Privacy policy

Last updated: 25 October 2026.

This policy explains what the HandyBots website (handybots.tools) and the HandyBots bots in Telegram process about you, why, and for how long. In short: the website stores nothing about you, and the bots keep only what they need to work. Your photos, videos, recordings and documents are deleted after the reply.

Who is responsible

The website and the bots are run by HandyBots, an independent project. Contact for all privacy questions and requests: hello@handybots.tools.

The website

  • No cookies, no analytics, no advertising and no tracking scripts. The pages contain no JavaScript at all.
  • The site is hosted on Cloudflare Pages (Cloudflare, Inc.). To deliver pages and protect the site against abuse, Cloudflare processes standard technical request data, such as your IP address, browser type and the page requested, under its own privacy policy. We do not use this data to identify visitors.
  • Links to the bots contain a short label such as s_web_en_pdf. It only tells the bot which page you came from — it contains nothing about you.

The bots: what is processed

Your files. The photos, videos, recordings and documents you send are processed on our own server and deleted after the bot replies. Speech recognition and background removal run on the same server, with no outside services. Files you send stay in your Telegram chat history like any other message, on Telegram's side.

What every bot stores:

  • your Telegram user ID, language, when you first came and last visited, which link brought you (including who invited you, if anyone), bonus tries and the number of results — until you ask to delete them;
  • an activity log: which commands and buttons were used and what the bot replied, without your messages or files — for 30 days;
  • the days you visited — for 30 days; events such as “new user” or “result” — for 180 days;
  • if you tap “Don't show tips”, that mark — until you ask to delete your data; and a shared time mark, with nothing else in it, so that tips about other bots come at most once a day — for no longer than a day;
  • Telegram Stars payments, if there ever are any — for refunds and accounting.

Your Telegram name and username are not part of this general data. Your data is never sold.

What some bots store in addition:

  • Video to Round Video Note and Background Remover: the Telegram link to your file while the action menu is open — for no longer than an hour.
  • Photo to PDF: the list of files you are adding to a PDF — for an hour after the last addition.
  • Sticker Maker: your pack number, how many stickers it has and the emoji you chose. The sticker pack itself lives in Telegram with your name in its title; you can delete it in @Stickers.
  • Anonymous Questions: the question text and its sender's Telegram ID — 30 days while unanswered and 7 more days after the answer (the answer text is kept just as long). The recipient never sees who sent a question; the sender's ID is kept only so that blocking and reporting work. A reported question's text (without the sender) is kept for 30 days. A recipient's block of a sender, and a ban of a sender by the administrator after a report, contain no text and are kept without a time limit, to protect recipients.
  • Group Chat Games: your name and points in each chat where you play (members of that chat see them in /top); the daily “who is it today” pick — for 30 days.
  • How Well Do You Know Me? Quiz: your quiz (questions, your answers and your Telegram name) and the attempts (a friend's name, answers and score). Names and scores are visible to the quiz creator and to everyone who took the quiz. When you create a new quiz, the attempts of the old one are deleted after 90 days.
  • 16 Personality Types Test: your latest result (type and answers), your link for friends and a record of who took the test via it, without names. The result is deleted after 365 days without a new attempt; friend records 365 days after the attempt.
  • Currency, Dice & Fancy Fonts: what you type is processed right away and not saved; the log keeps only the kind of request.

Technical copies. Records of jobs in progress are kept for up to a day. Database backups are kept on the same server for up to about five weeks and are then overwritten; deleted data disappears from backups within that time.

Each bot shows its own list with the /privacy command.

Why we process data, and on what basis

  • To provide the service you ask for — process your file and send the result, keep your stickers, quiz or test result, count your daily limit (performance of the service you request; GDPR Art. 6(1)(b)).
  • To keep the bots working, secure and fair — the activity log, abuse prevention (rate limits, blocks and reports in Anonymous Questions), fixing errors, and simple usage statistics such as how many results were made (our legitimate interest in running a reliable, abuse-free free service; GDPR Art. 6(1)(f)).
  • Payment records, if any — to meet accounting and refund obligations (legal obligation; GDPR Art. 6(1)(c)).

We do not build advertising profiles, we do not sell your data or share it for cross-context advertising, and we make no decisions about you by automated means that have legal or similarly significant effects.

Who else processes data

  • Telegram. Your messages to the bots pass through Telegram, which processes them as an independent service under its own privacy policy.
  • Our hosting provider. The bots run on a rented server in the European Union; the provider only hosts the server.
  • Cloudflare, for the website only, as described above.
  • Exchange-rate sources used by the currency bot receive requests from our server only, with nothing about you.
  • Authorities, only if we are legally required to disclose data.

International transfers

The bot server is in the European Union. If you use the bots from another country, your data is transferred to and processed in the EU. Cloudflare and Telegram may process data in other countries under their own safeguards.

Your rights

Depending on where you live (for example under the GDPR and UK GDPR, the California CCPA/CPRA, Brazil's LGPD, India's DPDP Act or Russia's Federal Law No. 152-FZ), you have the right to:

  • know what data we hold and get a copy of it;
  • have it corrected or deleted;
  • object to processing based on legitimate interest, or ask us to restrict it;
  • withdraw a consent you gave, where processing relies on consent;
  • complain to your data protection authority;
  • exercise these rights without being treated differently.

Delete your data in a bot: open the bot, send /privacy and tap 🗑 Delete my data, then confirm. Your data in that bot is deleted within 30 days. Payment records, if any, are kept for refunds and accounting, and blocks or bans placed on a sender of anonymous questions are kept to protect recipients. Requests are checked by a person, so that, for example, the sender of an anonymous question cannot erase it to escape a block or a report.

Everything else (a copy of your data, correction, objection, questions or complaints): write to hello@handybots.tools. Tell us which bot you used and your Telegram user ID, so we can find your record. We reply within 30 days.

Children

You may use the bots only if you are allowed to use Telegram under its Terms of Service (users in the EU must be at least 18) and are old enough under the law of your country to agree to these terms and to this processing yourself. We do not knowingly process children's data. If you think a child has used a bot, write to us and we will delete the data.

Security

Data is stored on a server we control, with access limited to the operator. Files are deleted after the reply. No method of storage or transfer is completely secure, so we deliberately keep as little data as possible.

Changes to this policy

When we change this policy, we update this page and the date at the top. Please check it from time to time; the /privacy command in each bot always shows what that bot stores now.

Contact

Questions about privacy: hello@handybots.tools. See also the terms of use.