Privacy Policy
Last updated: 27 May 2026
This Policy explains what information SlayKeys ("we", "us"), the data controller, collects when you use our Telegram bot and Mini App, how and why we use it, who we share it with, and your rights. By using SlayKeys you agree to this Policy.
1. Information we collect
- Telegram account data shared by Telegram when you open the Mini App: your Telegram user ID, username, first/last name, and language. We do not see your phone number or password.
- Order and wallet data: the products you buy, prices, order status, store-credit balance, transactions, and referral activity.
- Fulfilment details you provide: information needed to deliver an order — for example a Telegram @username for Stars/Premium, a redemption region, an account email, or a Discord invite.
- Support messages you send us in chat, including any attachments.
- Technical data: IP address, device/browser information, and request logs, used for security and to operate the service.
Payments are handled by third-party processors. We receive confirmation that a payment succeeded and a reference, but we do not collect or store your card details or crypto wallet keys.
2. How we use your data and the legal bases
Where the GDPR or similar laws apply, we rely on these legal bases:
- Performance of a contract — to process, deliver, and support your orders, and to operate store credit, referrals, and your account.
- Legitimate interests — to prevent fraud, abuse, and chargebacks, secure the service, and improve it (balanced against your rights).
- Legal obligation — to comply with tax, accounting, sanctions, and anti-money-laundering requirements.
- Consent — where we ask for it; you can withdraw it at any time.
3. Who we share it with, and international transfers
We share only what is necessary to fulfil your order, with the following categories of processors and suppliers:
- Payment processors — e.g. CryptoBot (crypto) and, where used, a card processor such as BetaTransfer.
- Fulfilment suppliers that issue the goods — e.g. gift-card / top-up providers, boosting providers, and Telegram-fulfilment infrastructure (Fragment).
- Infrastructure — our hosting and server provider.
These parties process data only to perform their service. We do not sell your personal data. We may disclose data where required by law or to protect our rights. Some processors are located outside your country, so your data may be transferred internationally; we rely on appropriate safeguards (such as standard contractual clauses) where required. Because access is through Telegram, your use is also subject to Telegram's own privacy policy.
4. Crypto and the blockchain
Cryptocurrency payments are recorded on public blockchains. Transactions and wallet addresses involved in a payment are public by nature and are outside our control.
5. Cookies and analytics
The Mini App uses only the storage strictly necessary to run (such as keeping you signed in within Telegram and remembering app state). We do not use advertising cookies or third-party ad trackers.
6. Retention
We keep account and order data for as long as your account is active and for a reasonable period afterwards to handle disputes, prevent fraud, and meet legal, tax, and accounting obligations (typically up to several years for transaction records). Support messages and technical logs are kept for a shorter period unless needed for an ongoing matter.
7. Security
We use reasonable technical measures to protect your data, and sensitive delivery details (such as delivered codes and credentials) are stored encrypted.
8. Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you can withdraw it. You also have the right to lodge a complaint with your local data-protection supervisory authority. To exercise any right, contact us using the details below. Note that we may need to retain certain records (such as order and payment history) for fraud-prevention and legal reasons even after a request.
9. Children
SlayKeys is not intended for anyone under 18, and we do not knowingly collect data from minors.
10. Changes
We may update this Policy; the "Last updated" date shows the current version.
11. Contact
For privacy questions or requests, email contact@slaykeys.com, use the in-app support chat, or message @slaykeys_bot on Telegram.