimed and the proof of ownership;
- your settings and your working content across the modules: post talking points, content plans, ad listings, cross-promo participation.
Cookies
We have exactly two cookies, and both appear only after you yourself start signing in. They require no consent: without them the service you asked for — access to your account — is technically impossible.
| Cookie | Purpose | Lifetime |
|---|---|---|
gd_session | Keeps you signed in so you do not log in on every page | 30 days, renewed, but never beyond 180 days from first sign-in |
| Temporary sign-in cookie | Exists only during the sign-in procedure and protects it from tampering | Until sign-in completes |
There are no advertising, analytics or third-party cookies here. That is why you see no "accept cookies" dialogue: there is nothing to ask permission for.
If you clear cookies in your browser, you will simply be signed out.
Payment
As of this revision, payment collection is not wired up and access is free while we launch. Once payment works, we will store what a payment cannot be confirmed without: the wallet address, the network, the amount and the blockchain transaction identifier.
We do not collect or store bank card details — we have none at all. Blockchain transaction data is public by its nature: it exists on the network independently of us.
Who we share data with
We do not sell data and do not pass it to ad networks. Sharing happens only where the service would not work otherwise:
- Telegram — during sign-in and while the bot operates. Telegram processes it under its own privacy policy.
- Language model providers (OpenAI, Anthropic) — this is where the text you send to the content engine goes: your talking points, drafts and topics. It has to, in order to come back as a finished post. Do not send the engine anything you are not prepared to entrust to an external service.
- Hosting — the server that runs the site and the database.
- DNS provider (Cloudflare) — serves the domain name.
We do not use your data to train models of our own.
How long we keep it
- Web server log — 14 days.
- Sign-in session — up to 180 days from sign-in, after which you sign in again.
- Account and working content — until you ask us to delete them.
- Payment records — as long as settlement between the parties to a deal requires.
Your rights
You can ask us to:
- show what data about you we hold;
- correct anything inaccurate;
- delete your account and everything attached to it;
- hand your data over as a file so you can take it with you;
- stop processing if you object to it.
Write to privacy@gramdirectory.com. We answer within 30 days. If our answer does not satisfy you, you may complain to the data protection authority in your country.
Channels in the catalogue
The catalogue holds information about public Telegram channels: name, description, subscriber count, reach, posting frequency. We obtain it by reading the open part of a channel — the same way anyone who opens it in Telegram does. We do not read private channels or correspondence.
If you own a channel and do not want it in the catalogue, write to privacy@gramdirectory.com and we will remove it. No explanation needed.
Children
The service is meant for channel owners and advertisers and is not intended for anyone under 16. We do not knowingly collect children's data.
Changes
If this document changes, the revision date at the top changes with it. Changes that materially affect your rights will be announced in advance — in your account or by email, not retroactively.