PRIVACY

What LittleJohn keeps, and why.

In plain English: what’s collected when your group uses LittleJohn, who can see it, and how to have it deleted. Last updated 26 September 2026.

THE SHORT VERSION

The short version

  • We never store what anyone writes in a group. The bot counts messages to award chat points; it doesn’t keep them.
  • Your group’s admins can see your points, your activity and anything you choose to share — like an email or a wallet — because running the group’s rewards is what LittleJohn is for.
  • Each group’s data is kept separately. Admins of one group can’t see another group’s members.
  • We don’t sell data, and we never post on X as you.
  • Want your data deleted? Email hello@littlejohnbot.xyz.
IF YOU’RE IN A GROUP

What we keep about members

From Telegram

Your Telegram ID, username, name and language setting, and whether you have Telegram Premium — the details Telegram shares with every bot you use.

From what you do in the group

  • When you join or leave, and whose invite link you used.
  • How many messages you send each day — the count, never the words.
  • Check-ins, the commands and buttons you use, and when you were last active.
  • Your points, invites, rank and streak.

What you choose to give

  • A nickname, your X handle and your email, if you answer the optional profile questions.
  • A wallet address, if your group collects them.
  • Links to X posts you submit for a reward.

If you connect your X account

Your X account ID and username, and the sign-in tokens X gives us, stored encrypted. The connection is read-only: we use it only to confirm you replied to a raid, and we never post as you. When we check a raid, we read the public replies to that post and keep, for each, only its length and a fingerprint to spot copies — not the reply itself.

What we look up but don’t keep

When one of your group’s admins opens your profile in their dashboard, your Telegram profile photo and bio are fetched from Telegram to show them. They aren’t stored.

IF YOU RUN A GROUP

What we keep about admins

  • Your Telegram ID, which is how you sign in to your group’s dashboard — or an email and a securely hashed password, if you use one.
  • Your sign-in sessions, with the browser and IP address they came from, so they can be checked and signed out.
  • A log of the actions you take in the dashboard, so your group can see who changed what.
  • Your group’s settings and wording, and — if you connect one — your X developer app’s keys, stored encrypted.
WHAT WE DON’T DO

What we never do

  • Store the text of messages in your group.
  • See your other chats or groups — Telegram doesn’t let any bot do that. When you share your link, you choose where it goes.
  • Post, like or reply on X as you.
  • Sell or rent anyone’s data, or use it for advertising.
WHO CAN SEE IT

Who can see it

  • Your group’s admins, in their dashboard and in the member export. That includes the email and wallet you chose to share, because paying rewards is what they’re for.
  • The LittleJohn team, when it’s needed to run the service, fix a problem or stop abuse.
  • The companies that host LittleJohn for us, who store it on our behalf and may not use it for anything else.

Admins of one group can’t see another group’s members, points or settings — every group’s data is kept separately.

HOW LONG

How long it’s kept

For as long as your group uses LittleJohn, so points and invites keep adding up. If you leave a group, you drop off its leaderboard straight away; your record stays so points come back if you return, until you ask us to delete it. If a group stops using LittleJohn, its admins can ask us to delete everything for that group.

YOUR CHOICES

Your choices

  • Skip any profile question — they’re all optional.
  • Change your wallet at any time with /wallet.
  • Stop using the bot at any time; it only messages people who have opened it.
  • Ask for a copy of what we hold about you, or for it to be deleted, by emailing hello@littlejohnbot.xyz from the address you gave, or telling us your Telegram username. We’ll reply within 30 days.
KEEPING IT SAFE

Keeping it safe

Sign-in tokens and API keys are encrypted. Every group’s data is stored separately. Anything that changes a group — its settings, its wording, a reward decision — is checked with Telegram, at that moment, to make sure the person is really one of its admins.

CHANGES

Changes to this page

If what we collect or how we use it changes, we’ll update this page and the date at the top. Questions: hello@littlejohnbot.xyz.