// LEGAL

PRIVACY POLICY

Last updated: January 2025

⚡ TL;DR — We collect nothing. Store nothing. Log nothing. Your credentials and session strings never touch our database because we don't have one.

Meta Server ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy describes how we handle information in connection with the String Session Generator service.

1. INFORMATION WE DO NOT COLLECT

We explicitly do NOT collect, store, log, or transmit the following:

  • Your Telegram API ID or API Hash
  • Your phone number or bot token
  • Your Telegram OTP (One-Time Password)
  • Your Telegram 2FA cloud password
  • The generated string session
  • Your Telegram account information, messages, or contacts

2. HOW AUTHENTICATION WORKS

When you use this service, authentication occurs as follows:

  • Your credentials are sent from your browser directly to Telegram's servers via the MTProto protocol
  • Our server acts as a temporary relay to facilitate the GramJS library connection
  • No credential data is written to disk, database, or log files at any point
  • Session data is held in server memory only for the duration of your authentication request (typically 2-10 seconds) and is immediately discarded
  • The generated session string is returned only to your browser and never stored on our end

3. TECHNICAL DATA (SERVER LOGS)

Like all web services, our hosting provider (Vercel) may automatically log basic request metadata including:

  • IP addresses (anonymized in most configurations)
  • Request timestamps
  • HTTP status codes
  • Request paths (e.g., /api/start)

These logs do NOT contain your credentials or session data. They are used solely for security monitoring and infrastructure management by our hosting provider. Vercel's privacy policy applies to this data.

4. COOKIES & LOCAL STORAGE

This service does not use cookies for tracking. We do not use local storage, session storage, or any browser persistence mechanisms to store your credentials or session data. All form data exists only in your browser's memory during your active session and is cleared when you navigate away or refresh the page.

5. THIRD-PARTY SERVICES

This service uses the following third parties:

  • Vercel — Hosting and deployment. Subject to Vercel's privacy policy.
  • Telegram — Authentication API. Your interaction with Telegram is governed by Telegram's privacy policy.
  • Google Fonts — Typography. Font files are loaded from Google's CDN.

We are not responsible for the privacy practices of these third-party services.

6. DATA SECURITY

While we do not store your sensitive data, we take security seriously:

  • All communication is encrypted via HTTPS/TLS
  • API routes are secured and rate-limited by Vercel's infrastructure
  • No database connections exist in our application
  • Session credentials exist in server memory only transiently

7. CHILDREN'S PRIVACY

This service is not directed to children under 13 years of age. We do not knowingly collect or process information from children. If you believe a child has used this service, please contact us.

8. YOUR RIGHTS

Since we do not collect or store personal data, there is no data to access, correct, or delete. If you have concerns about data processed by our hosting provider or third-party services, you should contact them directly.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

10. CONTACT US

If you have questions or concerns about this Privacy Policy, please reach out via our Telegram channel: t.me/meta_server