TopStrangerBot — Privacy Policy
Last updated: 8 October 2026
This Privacy Policy explains how personal data is processed when you use the Telegram bot @TopStrangerBot (the "Bot"), in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable national data protection law.
1. Data Controller
The data controller is TopStranger ("we", "us", "our").
Contact: @TSBReportBot on Telegram.
2. Personal Data We Process
2.1 Data received from Telegram
- Your Telegram user ID, required to communicate with you;
- your language setting;
- where available, your first name, last name, username and bio. The bio is used exclusively for moderation purposes (Section 6).
Telegram does not share your phone number, password, IP address or device information with bots, and we do not receive them.
2.2 Data you provide
The following data is optional, except for your language:
- language;
- sex, gender and sexual orientation;
- year of birth;
- location (the point you choose to share, which you can remove at any time);
- profile introduction and tags;
- matching preferences (e.g. sex and age range of the people you wish to meet);
- Bot settings.
We do not verify the accuracy of this data. You may leave any optional field as "not specified" without affecting your ability to use the Bot.
Special categories of data. Information about your sexual orientation, gender identity or sex life constitutes special category data under Article 9 GDPR. We process it only if you choose to provide it, on the basis of your explicit consent, which you may withdraw at any time (Section 9).
2.3 Usage data
- date of registration and last activity;
- chat history metadata (the Telegram IDs of your chat partners and the time of each chat);
- likes given and users blocked;
- the invitation or campaign link through which you joined;
- sponsored messages shown to you;
- bans, restrictions and moderation decisions concerning you.
2.4 Content of communications
To relay chats, the Bot necessarily processes the messages you send. We retain the text of chats for the periods set out in Section 8, primarily to prevent spam and fraud.
We do not store media files. Outside the 18+ categories, we store a reference to the media you send, which allows our staff to review it.
2.5 Cookies and tracking
The Bot operates entirely within Telegram. We use no cookies, analytics tools or tracking technologies.
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Providing the service: matching, relaying messages, managing settings | Performance of a contract (Art. 6(1)(b) GDPR) |
| Displaying your profile to your chat partner | Performance of a contract (Art. 6(1)(b)); for special category data, your explicit consent (Art. 9(2)(a)) |
| Preventing spam, fraud, unauthorised sales, harassment and illegal content | Legitimate interest in the safety of the service and its users (Art. 6(1)(f)) |
| Displaying sponsored messages, reminders and announcements | Legitimate interest in keeping the service free of charge (Art. 6(1)(f)) |
| Troubleshooting and improving the Bot | Legitimate interest in the proper functioning of the service (Art. 6(1)(f)) |
| Responding to requests from competent authorities | Compliance with a legal obligation (Art. 6(1)(c)) |
We do not sell your personal data and do not share it with advertisers. Sponsored messages are not personalised based on your profile, and sponsors receive no personal data about you. You may object to the use of your data for sponsored messages at any time (Section 9).
4. Information Visible to Your Chat Partner
When a chat begins, your chat partner can see:
- the profile fields you have completed;
- your country and region;
- the approximate distance between you, in kilometres.
Your chat partner cannot see your name, username or Telegram ID.
Media you send is protected against forwarding and saving to the extent permitted by Telegram. Text messages are not protected, and no technical measure can prevent screenshots.
5. Recipients of Personal Data
Your data may be disclosed to the following recipients, strictly to the extent necessary:
- Authorised staff, for moderation and support purposes only. Staff may access reported messages, media awaiting review and the conversations of users under review.
- Telegram, through whose infrastructure all messages are transmitted. Telegram acts as an independent controller under its own privacy policy.
- Contabo GmbH, Germany, acting as a data processor, which hosts our servers and databases.
- OpenRouter, Inc., United States, acting as a data processor for automated moderation (Section 6).
- Competent authorities, where required by law or where necessary to protect the vital interests of a person (for example, a minor at risk).
6. Automated Moderation
To detect users who sell content or attempt to move other users off the Bot (a common precursor to fraud), we use an automated system based on language models.
When it is triggered. A user's activity is analysed:
- when their messages contain certain keywords, links or @usernames; or
- when selected automatically by our systems for a periodic check.
Data analysed. For the user under review, the system receives their bio, profile introduction and conversations from the previous 30 days, including messages written by their chat partners. It does not receive Telegram IDs, names or usernames.
Decisions. Where the system detects a violation with high confidence, the user is banned automatically. In all other cases, the decision is taken by a member of our staff. The decision is based on the content of the messages analysed and has the effect of restricting access to the Bot.
Your rights. If you are subject to an automated decision, you have the right to obtain human review, to express your point of view and to contest the decision by contacting @TSBReportBot (Article 22(3) GDPR).
7. International Transfers
Automated moderation involves the transfer of data to OpenRouter, Inc. in the United States. Such transfers are safeguarded by the European Commission's Standard Contractual Clauses. We require that our data be routed only to model providers that neither retain it nor use it for training purposes. A copy of the applicable safeguards can be requested using the contact details in Section 1.
8. Retention Periods
| Data | Retention period |
|---|---|
| Text of chats | 30 days from the date of the message, for moderation purposes |
| Text of chats of users flagged as suspicious by moderation | 12 months from the date of the flag |
| Mapping between a message and its delivered copy (enables /revoke) | 24 hours |
| Self-destructing media | Deleted from your chat partner's chat after the time you selected |
| Conversations forming part of a moderation case resulting in a ban | For as long as the ban remains active |
| Media references awaiting review | Until reviewed; if classified as adult content, the account remains marked as 18+ |
| Profile, settings, chat metadata, likes, blocks | Until you request deletion of your account, or after 24 months of inactivity |
| Ban records | For the duration of the ban |
Messages also remain in your own Telegram chat with the Bot. That copy is controlled solely by you and Telegram.
9. Your Rights
Under Articles 15–22 GDPR, you have the right to:
- access your personal data and obtain a copy;
- rectify inaccurate data;
- erase your data;
- restrict processing;
- data portability, i.e. receive your data in a structured, machine-readable format;
- object to processing based on legitimate interest, including processing for sponsored messages;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You may also simply reset the relevant profile field to "not specified".
How to exercise your rights. Contact us at @TSBReportBot. Requests are free of charge and will be answered within one month of receipt. To verify your identity, we may ask you to contact us from the Telegram account concerned.
Account deletion. You can clear most profile fields at any time from /settings, and delete a sent message from your partner's chat using /revoke. To delete your account entirely, contact us from the Telegram account concerned; we will do so without undue delay and in any event within 30 days. We may retain records of active bans, to prevent circumvention, and any data we are legally required to keep.
Complaints. You have the right to lodge a complaint with a supervisory authority, in particular the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it) or the authority of the EU Member State in which you reside or work.
10. Minors
The Bot is intended exclusively for persons aged 18 or over. If we become aware that a user is under 18, we will ban the account and delete the associated data, except where retention is required to protect the minor or by law.
Parents or guardians who believe their child is using the Bot may contact us using the details in Section 1.
11. Security
We implement appropriate technical and organisational measures to protect personal data, including:
- access restricted to personnel responsible for operating and moderating the Bot;
- encryption of data in transit between our systems, Telegram and OpenRouter.
No system is entirely secure. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where required, affected users, in accordance with Articles 33 and 34 GDPR.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top indicates the latest revision. Material changes will be announced in advance through the Bot or our official channel.