← Back to Fragstat

Privacy Policy

1. Introduction

Fragstat ("we", "us", "our") operates the website https://fragstat.org and related services (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

By using Fragstat, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Information from Telegram Login

When you sign in via Telegram Login Widget, we receive and store:

• Telegram user ID
• Username
• First name and last name
• Profile photo URL
• Authentication date

We do not have access to your Telegram messages, contacts, or any other Telegram data beyond what is listed above.

2.2 Information from TON Connect

When you connect a TON wallet, we receive and store:

• Wallet address
• Public key
• Blockchain chain identifier

We do not have access to your wallet's private keys or seed phrase.

2.3 Automatically Collected Information

When you use the Service, we may automatically collect:

• IP address
• Browser user agent
• Pages visited and features used
• Timestamps of interactions

2.4 Information You Provide

Through your use of the Service, we store:

• Watchlist items (usernames you track)
• Shop listings (usernames you list for sale)
• Transaction history (credit purchases and usage)
• Notification preferences (timezone, quiet hours, daily limits)

2.5 Shop and Marketplace Data

When you create a shop on Fragstat:

• Shop slug (URL identifier) is generated randomly — it is not based on your Telegram username
• Contact information is not set automatically — you choose whether to display contact details
• Publicly visible: shop title, description, listed items, contact (only if you set it)
• Never publicly visible: your Telegram username, Telegram ID, first/last name, or profile photo

Other users browsing your shop cannot see your Telegram identity unless you explicitly set a contact username in your shop settings.

3. How We Use Your Information

We use collected information to:

• Provide the Service — authenticate you, display your watchlist, shops, and account data
• Process payments — handle TON transactions for Pro subscriptions and credits
• Send notifications — watchlist alerts, price changes, and status updates (based on your preferences)
• Improve the Service — analyze usage patterns to fix bugs and improve features
• Ensure security — detect and prevent abuse, fraud, or unauthorized access

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Security

• Your data is stored on secured servers located in Europe (Germany)
• We use encrypted connections (HTTPS/TLS) for all data in transit
• Database access is restricted and protected by authentication
• Passwords and secrets are stored in Google Cloud Secret Manager, not in application code

While we take reasonable measures to protect your data, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

• Account data is retained as long as your account is active
• Transaction history is retained for record-keeping purposes
• Watchlist and shop data is retained until you delete it or close your account
• Server logs (IP, user agent) are retained for up to 90 days

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Data portability — request your data in a machine-readable format
• Withdraw consent — stop using the Service at any time

To exercise any of these rights, contact us at the email address listed below.

7. Third-Party Services

Service	Purpose	Privacy Policy
Telegram	Authentication (Login Widget)	telegram.org/privacy
TON Connect	Wallet authentication and payments	ton.org/privacy
Fragment.com	Source of username marketplace data (public)	fragment.com
CoinGecko	TON-to-USD price conversion (no user data shared)	coingecko.com/privacy

We do not control these third-party services and are not responsible for their privacy practices.

8. Cookies and Local Storage

Fragstat uses browser local storage (not traditional cookies) to store:

• Authentication token — to keep you signed in
• Theme preference — your selected visual theme
• Usage counters — to track free tier limits

You can clear this data at any time through your browser settings. Clearing local storage will sign you out.

9. Children's Privacy

Fragstat is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

• Email: [YOUR_EMAIL]
• Telegram: [YOUR_TELEGRAM]