Privacy Policy

Last updated 2 October 2026.

This policy explains what the G Bot website stores about you, why, for how long, and who else handles it.

What we store

Your account: your name, your email address and your password. The password is stored only as a one-way hash that nobody can turn back into the password, including us.
Telegram, if you link it: your Telegram user ID and name. We use them to sign you in from our bot and to send you password-reset links and support replies there.
Sign-ins: the devices that are signed in (browser, system, internet address and last activity) and a record of your sign-ins, so you can review and end them under Login security.
What you do on the website: the commands you send (for example switching a group on or off, or sending resources), your support tickets and messages, and the alliances and notes you keep under Diplomacy.
Notes our team keeps about your account, for example about your order.
The groups assigned to you and what our bots report about them: game account IDs, their state, resources and activity. Game sign-in details are never shown on the website.

To run the service you ordered, show you your groups, keep your account secure, answer your support requests and prevent abuse.
We do not sell your data and we do not use it for advertising.

One cookie keeps you signed in. Scripts cannot read it and it is only sent to this website.
Whether you turned animations on or off is saved in your own browser.
We use no advertising, analytics or tracking cookies.

Cloudflare delivers and protects this website. It processes connection data such as your internet address.
Telegram carries the messages our bot sends you.
When we email you (to confirm your account, welcome you, reset a password or answer a ticket), the email service we use delivers that letter to your address.
Payments are arranged with us directly. This website stores no card or payment details.

Sign-in records: 180 days.
The activity log of your groups: 30 days. Hourly totals and stock readings: 90 days.
Signed-in devices: until you sign out, after 30 days without use, and never longer than 90 days.
One-time links for confirming, signing in and resetting a password: deleted one day after they expire.
Emails we sent you: the address, the subject and whether it was delivered, for 90 days. The text of the letter is not kept.
Your account, support tickets, commands and diplomacy records: as long as your account exists. Ask us and we delete the account with everything that belongs to it.

Sign out of any device, or of every other device, under Login security.
Change your name or password under Account.
Delete any of your diplomacy records and notes at any time.
To get a copy of your data, have it corrected, or close your account and have its data deleted, message us on Telegram.

If this policy changes, the date at the top changes too, and important changes are announced on the Announcements page.