1. Data controller
WEB OPUNA LTD, company number HE 461150, is responsible for Sezam VPN data processing. Address: Promachon Eleftherias, 1, 1st floor, Flat/Office 18/19, Agios Athanasios, 4103, Limassol, Cyprus. Website: sezamvpn.com. For data questions or support, email [email protected] or use Help in @sezamvpnbot.
2. Website data and analytics
The website records home-page views, pricing-page views and bot-link clicks on its own server. UTM tags and advertising click IDs in the URL, when present, are stored with the event type and a random visit ID. These parameters are carried between site pages in links.
If you allow campaign tag storage, we use the first-party sezam_attribution cookie for 14 days. It holds UTM tags, advertising click IDs, a random visit ID and, when present, an InsideAds referral parameter. New values replace matching older values; absent values remain until expiry. The sezam_campaign_consent cookie keeps your choice for up to 180 days. Declining does not stop the site from working, and you can change your choice at the bottom of any page. Declining deletes the campaign cookie, but current-link parameters and server-side events continue to be processed as described above.
A random token is created on a bot click for event matching. The bot does not currently accept that token from the site; an InsideAds parameter supported by the bot may pass through the link. The site loads no third-party advertising pixels. Hosting may process IP addresses and technical request details to deliver and protect the site.
3. Bot and support data
To provide access, the bot processes your Telegram ID, name and username if provided by Telegram, selected language, receipt email if required by the chosen payment method, access period and subscription link. It also records use of trials, promo codes, referrals and campaign parameters from a referral link.
To operate the VPN and assist customers, we keep first and most recent connection times and total data transferred. These figures are not a browsing history and do not contain message contents. Support messages and replies are processed when you contact us. Do not send passwords or full card details.
4. Payments and VPN operation
A purchase uses the selected plan, payment method, amount, currency, discount, payment status, order ID and transaction ID. Telegram and payment providers process information needed for their part of the service under their own rules.
A subscription identifier and technical connection information are used to provide VPN access. VPN servers may process IP addresses and DNS requests to route traffic; server software may also create technical logs for diagnostics and security. We do not claim that all logs are absent.
5. Retention and your rights
A bot-link token is valid for seven days. Website events older than 90 days are deleted on the next bot-link click; they may remain longer if no further clicks occur. Retention of bot, support, payment and infrastructure data depends on the processing purpose and applicable obligations.
Subject to applicable law, you may request access, correction or deletion of your data and exercise other available rights. Email [email protected]; you may also contact a competent data protection authority.