The short version
Until you sign in we know nothing about you beyond ordinary web server logs. If you sign in with Telegram we keep what Telegram handed us at sign-in, your favourites and your reviews.
We run no third-party tracking ads, no analytics counters, and we do not sell data. We do count clicks on links to apps, but not in a way tied to a person.
What we keep when you sign in
Telegram hands us a set of fields at sign-in and we keep exactly those: the numeric Telegram ID, first and last name, username, a link to the avatar, interface language, whether the account is Telegram Premium, and the time of the last sign-in.
Attached to the account is what you do here: favourites, reviews, submissions and ownership claims.
What we never hold
We hold no password: signing in goes through Telegram, and your Telegram password never reaches us.
We hold no phone number, no messages, no contacts and no payment details. Placement is paid outside the site, in direct messages, and we take no card data.
Clicks and logs
When you open an app through a link on the site we record: which app, where the link led, the date and time, the page's language, the country, the domain you arrived from, whether the request looked like a bot, plus a hash of the IP address and a hash of the browser string.
The hash is a one-way function with a secret salt, truncated to 32 characters. Neither the IP nor the browser can be recovered from it. It exists to tell one real click from the same person clicking a hundred times.
These records carry no link to your account. Even when you are signed in, your identifier is not in them.
Analytics
The site carries no Google Analytics, no Yandex Metrica and no other third-party counter. We count what happens on our own side: clicks, searches against our own API, and server logs.
Who else sees this
We do not sell data and do not hand it to ad networks.
Data is processed on our own server and at the hosting provider that runs it. The avatar you see is served by Telegram. We may disclose data on a lawful request from a public authority.
How long we keep it
Account data lives as long as the account does. Click records are kept in the de-identified form above and used for catalogue statistics; they are not tied to people.
Web server logs are kept as long as they are needed for diagnostics and abuse protection.
Your rights
You can ask for a copy of your data, for a correction, or for your account to be deleted along with your favourites and reviews. Write to us and we will do it within 30 days of receiving your message.
App pages stay: they are assembled from public data and are not your personal data.
Children
The site is not meant for children under 13 and we do not knowingly collect their data. If you believe a child has left data with us, write and we will remove it.
Changes
We may change this policy. The date of the last change is at the top of this page, and material changes are flagged on the site.
Getting in touch
[email protected]. Write in any of the site's languages.