Telegram Media Downloader Privacy Policy

1. Data processed by the extension

1.1 Telegram page and media data

• Source: the active https://web.telegram.org/* tab and its page runtime.
• Examples: current Telegram page URL and title, rendered media elements, media type, thumbnail or temporary object URL, filename, MIME type, size when available, chat name when available, peer ID, message ID and the runtime media descriptor needed for a download.
• Purpose: identify the correct media item, keep results scoped to the active tab and chat, resolve WebK/WebA media descriptors, show progress, construct a filename and complete a download.
• Not sent to ReForge analytics: Telegram media bytes, media URLs, chat names, message IDs, filenames, message bodies and thumbnails are not included in the product event payloads.

1.2 Local settings and history

• Settings: language, Downloads subfolder, filename template, concurrency, retry count and completion-notification preference.
• Local statistics: successful download totals, daily totals, batch totals, install/review counters and task state used to keep the interface consistent.
• History: up to 100 recent completed, cancelled or failed entries, which may include the final filename, Telegram page URL, chat name and media metadata so you can recognize an item and reopen the original page.
• Session state: the active-tab media registry, temporary page information, download tasks and batch progress use chrome.storage.session; terminal task records are cleaned up after the task lifecycle.

1.3 Data the extension does not request as a browser permission

• The manifest does not request cookies, browsingData, webRequest, nativeMessaging, unlimitedStorage or all-site host access.
• The extension does not intentionally read Telegram passwords, verification codes, Cookie values, browser history, payment card numbers or keystrokes as part of the download workflow. A verification code is handled only if you voluntarily use a future SDK account-login flow.

2. Chrome permissions and host access

storage

Stores the settings, local counters, current-tab registry, active task state and up to 100 local history entries described above.

downloads

Creates the local Chrome download after you click a single-item or batch download control, observes its state, supports cancellation and can open the file or containing folder from history.

tabs

Identifies the active Telegram Web tab, sends explicit download/rescan/cancel commands to that page, opens an original history URL and provides the WebK fallback shortcut. It is not used to collect unrelated browsing history.

notifications

Shows an optional local completion notification when you enable that setting. It can display a completion title or final filename.

https://web.telegram.org/*

Allows the content script to observe Telegram WebK/WebA DOM updates, add the user-facing controls, resolve media descriptors using the page runtime and perform same-origin media preparation. The extension does not use this host permission for unrelated sites.

ReForge service hosts

https://api.reforgeextensions.com/* is used by the SDK for product configuration and, only if you actively use a future account or subscription flow, login, verification, checkout or portal operations. https://reforgeextensions.cn-hangzhou.log.aliyuncs.com/* is used for SDK operational logging and explicit product events. These hosts do not receive Telegram media bytes or the Telegram page fields listed above as excluded analytics data.

3. Network processing and third parties

Telegram and its CDN

When you request a download, the browser obtains the media from Telegram’s page/runtime or the corresponding Telegram/CDN route. The extension may use same-origin range requests and temporary Blob URLs to make the file available to Chrome Downloads. ReForge does not proxy or store the media file.

ReForge API

The extension SDK can retrieve remote product configuration. If you voluntarily use account or subscription features when they are enabled, the API may process your email address, verification challenge/code, login state and subscription status. The current free configuration does not require an account to download media.

Operational logging

The SDK may send an install/update record and privacy-minimized user-action records containing categories such as extension version, browser/system type, language, product ID, event name, media type, source category or item count. The extension does not send Telegram URLs, chat names, message IDs, filenames, thumbnails or file bytes in these custom events. Automatic scanning, discovery and progress updates are not custom-tracked.

Reviews

After successful use and the configured review threshold, the SDK may show a review prompt. The SDK records whether the prompt was shown, rated, dismissed or redirected. If you voluntarily submit low-rating feedback, the reason you enter may be sent with that review submission.

Retention

Local data remains until you change or clear it, reset the extension or uninstall it, subject to Chrome’s storage behavior. Session data expires with the browser session or task cleanup. ReForge and logging-provider retention is based on the time reasonably necessary to provide configuration, security, support and operational logging services and to comply with law; this code audit does not establish a fixed server-side retention period.

4. Your choices and controls

• Use the extension’s settings to choose language, download folder, filename template, retries, concurrency and completion notifications.
• Cancel a single download or pause, resume and cancel a batch from the page controls or popup.
• Clear the local download history from Options. Clearing extension data or uninstalling removes the remaining local copy; files already saved in your Downloads folder are not automatically deleted.
• Do not use the optional account, checkout or portal features if you do not want to provide account-related information.
• Contact [email protected] for privacy questions, access or deletion requests relating to information you voluntarily provided to ReForge.

5. Security, children and updates

Network communication with ReForge service hosts uses HTTPS/TLS. The extension limits its host permission to Telegram Web and its own service endpoints and does not use media files as an analytics payload.

This product is not directed to children under 13. We may update this notice when the extension’s permissions, data flows or legal requirements change; the date at the top will be updated when the notice changes.

Telegram Media Downloader is an independent product and is not affiliated with Telegram. Use it only for media you own or are authorized to save.