This Privacy Policy explains what information combat.guru ("combat.guru", "Combat Guru", "we", "us", or "our") collects when you play Combat Guru — a skill-based, player-versus-player fighting game that runs as a Telegram Mini App with an on-chain economy on TON — and how we use, share, and protect it. By opening the game or using our website, you agree to this Policy.
The short version. We only collect what the game needs to work: your basic Telegram account details, the TON wallet address you choose to connect, your gameplay, and standard technical logs. We don't ask for your email, phone number, or password. We don't sell your data, and we don't run third-party ad tracking. Payments happen on the public TON blockchain, which is permanent and outside our control.
Combat Guru is operated by the team behind combat.guru. The game is delivered through Telegram and is playable at @combatgurubot. For any privacy question, see Contact below. This Policy covers the Combat Guru Mini App and the combat.guru website; it does not cover Telegram, TON wallets, or other third-party services, which have their own privacy policies.
When you open the game, Telegram provides a signed initData package that we verify
cryptographically against our bot's token to confirm it genuinely came from Telegram. From it we
receive and store a small set of fields:
We do not receive or store your phone number, email address, Telegram password, contact list, or Telegram profile photo. Your in-game fighter avatars are generated by the game and are not your Telegram photo.
To make or receive on-chain payments (for example, entering paid battle pools, buying shop items, or minting a fighter), you can connect a TON wallet. When you do, we store your TON wallet address and associate it with your account. Payments, payouts, and fighter NFT actions are settled as transactions on the public TON blockchain — see Section 5.
We store the data that makes the game work and persist across sessions, including:
Like any online service, our servers automatically record limited technical information needed for security and reliability, such as your IP address (and the approximate region derived from it), device and browser/user-agent details, and request timestamps and server logs. We use this for authentication, rate-limiting, fraud and cheating prevention, debugging, and keeping the service available.
When you sign in, we issue your client a short-lived access token and a longer-lived refresh token. We store only a one-way hashed (SHA-256) form of the refresh token — never the raw token — so a database read alone cannot be used to impersonate you.
Where the EU/UK GDPR or similar laws apply, we rely on the following legal bases:
Important: transactions you make in Combat Guru — payments in GRAM, payouts, and fighter NFT mints or updates — are recorded on the public TON blockchain. This means the sending and receiving wallet addresses, amounts, and transaction hashes are public, permanent, and immutable. Anyone can view them, and we cannot edit, hide, or delete on-chain data — not even at your request. Please keep this in mind before transacting.
We do not sell your personal data and we do not use it for third-party advertising. We share data only as follows:
We do not use advertising or cross-site tracking cookies. The Mini App uses your device's local storage (within Telegram) to keep you signed in and remember in-game preferences. The combat.guru website is a static page that does not set tracking cookies.
Our Telegram bot may message you about gameplay — for example, when a match is ready or when a fighter has recovered. You control these: they require a chat with @combatgurubot, and you can stop them at any time by muting or blocking the bot in Telegram.
We keep your account and gameplay data while your account is active and for as long as needed to operate the game, resolve disputes, prevent fraud, and meet legal obligations. Technical logs are kept for a limited period for security and troubleshooting. On-chain data is permanent and outside our control. We may retain aggregated or anonymized data, which no longer identifies you, for longer.
We protect data in transit with HTTPS/TLS, store refresh tokens only in hashed form, restrict internal access, and run the game server as the authoritative source of truth for all combat outcomes to resist tampering. No online service can be completely secure, but we work to protect your information and to respond appropriately to any incident.
We operate on cloud infrastructure that may be located in countries other than yours. Where required, we take steps to ensure your data receives an appropriate level of protection when it is transferred and processed internationally.
Combat Guru is not directed to children. You must meet Telegram's minimum age requirement to use Telegram, and you must be old enough to enter a binding agreement and to use real-value crypto features in your jurisdiction (at least 18 where required for those features). We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.
Depending on where you live (for example, the EEA, UK, or California), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us via the channel in Section 16. Please note two limits: (1) we cannot alter or delete data that is already recorded on the public TON blockchain, and (2) we may need to retain some data to meet legal obligations or prevent fraud. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
The game links to and interacts with third-party services — including Telegram and TON wallet applications — that we do not control. Their handling of your data is governed by their own privacy policies, and we encourage you to review them.
We may update this Policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide notice in the game or through the Telegram bot. Your continued use of Combat Guru after an update means you accept the revised Policy.
If you have questions about this Policy or your data, the fastest way to reach us is through our Telegram bot, @combatgurubot.