Privacy Policy

Last updated: 22 June 2026

This document explains how Sarafun (contact — hello@sarafun.app) processes personal data when you use the sarafun.app landing and the «Sarafun» Telegram Mini App.

1. Who controls your data

Data controller: Sarafun. Send any data-protection requests to hello@sarafun.app.

2. What this site (sarafun.app) collects

The landing does not use cookies, analytics scripts, forms or any other identification means. The site never asks you for personal data.

Web-server access logs may retain the following for 14 days: IP address, User-Agent, request path. This is used solely for abuse prevention (DDoS, scanning) and is not linked to your identity.

3. What the «Sarafun» Telegram Mini App collects

When you use the mini-app we receive from Telegram: first name, last name, username, profile photo. You may additionally provide city, profession, company, skills, interests, a bio and social links.

Technical data: to operate and protect the app we automatically process your Telegram interface language, device type and platform (iOS / Android / Desktop), Telegram version, and a journal of your in-app actions (page views, key actions) — for analytics and improving the service. For abuse prevention we process network data: a truncated IP-address prefix and a technical session signature. The full IP address and User-Agent are never stored in raw form. Technical data is not shown to other members.

Visibility: every detail in your profile is visible to other community members. This is by design — for networking and finding kindred spirits. Don't include anything you don't want shared.

Storage: data lives on secured servers. Database access is restricted and protected. The activity journal (analytics) is kept for up to 90 days; technical security data (sessions, access markers) is kept for the short period needed for protection (typically no more than 90 days), then deleted or anonymised.

Third parties: we do not sell or share your data with third parties. Data is used solely to operate the app.

Deletion: you may delete your account at any time from profile settings. Personal data is anonymised on deletion; your content (comments, ratings) remains attributed to «Deleted user». Technical session data and logs linked to you are deleted or anonymised on deletion.

Cookies: the mini-app does not use advertising or tracking cookies. Authentication uses a session token kept only in app memory for the session duration (a strictly-necessary technology) — not a cookie and not cross-site tracking.

4. Legal basis and your rights

Processing data to operate the app is based on performing our obligations to you; processing technical data for abuse prevention is based on our legitimate interest in keeping the community secure. You have the right to access, rectify or delete your data.

5. Changes to this policy

We may update this policy as the service evolves. The latest revision date appears at the top of this document. We try to announce substantive changes in the Telegram community.