Privacy Policy

Last updated: May 27, 2026

TelOnyx Contest Bot is a Telegram Mini App used to run Telegram contests and verify contest participation requirements, including Telegram membership and optional external service requirements such as YouTube channel subscription verification.

This Privacy Policy explains what data we collect, how we use it, how we store and protect it, how we share it, and how users can request deletion of their data.

1. Data We Collect

When a participant registers for a contest, TelOnyx Contest Bot may collect the following Telegram-related and contest-related data:

• Telegram user ID;
• Telegram username;
• Telegram first name and last name;
• contest registration records;
• contest participation status;
• contest eligibility status;
• winner information when applicable.

When a contest requires external service verification, the app may also collect account identifiers and OAuth credentials required to complete that verification.

2. Google User Data Accessed

If a participant chooses to connect their Google / YouTube account, TelOnyx Contest Bot requests the following Google OAuth scope:

• https://www.googleapis.com/auth/youtube.readonly

The app uses this read-only access only for contest requirement verification. Depending on the contest setup, the app may access the following Google / YouTube user data:

• basic Google OAuth authentication result required to connect the account;
• YouTube channel ID associated with the connected account;
• YouTube channel title and public channel metadata returned by the YouTube Data API;
• YouTube subscription list data needed to verify whether the participant is subscribed to the required contest channel;
• OAuth access token, refresh token, token URI, token expiration time, client ID reference, and granted scopes required to perform and maintain the verification.

TelOnyx Contest Bot does not request permission to upload, modify, delete, or manage YouTube videos, channels, comments, playlists, or other user content.

3. How Google User Data Is Used

Google user data is used only for the following purposes:

• to authenticate the participant through Google OAuth;
• to identify the participant's connected YouTube channel;
• to verify whether the participant meets a contest requirement, such as being subscribed to a specific YouTube channel;
• to update the participant's contest eligibility status inside TelOnyx Contest Bot;
• to allow the participant to disconnect their YouTube account from the contest bot.

Google user data is not used for advertising, analytics profiling, unrelated marketing, or any purpose unrelated to contest requirement verification.

Google user data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

4. Data Sharing

TelOnyx Contest Bot does not sell Google user data.

Google user data is not shared with advertisers, data brokers, or unrelated third parties.

Contest organizers may see limited contest-related information, such as participant registration status, eligibility status, and winner information. Contest organizers do not receive OAuth access tokens or refresh tokens.

Google user data may be processed by our hosting, database, logging, and infrastructure providers only as necessary to operate, secure, monitor, and maintain the application. These providers process data only for infrastructure and service operation purposes.

We may disclose information if required by law, regulation, legal process, or to protect the security, integrity, and lawful operation of the service.

5. Data Storage and Protection

OAuth tokens, account identifiers, YouTube channel identifiers, and contest records are stored on server-side infrastructure.

Access tokens, refresh tokens, client secrets, and service credentials are not exposed to participants in the Telegram Mini App.

We use reasonable technical and organizational safeguards to protect user data, including:

• HTTPS for data transmission;
• server-side storage of OAuth credentials;
• restricted access to production infrastructure;
• environment-based secret management;
• database access controls;
• limiting access to user data to authorized administrators or backend services that require it to operate the contest.

6. Data Retention and Deletion

Contest participation records are retained only as long as necessary to administer the contest, resolve disputes, prevent fraud, maintain contest integrity, and comply with operational or legal requirements.

OAuth tokens and connected Google / YouTube account data are retained only as long as needed to verify contest requirements or maintain the participant's contest eligibility status.

Users may request deletion of their stored OAuth credentials, connected account data, and contest participation data by contacting the TelOnyx Contest Bot administrator.

For privacy or deletion requests, contact: a0w.k1m@gmail.com

After receiving a deletion request, we will delete or anonymize the user's stored data unless retention is required for legal, security, fraud prevention, or contest integrity reasons.

7. Revoking Google Access

Users can revoke TelOnyx Contest Bot's access to their Google account at any time through their Google Account permissions page:

https://myaccount.google.com/permissions

After access is revoked, TelOnyx Contest Bot will no longer be able to verify YouTube subscription status for that user unless the user connects their Google account again.

8. Security

We take reasonable measures to protect user data from unauthorized access, disclosure, alteration, or destruction.

However, no online service can guarantee absolute security. Users should contact us if they believe their data has been accessed or used without authorization.

9. Contact

For privacy requests, data deletion requests, or questions about this Privacy Policy, please contact:

a0w.k1m@gmail.com

Users may also contact the contest administrator through the Telegram bot or the organization operating the contest.

About · Terms of Service