Privacy Policy

What we collect

Depends on which surface you're using:

• This website (targa.dev): standard server access logs (IP, user agent, requested path) generated by our hosting/CDN provider. No advertising trackers, no third-party analytics pixels, no cookie banner because we don't set any tracking cookies.
• Dashboard account (app.targa.dev): your email address, a securely hashed password, the Telegram chat ids you connect, and your plan. A single session cookie keeps you signed in — not used for tracking.
• The Targa bot, in groups it protects: the detection engine's durable records are moderation records, not messages: a message's score, which detectors fired, the action taken, and — because moderation has to say who — the member's numeric Telegram id and display name, plus warn history, roles, and ban-list entries that admins create. Message text is not stored in these records; profile photos and bios are analyzed in memory only. Records age out automatically (per-message records after 90 days, member activity after 180 days). Spam examples an admin explicitly submits with /spam are kept as anonymous training text for at most 12 months. A short-lived working set (recent messages, needed to catch edit-after-post spam and to power /why) is kept only long enough to serve that purpose, then discarded.
• Payment: Targa M1 is free — no payment data exists for it. If you buy a paid product (Targa M2, when available), payment is handled entirely by our payment processor (Stripe). We never see or store your card details.

What we don't do

We don't sell personal data. We don't share dashboard account data with third parties except the infrastructure providers required to run the service (hosting, email delivery). We don't run advertising trackers on the site or in the dashboard.

The public Spam Index

Aggregated, anonymized counts (not individual verdicts or identities) from the detection layer power the public Spam Index research pages. Nothing published there is traceable back to a specific person, group, or message.

Retention

Dashboard account data (email, password hash, sign-in identifiers, connected channels, device push tokens, waitlist entries) is kept until you delete your account, at which point it's removed immediately and your entries in the configuration audit trail are anonymized. Detection and moderation records age out automatically on fixed schedules — per-message records after 90 days, member activity records after 180 days, admin-submitted spam examples after 12 months. Ban lists that admins and federations maintain are kept while they remain in force, as an anti-abuse measure.

Your controls

From the dashboard you can disconnect any channel at any time and delete your account outright, which removes your account data immediately. Group members (people in protected groups who aren't account holders): the data we hold about you is your numeric Telegram id, display name, and moderation events in that group — most of it ages out automatically, and you can contact us to have it erased sooner (ban-list entries retained as an anti-abuse measure). For anything without a self-serve control yet (a data export, a specific deletion request), contact us — see below.

Children's privacy

Targa is not directed at children and we don't knowingly collect data from anyone under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has provided us data, contact us and we'll remove it.

International use

Our servers are in the European Union (Germany). Targa is used globally, so support channels and third-party providers (Cloudflare, Stripe, sign-in and push providers) may process data outside your home country. If you're in the EEA/UK and want specifics on transfer mechanisms, contact us.

Changes to this policy

We'll update the "last updated" date above when this changes. Material changes will be noted here; we don't currently have an email-notification system for policy changes (see the site gap this is part of closing).

Contact

Questions or data requests: reach us on Telegram at @targapraetorian, on X at @targapraetorian, or via the dashboard's Support page.