Zorge.
🌐 English

Zorge → Privacy

Zorge privacy

Version 2026-09-21

What data is processed

Messages from the private chats you picked, their earlier versions, supported attachments, the fact of a deletion, and the other person's name and @username. On top of that — your Telegram ID and payment records.

What for

The only purpose is to show you a copy of a message if it was deleted or edited. The data is not sold, not handed to advertisers and not used to train models.

How it is stored

Archive contents are encrypted with a separate key for every user. Attachments sit in object storage in encrypted form.

How long it is kept

Messages — 90 days, attachments — 30 days. Without an active subscription — 1 days. Paid one-off openings are not removed by these terms. After that — automatic deletion.

Who else is involved

Telegram, as the source of the messages and as the payment system, and the hosting provider of the servers. If you arrived through a Facebook advertisement, the click and the fact that you started using the bot are reported to Meta through a server-side interface: IP address, browser string, advertising click identifiers and your Telegram ID as an irreversible hash. Without an advertising click, nothing at all goes to Meta. No other analytics or advertising services are connected.

Staff access

While handling a support request, a member of the service team can open a saved file from your archive. Every opening is recorded: who, when and which file. Message text is never shown in the internal panel — only counts, dates and amounts.

Your rights

/export — get a dump of the archive. /delete_data — delete it: the encryption key is changed and only the payment records required for refunds and by law remain, to the minimum extent. Database backups are removed on a rotation schedule.

The other person

There is a second person in the conversation. The responsibility for being entitled to keep those conversations rests with you.

The website itself

The web server keeps an ordinary access log: IP address, browser string, requested address and time. The log lives about five days and exists for diagnostics and for filtering out robots. There are no visitor counters and no advertising pixels on the pages. The “connect” button goes through the /go address: it stores the page label, the IP and the browser string for 90 days and sets one cookie (_fbp) for the same period, so that a click is counted once.

Contact

Questions and complaints — @daskiya.