Privacy Policy

Last updated: June 25, 2026

This Privacy Policy explains what CrystalSaver ("we", "us") collects when you use the CrystalSaver browser extension and crystalsaver.com (the "Service"), how we use it, and the choices you have.

                Your downloads stay private. The media you download is transferred directly from Telegram to your own device, inside your browser. Your files never pass through or get stored on our servers, and we never ask for or access your Telegram password, login code, messages, or contacts.
            

1. Information we collect

Account data — your name, email address, and a securely hashed password.
Usage data — download events tied to your account (a counter, timestamp, and media type) so we can enforce plan limits and understand overall usage. We do not record which specific files, chats, or channels you download from.
Email preferences — whether you've opted in to product updates and marketing emails.
Authentication tokens — stored in your browser (extension storage / local storage) to keep you signed in.
Billing data — if you subscribe to Pro, payments are handled by our Merchant of Record, Lemon Squeezy. We receive your subscription status but never see or store your full card details.

2. What we do not collect

The contents of your downloads or the media files themselves.
Your Telegram credentials, messages, contacts, or chat history.
Browsing activity outside of what's needed to operate the Service.

3. How we use your information

To provide and maintain the Service and your account;
To enforce free-plan limits and provide Pro features;
To process subscriptions and payments (via Lemon Squeezy);
To understand aggregate usage and improve the product;
To send you service and security messages, and — only with your consent — marketing emails.

4. Sharing your information

We do not sell your personal data. We share it only with service providers who help us run the Service:

Lemon Squeezy — our Merchant of Record / payment processor for Pro subscriptions;
Email/mailing provider — only if you opt in to marketing emails;
Authorities, where required by law.

5. Cookies & local storage

We use browser storage (local storage and extension storage) to keep your session and remember your settings. We do not use third-party advertising cookies.

6. Data retention

We keep your account and usage data for as long as your account is active. If you delete your account, we remove your personal data, except where we must retain limited records to comply with legal or accounting obligations.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for marketing at any time. You can:

Update your profile and email preferences from your account dashboard;
Cancel your subscription from your account dashboard;
Request access or deletion by emailing us.

8. Security

We use reasonable technical and organizational measures to protect your data, including password hashing and encrypted connections. No method of transmission or storage is 100% secure, but we work to safeguard your information.

9. Children

The Service is not intended for anyone under 16, and we do not knowingly collect data from children.

10. International transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version. Significant changes will be communicated where appropriate.

12. Contact

Questions or requests about your privacy? Contact us at privacy@crystalsaver.com.