Privacy Policy — TEMLYR Labs

1. Scope and controller

This Policy applies to the TEMLYR public website, Telegram Mini App, bots, backend services, support and administrative systems. The current controller, legal contact, country and effective date are shown below. Telegram is a separate platform provider and processes Telegram account and platform data under its own terms.

2. Data received from Telegram

When you open TEMLYR in Telegram, we may receive verified Mini App data such as Telegram user ID, name, username, language, profile photo URL and launch or referral parameters. The Telegram user ID is the primary TEMLYR account identifier. We do not treat unverified client data as proof of identity.

3. Gameplay, account and economy data

We process profile and progression data, rounds, timing results, Precision, grades, Tier, Calibration, TGP, TICKS, Energy, streaks, achievements, leaderboards, tasks, referrals, tournament and duel activity, inventory, Workshop parts, watches, listings, trades, rewards, Premium state and support history needed to provide the service.

4. Security, anti-cheat and automated decisions

To protect fair competition, payments and the game economy, TEMLYR may process server and client timing evidence, pointer or touch type, trusted-event signals, coarse movement or jitter samples, visibility and performance anomalies, session or installation identifiers, device fingerprints, network timing, linked-account indicators, security logs and risk scores. These signals may affect reward eligibility, Market access, probation, challenges or abuse restrictions. Important restrictions may be reviewed through support.

5. Purposes and legal bases

We process data to perform the service requested by you; fulfil digital purchases and rewards; maintain account and transaction integrity; prevent fraud, bots, duplicate rewards, refund abuse and attacks; provide support; enforce these Terms; and comply with legal, accounting or regulatory duties. Depending on the processing, the legal basis is performance of a contract, our legitimate interests in security and fair operation, compliance with law, or consent where the interface specifically requests it.

6. Telegram Stars, creator campaigns, rewarded ads and partners

Telegram Stars purchases may create product, invoice, Telegram payment charge, fulfilment and refund records. TEMLYR does not receive your bank-card number from a Stars purchase. If you voluntarily connect a social account for a creator campaign, TEMLYR may receive the platform account identifier, display name, avatar, granted permissions, access and refresh tokens, and public metadata and engagement metrics for videos you submit. Tokens are encrypted on the server and used only to verify account/video ownership and update campaign metrics. Disconnecting the account revokes access where the provider is available and deletes the stored connection and tokens; submitted campaign and integrity records may remain as described under retention. TikTok and other social platforms process authorization and platform data under their own terms. If you voluntarily request a rewarded ad, AdsGram or Monetag may process device, browser, operating-system, network/IP and advertising-event data under its own terms; TEMLYR uses provider callbacks and session identifiers to attribute rewards and prevent duplicate grants. Partner tasks may record visits, verification and claims.

7. TON wallets and Market development data

If you voluntarily connect a TON wallet, TEMLYR may process public wallet and NFT addresses, TON Proof results, public keys, signed actions, transaction identifiers and custody, listing, settlement or recovery state. TEMLYR never needs your seed phrase or wallet private key. Public GRAM Market v5 listing and buying are currently closed; owner and development accounts may use the controlled test lane. If public access is enabled later, a separate versioned Market Agreement will apply before Market actions.

8. Local storage and the public website

The Mini App uses session storage for its access token and local storage for interface preferences. Controlled Market testing may store a non-extractable, device-specific Market authorization key in browser IndexedDB; it is not a TON wallet key and cannot sign arbitrary wallet transactions. The public website does not use third-party advertising or analytics cookies. It creates a random session-only identifier to increment aggregate daily page, language, device-class and referrer-host counters; the identifier and IP address are not stored in the analytics database. Essential delivery and security logs may still process IP address, user agent, request time and requested URL.

9. Recipients and international transfers

Data may be processed by hosting, database, storage, security, support, Telegram, TON infrastructure, RPC/indexer, content-delivery, rewarded-ad and payment-related providers only as required for their function. Some providers may process data outside your country or the European Economic Area. Where TEMLYR is responsible for a restricted international transfer, it uses the safeguards required by applicable law. We do not sell personal data.

10. Retention and deletion

Core account and gameplay records are normally kept while the account is active. Short-lived proofs and authorizations expire according to their security window; Market reconciliation run logs are routinely pruned. Payment, trade, fraud, security, dispute and blockchain-linked records may need to be retained longer to prevent double fulfilment, preserve transaction integrity or meet legal obligations. After a valid deletion request, account-owned data is deleted or anonymized where reasonably possible; unresolved TON obligations or retained trade history may require settlement or anonymization instead of immediate hard deletion.

11. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal data, object to certain processing and complain to a competent data-protection authority. Send a request to the legal contact shown below and identify the relevant Telegram account. We may verify account ownership and may retain limited records where security, transaction integrity or law requires it.

12. Children, security and changes

You must be permitted to use Telegram and TEMLYR under the laws and platform rules that apply to you. Any future public real-value Market is limited by its separate agreement to users who have reached legal majority. TEMLYR uses server-side authorization, restricted administration, HTTPS and anti-abuse controls, but no service can guarantee absolute security. Material changes to this Policy will update the effective date and, where required, be presented for renewed notice or consent.