Privacy Policy
1. Introduction
TDUMP ("we", "us", "our") operates the tdump.xyz website and the @tdump_bot Telegram bot. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.
By using our Service you consent to the practices described in this Policy.
2. Data We Collect
| Data Type | Source | Purpose | Retention |
|---|---|---|---|
| Telegram user ID & username | Telegram bot | Account identification | Until account deletion |
| Telegram session string | User input (login) | Account scanning | Until session deleted by user |
| Token balance & transactions | Payment processor | Billing | Until account deletion |
| Scan task metadata | System generated | Scan history & support | 90 days |
| Payment identifiers | Cryptomus | Payment verification | 2 years (legal) |
| Server access logs | nginx | Security & abuse prevention | 30 days |
We do not collect, read, or store the content of your Telegram messages. Messages are processed in memory during a scan and immediately discarded. Only extracted findings (counts of key types found) are included in the result archive.
3. How We Use Your Data
- To authenticate and identify your account
- To execute scanning tasks on your behalf
- To process token purchases and verify payments
- To provide customer support
- To detect and prevent abuse of the Service
We do not sell, trade, or rent your personal data to third parties.
4. Data Storage & Security
- Session strings are encrypted at rest using AES-256 (Fernet) before database storage
- Database is hosted on a private VPS with no public access
- Result archives are stored in Backblaze B2 cloud storage with pre-signed URLs that expire after 24 hours
- Transit — all API communication uses TLS 1.3
- Access control — database credentials are not exposed in any public repository or configuration
5. Third-Party Services
- Cryptomus — payment processing. Cryptomus receives transaction details; we receive only payment confirmation. See Cryptomus Privacy Policy.
- Backblaze B2 — temporary result archive storage. Files are automatically deleted after 24 hours.
- Telegram — bot infrastructure. Telegram processes all bot interactions per their own privacy policy.
6. Your Rights
You have the right to:
- Access — request a copy of data we hold about you
- Deletion — delete your account and all associated data via the Telegram bot at any time
- Correction — request correction of inaccurate data
- Portability — request an export of your scan history and transaction records
- Objection — object to processing for purposes other than service delivery
To exercise any of these rights, contact us via @tdump_bot.
7. Cookies
The tdump.xyz website does not use tracking cookies. We do not run any analytics, advertising, or third-party tracking scripts. The site is purely informational.
8. Children's Privacy
The Service is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users via the Telegram bot when material changes are made. Continued use of the Service constitutes acceptance of the revised Policy.
10. Contact
For privacy-related requests or questions, contact us via Telegram: @tdump_bot