Privacy Policy
Last updated: 30 October 2026
The short version
- Strike Dodger is a Telegram bot. We see what Telegram gives a bot: your Telegram ID, name and username, and the chats you add the bot to.
- We check the public posts of the Instagram pages you ask us to watch, and the clips and links you send us. Videos are only downloaded for the check and deleted right after.
- Payments are handled by Stripe and Link. We never see your card details.
- No ads, no analytics, no tracking, and we don't sell anything about you.
1. Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is The Lucas Agency GmbH, Germany. For anything about your data, write to lucas.agency@outlook.com.
2. Telegram
You use Strike Dodger through Telegram. When you start the bot, add it to a group or a channel, or press its buttons, Telegram gives us:
- your Telegram user ID, name and username;
- the ID, title and type of each chat the bot is in, and which customer account a chat belongs to;
- the messages you send the bot or reply to it with: page names, links, videos and short answers to its questions. In groups the bot only sees commands and replies to its own messages.
We store the users and chats linked to a customer account so alerts reach the right people, and we remember the bot's own recent messages (menus, alerts, notices) so it can tidy them away later. Telegram itself processes your messages under its own privacy policy.
3. The Instagram pages we watch
For each page you ask us to watch, we regularly fetch its recent public posts: the post link, caption, posting time, thumbnail and the video. We do this through HikerAPI, a service that reads public Instagram data. The video is downloaded, compared with our library of licensed footage, and deleted, unless we flag the post: then we keep its video for 90 days to test and improve our detection on it. We keep the result: whether and what it matched, the proof picture we sent you, and what you answered on the alert (taken down, fine).
Captions can name other people, for example the person who filmed a clip. We use them only to recognise credited footage.
4. Clips and links you send to check
When you send a video or a link (Instagram, TikTok, Facebook, YouTube) to check before posting, we download the video, compare it with our library, send you the answer and delete the video. If we flag a post from an Instagram link, we keep its video for 90 days to test and improve our detection; video files you send us are always deleted. To fetch videos from links we may use HikerAPI, TikHub (a service that reads public TikTok and Instagram posts) or download them directly. Files over 20 MB are downloaded through Telegram's own interface. We keep a short technical log entry of each check (chat, link, result) to find errors; these logs are overwritten regularly.
5. Payments
Subscriptions are sold through Stripe's Managed Payments. The seller of record is Link (Stripe), which processes your payment details, invoices and tax under its own privacy policy. We receive the customer and subscription details Stripe gives merchants: your name and email address if you entered them, your country, the number of pages, the price and whether the subscription is active. We never see your card or bank details.
6. What we don't do
- No advertising and no selling or sharing of personal data.
- No analytics or tracking in the bot or on this website.
- We don't use your posts or clips for anything other than the checks you asked for.
7. Who processes your data
| Service | What for | What they get | Where |
|---|---|---|---|
| Hetzner Online GmbH | Our server and database | Everything described above | Germany (EU) |
| Telegram | The bot itself | Messages between you and the bot | Telegram's own terms |
| HikerAPI | Fetching public Instagram posts | The names of watched pages and links to posts | Not stated by the provider |
| TikHub | Fetching videos from links | The links you send | Not stated by the provider |
| Cloudflare, Inc. (R2) | Nightly database backups | Our database, without video data | USA / EU |
| Stripe / Link | Payments, invoices, tax | Your payment and billing details | Ireland / USA |
| Vercel Inc. | Hosting this website | Visitors' IP address and request data | USA / EU |
Where a provider outside the EU or EEA receives personal data, the transfer is protected by the EU-US Data Privacy Framework or by the EU Standard Contractual Clauses where available.
8. Legal bases
| Processing | Legal basis (GDPR) |
|---|---|
| Watching your pages, checking clips, sending alerts, your account and chats | Art. 6(1)(b): needed to provide the service you signed up for |
| Public posts and captions that name other people | Art. 6(1)(f): our and our customers' legitimate interest in avoiding copyright problems |
| Payments and invoices | Art. 6(1)(b) and (c): the contract and tax law |
| Error logs, backups, security | Art. 6(1)(f): a service that works and is safe |
9. How long we keep it
- Your account, chats and watched pages: until you or we end the account, or you stop watching a page.
- Check results of posts: 12 months, and deleted right away once no customer watches the page any more.
- Downloaded videos: deleted right after each check, except the videos of posts we flag (never files you send us): 90 days.
- The bot's own messages in your chats: notices, group menus and alerts you've dealt with are removed automatically after an hour to a few days.
- Backups: 30 days.
- Payment and invoice records: as long as tax law requires (in Germany usually 10 years).
10. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Write to lucas.agency@outlook.com and we will answer within one month. You can also complain to a data protection authority, for example the one where you live.
11. Changes
If we change how Strike Dodger handles data, we update this page and the date at the top.