Privacy Policy
Last updated: 3 October 2026
Flagbearer (“we”, “us”) runs the Flagbearer Telegram bot and Mini App, a global community where creators complete engagement tasks, earn perks and spend them on campaigns for their own posts. This policy explains what we collect, why, and the choices you have. We process personal data in line with the Nigeria Data Protection Act 2023.
What we collect
- From Telegram, when you open the bot or Mini App: your Telegram user ID, first and last name, username and profile photo link. Telegram signs this data so we know it’s you; we never see your phone number or your Telegram password.
- What you enter at sign-up or in your profile: name, optional email, country, state and city, interests, a referral code if you were invited, and the social media handles you add.
- Social accounts you verify: if you choose “Sign in with YouTube, X, TikTok, Instagram or Facebook”, that platform tells us your account ID, username and display name. We use the access it grants once, to read that public profile, and then discard it. We don’t store platform passwords or access tokens, and we can’t post, like, follow or message on your behalf.
- Task proofs: screenshots you upload to show a completed task. They are stored privately, never published, and seen only by you and our admins. Each screenshot is permanently deleted 3 days after the last decision on it (when your perks are credited or, if they’re taken back, when that happens), including from our backups. After that we keep only the task record and a fingerprint of the image, which can’t be turned back into the picture, to stop the same screenshot being reused.
- Activity: tasks you complete, perks earned and spent, campaigns you create, feedback messages, referrals, and a security log of account and admin actions.
- Technical data: IP address and request logs, kept briefly to run and protect the service (for example rate limiting and abuse prevention).
Why we use it
- To create and run your account, show you tasks and keep your perk balance correct.
- To show campaign owners that the engagement they paid perks for really happened.
- To prevent fraud: duplicate proofs, fake accounts and one social account used by several members.
- To send you messages about your account through the Flagbearer bot (you can block the bot at any time).
- To answer your feedback and support requests.
We rely on your agreement when you sign up and connect accounts, and on our legitimate interest in keeping the community fair and secure. We don’t sell your data and we don’t use it for advertising.
Who can see it
- Other members see your name, username and photo on the leaderboard.
- Flagbearer admins see your profile, activity and proofs to review campaigns and handle support.
- Service providers: our hosting provider stores the data on our server; Telegram delivers the bot and Mini App. When you verify a social account, you sign in directly with that platform under its own privacy policy.
How long we keep it
We keep your data while your account is active and as long as needed to settle perks and prevent fraud, except proof screenshots, which are deleted after 3 days (see above). Database backups are kept for 14 days and never contain screenshots. When an account is deleted, your profile details are erased; Data deletion lists exactly what is erased and the little we keep (without your name) so other members’ balances stay correct.
Your choices and deleting your data
- Edit your profile any time in the Mini App under Profile.
- Remove a connected social account: Profile → the account → Remove. This deletes the platform ID and name we stored for it. You can also revoke Flagbearer’s access in that platform’s settings.
- To get a copy of your data or delete your account, email info@flagbearer.tech or message our support account on Telegram, or use /support in the bot. We act on requests within 30 days. Step-by-step instructions and what deletion covers: Data deletion.
Security
All traffic uses HTTPS. The database isn’t reachable from the internet, proofs are never served publicly, and admin actions are logged in a record that can’t be edited.
Children
Flagbearer is for people aged 18 and over.
Changes and contact
We’ll post changes here and update the date above. Questions: email info@flagbearer.tech or message us on Telegram.