Legal
Privacy Policy — WICKVIPER
What personal data we process, for what purpose and on what legal basis, who we share it with, how long we keep it and your rights under the GDPR.
Effective from: 7 October 2026 Version: 2.0
We collect as little data as possible. The wickviper.com website uses no cookies, no analytics and no forms. We process personal data mainly when you use our Telegram bot or write to us.
1. Who processes your data
The controller is the operator of the WICKVIPER service (the wickviper.com website, the @WickViperBot bot and the WICKVIPER channels on Telegram), "we" below. For anything concerning personal data, write to hello@wickviper.com. We have not appointed a data protection officer because we are not required to (Article 37 GDPR).
2. What data, for what purpose, on what basis and for how long
| When | Data | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|---|
| You browse the website | We collect no personal data. Our hosting provider, Cloudflare, technically processes the IP address and browser data to deliver the site and protect it from attacks. | delivering the site, security | Art. 6(1)(f) (our legitimate interest: operation and security of the site) | for as long as needed to deliver and protect the site, under Cloudflare's rules |
You click a wickviper.com/go/... link | platform, language, country (from a Cloudflare header), time of the click; no IP address and no cookies | measuring how well each channel works | Art. 6(1)(f) | aggregated data, no limit |
| You use our Telegram bot | Telegram ID and username, chosen language, country (if you give it), entry source (link tag), messages you send to the bot | running the bot and answering questions, source statistics | Art. 6(1)(b) (steps taken at your request) and (f) (statistics) | until you ask us to delete it |
| You ask a question in the bot | the text of your question | preparing an answer with the help of an AI model (see section 3) | Art. 6(1)(b) | as above |
| You are a member of the VIP channel | Telegram ID, access period | granting and removing access to the channel | Art. 6(1)(b) | for the access period and up to 12 months after it ends |
| You e-mail us | e-mail address, content of the message | replying and handling the matter | Art. 6(1)(f) | until the matter is closed, then until any claims are time-barred |
Do you have to provide data? Using the website requires no data. The bot needs your Telegram ID, because without it it cannot reply to you. Everything else is voluntary.
We do not profile you and we make no decisions about you based solely on automated processing that produce legal effects. Automatically granting or removing channel access when a period ends is the performance of the service, not an assessment of you.
We do not send marketing by private message without your consent.
If we launch a paid subscription, we will update this policy before it starts.
3. Who we share data with
We use providers that process data on our behalf under data processing agreements (Article 28 GDPR):
- Cloudflare, Inc.: website hosting, CDN, attack protection,
/golink redirects. - Supabase, Inc.: database; servers in the EU (Frankfurt, Germany).
- Google LLC (Gemini API): preparing answers to questions asked in the bot and helping to create educational content. The model receives the text of the question. For users in the European Economic Area, Google does not use this content to improve its products (Gemini API terms).
Telegram (Telegram Messenger Inc.) processes data as a separate controller under its own privacy policy: https://telegram.org/privacy . We only see the data the bot receives from Telegram and what you give us yourself.
We may disclose data to public authorities where the law requires it.
We do not sell data and do not share it with advertisers.
4. Transfers outside the European Economic Area
Cloudflare, Supabase and Google are US companies. Cloudflare, Inc. and Google LLC participate in the EU-U.S. Data Privacy Framework, so transfers rely on the European Commission's adequacy decision (Article 45 GDPR). For Supabase, Inc. we use the standard contractual clauses approved by the Commission (Article 46(2)(c) GDPR). You can get a copy of the safeguards by writing to hello@wickviper.com.
5. Your rights
You have the right to access your data and get a copy, to rectification, erasure, restriction of processing and data portability (for data processed under a contract), and to object to processing based on our legitimate interest (Article 6(1)(f)). Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.
To exercise your rights, write to hello@wickviper.com or to the bot. We will reply within one month.
You can lodge a complaint with the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, https://uodo.gov.pl) or with the supervisory authority in the country where you live.
6. Security
We use encrypted connections (HTTPS), restricted database access, two-factor authentication on provider accounts and data minimisation. We do not store private keys or payment card data.
7. Minors
Our services are intended for adults only. If we learn that a minor has given us data, we will delete it, except for data we must keep by law.
8. Changes
We will announce material changes on this page and in our channels. The date and version number are shown at the top of the document.