Your data. Made clear.

Who processes the data?

The data controller is GramDock’s publisher, whose identity and contact details are to be completed in the legal notice. Data protection contact and data protection officer, if one has been appointed: To be completed.

The data used

Your GramDock account

Email address, password hash, account ID, role and creation or update dates, to manage your access. The email and password are required to sign in.

Your Telegram connections

Phone number provided, API credentials, connection name, Telegram ID and session data. Telegram authorization keys stay on the server. The browser may keep the API credentials, the connection choice and preferences, but never receives a Telegram session key.

Your downloads

The media and messages backed up on the site, their source information and the progress of downloads are processed to carry out your requests. The content may include third-party data.

Profiles viewed

The information Telegram provides to your account is displayed at your request in Profile+. It may concern other people.

Access security

Sign-in information is used to limit abusive attempts. The hosting provider may also produce technical logs: their detail and retention remain to be completed.

Why, and on what basis?

Managing the account, sessions and exports is needed to perform the service you requested. Preventing abusive access falls under the legitimate interest in securing the service, subject to respect for people’s rights. Some operations may be necessary to comply with a legal obligation.

Any professional use of third-party data requires an assessment suited to its purpose. Additional processing, its legal basis and the providers actually involved must be specified by the publisher before it is put in place.

Recipients and hosting

The service involves Telegram, the site’s hosting and, as far as necessary to operate the service or handle a request, the people authorized by the publisher. The exact identity of the providers, the hosting countries, any transfers outside the European Economic Area and their safeguards are to be completed.

Telegram processes the data of its own service according to its privacy policy. Data can be disclosed to an authority only within an applicable legal framework.

Retention and deletion

The periods that apply to accounts, saved sessions, backups, logs and any recovery copies, as well as the deletion deadlines after closure, are to be completed by the publisher. No uniform period or immediate deletion of all copies is announced here.

You can delete your backups in “My backups” and your saved connections in “My account”. Deleting a copy on GramDock does not delete the original on Telegram or the files already downloaded to your device. Signing out of the site does not, by itself, delete the saved Telegram connections.

Cookies and browser storage

A session cookie keeps you signed in and protects actions on your account. Authenticated access to the site expires after 12 hours. The browser also uses its storage for API credentials, the connection choice and preferences, depending on the options you choose. Telegram session keys stay on the server only. Persistent local storage may remain until it is deleted.

You can clear the site’s data in your browser; you may then need to sign in again. Clearing it does not erase the data kept on the server. The public pages do not require any data-collection form to be viewed.

Your rights

Under the conditions set by the GDPR, you can request access to your data, its rectification, its erasure, restriction of processing, its portability, or object to certain processing. Where processing is based on your consent, you can withdraw it for the future.

The way to reach the publisher to exercise these rights is to be completed on the contact page. You can also file a complaint with the CNIL. Never send a password, a sign-in code or a Telegram session with a request.