mediasniff

Privacy policy

Last updated: 26 October 2026

mediasniff saves, into a private Telegram chat, the photos and videos posted in the Telegram groups you choose. This page explains what the service keeps about you, why, for how long, and how to delete it.

In short: the service keeps your Telegram identity, your settings, the list of your groups and an encrypted session. It never stores your media, never reads your private chats, never sells anything. Everything is deleted when you delete your account from the app.

1. Who operates the service

mediasniff is a Telegram bot (@Mediasniffmini_bot), a Telegram Mini App and this website, operated by an independent developer. For any question about your data, write to the bot: a human reads it.

2. What is collected

When you start the bot. Telegram gives us your user ID, first name, username and language code. We use them to address you, to pick your language and to send you media.

When you link your account. Linking creates a session for your own Telegram account, the same thing that happens when you sign in to Telegram on a new device. That session is stored encrypted (AES-256-GCM) with a key kept outside the database, along with the date of linking. It is the only way the service can read the groups you tick, and it is deleted the moment you disconnect.

Your groups and settings. The list of groups and channels your account belongs to (identifier, title, type, member count, whether the group marks its content as protected), which ones you tick, whether saving is paused, which media types you want, whether a caption is added, and your language.

Counters. How many media were sent to you per day and per group (kept 30 days), your total, the time of the last save, and a fingerprint of each media already processed so that the same file is not sent twice. Fingerprints contain nothing of the media itself and expire after 7 days.

Purchases. The pass you bought, its price in Telegram Stars, the Telegram payment identifier and the date. Payment is handled entirely by Telegram: we never see a card number or a bank detail.

Technical logs. The website is served by Vercel, which may log requests (IP address, browser) for security for a short time. The website sets no cookies; it only remembers your language choice in your browser.

3. What is never done

  • Your photos and videos are never written to disk. Each file passes through memory just long enough to be sent to you, then is discarded.
  • Your private chats are never read. Only the groups and channels you tick are read, and only new messages in them.
  • The service never joins a group, never sends a message on your behalf, never changes anything in your account.
  • No data is sold, rented or shared with advertisers. There is no third-party tracker on the site or in the app.

4. Why the data is used

To deliver media from your groups to your chat, to apply the free limits and your Premium pass, to send you the bot's messages (quota reached, pass ending soon), to process your purchases, and to fix bugs. Under the GDPR, the legal bases are the performance of the service you asked for, your consent when you link your account (which you withdraw by disconnecting), and our legitimate interest in keeping the service secure.

5. Who receives the data

Telegram, necessarily, since everything happens through it. The hosting providers that run the website (Vercel) and our server. Nobody else.

6. How long it is kept

  • Session and group list: until you disconnect, from the app or from Telegram › Devices.
  • Settings, counters, identity: as long as your account exists.
  • Delivery statistics: 30 days. Media fingerprints: 7 days.
  • Purchases: kept for accounting, but detached from your identity when you delete your account.

7. Your rights and how to use them

You can access, correct, export or delete your data, and object to its use. Most of it is in your hands directly in the app: Settings › Disconnect revokes the session and clears your groups; Settings › Delete my account erases everything listed above, immediately and permanently. For anything else, write to the bot. If you are in the European Union, you can also complain to your data protection authority (in France, the CNIL).

8. Security

Sessions are encrypted at rest with a key that is not stored in the database. All traffic is over HTTPS. Requests from the Mini App are authenticated with the data Telegram signs for each user, so nobody can act on your account from outside Telegram.

9. Age

The service is for people old enough to use Telegram under its terms, and at least 16 years old.

10. Changes

If this policy changes, the new version is published here with its date. Significant changes are announced in the bot.

Terms of useHomeContact via the bot