VlessMarket Privacy Policy
Last updated: May 2025
VlessMarket is committed to respecting the privacy of its users. This document explains what information is collected, how it is used, and what rights users have.
1. Information We Collect
- Telegram numeric ID: for authentication and account linking.
- Telegram username (if available): for display in the panel.
- Wallet data: balance, transaction history, and deposit/withdrawal addresses.
- Technical data: IP address, request timestamps, and server logs for security.
- User settings: selected language and dashboard preferences.
- VlessMarket does not store passwords, phone numbers, or other sensitive credentials.
2. How We Use Your Information
- Authentication and account management.
- Displaying balance and transaction history.
- Processing deposits and withdrawals.
- Detecting and preventing fraud and abuse.
- Sending essential system messages via Telegram bot (e.g., login confirmations).
- Improving service performance and user experience.
3. Data Sharing
- VlessMarket does not sell your personal data.
- Information is not shared with third parties except as required by law or for security.
- When necessary to share with infrastructure service providers (e.g., blockchain payment processors), only the minimum required data is transferred.
- Information may be disclosed upon legal authority order or to prevent serious harm.
4. Data Security
- Login tokens are protected with XChaCha20-Poly1305 encryption.
- All communications are encrypted via HTTPS.
- Sensitive information (such as wallet private keys) is never stored on the server.
- VlessMarket monitors for suspicious activity to detect security threats.
5. Data Retention & Deletion
- Account information is retained while the user is active.
- Transaction history is retained for at least 5 years for financial and legal purposes.
- Upon account deletion request, non-critical data is removed within 30 days.
- To request data deletion, contact support via Telegram.
6. Cookies & Local Storage
- VlessMarket uses a session token stored in browser localStorage to maintain login state.
- No third-party tracking cookies are used.
- Clearing browser data will automatically log you out.
7. User Rights
- Right to access: You may request to view the information stored about you.
- Right to rectification: If information is incorrect, you may request a correction.
- Right to erasure: You may request deletion of your account and personal data.
- To exercise these rights, contact us through the Telegram bot.