Company

Privacy policy

What Talon stores, why, and what we never do with your data.

Last updated 6 November 2026. Plain language on purpose; ask a person if anything is unclear.

What we store

• Account: email address, a one-way password hash (PBKDF2), wallet balance and an API key.
• Orders: the public link you submit, the service, the quantity, the charge, the status and the timeline.
• Support: the email address, optional order id, message and any reply.
• Telegram: if you use the bot, the Telegram user id, so the same wallet can be reached there.
• Trial abuse checks: a one-way hash of the device id cookie, the /24 network of the signup IP, and the browser’s user-agent/language fingerprint. The raw IP and cookie value are not stored. This is used only to decide the $1 first-order trial.

Why we store it

To run your account and wallet, deliver the order, show its status, answer support messages and stop abuse. We do not use it for advertising and we do not sell it.

Who sees it

The supplier receives the public link and the quantity needed to deliver the order. Our hosting and database run on our own server; messages are visible to the person answering support. We do not run third-party analytics or advertising trackers on this site.

Cookies

Two first-party cookies: one keeps you signed in, one protects forms against cross-site requests. The form-protection cookie is a random per-browser value; its hash is also used, with an IP-network hash and a browser fingerprint, only to stop the $1 first-order trial being claimed repeatedly from one browser. No advertising cookies, no cross-site tracking. The Telegram script only loads the Telegram WebApp bridge when the site is opened inside Telegram.

Keeping and removing it

We keep order and wallet records while the account is active, because they are the record of what was bought. To ask what we hold, or to ask us to remove your account, write to talonpanel@gmail.com from the account email. Some records may need to be kept to resolve a payment or abuse case.

Security

Passwords are stored as hashes, never as text. The site is served over HTTPS. If you think an account or key is compromised, change the password and contact support; we can rotate the API key.

Also read: How prices are made · Terms · Privacy · Refunds

Talk to a person