TGLUX ("we", "us") operates a social-media-marketing (SMM) panel. This policy explains what we collect and how we use it.
Information we collect
Account details you provide: username and email address.
If you sign in with Google or Telegram, we receive your basic profile (name, email or Telegram ID) to create and identify your account.
Order and payment records needed to provide the service.
Basic technical data such as IP address and browser, used for security and fraud prevention. Our web server's request logs, which record the IP address, browser and page requested, are kept for no more than 90 days.
How we use it
To create your account, process orders and deposits, and provide support.
To secure the platform and prevent abuse.
We do not sell your personal information.
Third parties
We share only what is necessary with payment providers and service providers used to fulfil your orders. Authentication providers (Google, Telegram) process your sign-in according to their own policies.
After you have placed an order we may invite you, once, to review us on Trustpilot. To send that invitation we share your name or username, your email address and an order reference with Trustpilot, which sends the email on our behalf under its own privacy policy. Every customer is invited on the same terms whatever their experience, nothing is offered in return for a review, and each invitation carries an unsubscribe link.
Analytics and cookies
We run no advertising and no advertising trackers.
Cookies we set
smm_session — keeps you signed in, remembers the language you picked, holds the result of the “I'm not a robot” check, and protects forms against forgery. It is set for every visitor, contains only a random identifier, and is deleted when you close your browser. The robot check sets no cookie of its own.
tglux_rm — only if you tick “Remember me” when signing in. It keeps you signed in on that browser for up to 30 days, holds a random token rather than your password, and is removed when you sign out.
ui_mode — only if you use the light/dark switch inside your account. It remembers that choice for one year.
_ga and _ga_… — Google Analytics cookies, set only on the public pages and only as described under “Visitor statistics” below. They hold a random identifier and last up to two years.
tglux_staff — set only for our own staff accounts, so that our own visits are left out of the statistics.
Your browser may also keep copies of the site's static files (styles, scripts, fonts and images, including images you open in your support tickets) so pages load faster and the site can be installed as an app, and the sign-in animation briefly stores a timestamp in your browser's session storage.
Visitor statistics
Our public pages (home, services, catalogue, blog, about, these legal pages, sign-in, sign-up and the API documentation) load Cloudflare Web Analytics, which counts page visits. According to Cloudflare it sets no cookies and keeps no identifier in your browser; it reports the page visited, the referring page, basic browser and device information and page-load timings. It is not loaded inside your account area.
The same public pages also use Google Analytics 4 to show us which pages are read and where visitors come from. We set it up to collect as little as possible:
If you are in the EU/EEA, the UK or Switzerland (or we cannot tell where you are), nothing is sent to Google and no Google Analytics cookie is set until you press “Accept” on the banner. Everywhere else it loads when the page opens, and you can switch it off with the button below.
It receives the address of the page without anything after the “?” (campaign tags aside), the site you came from, and the approximate country, device and browser that Google Analytics derives. Google Analytics 4 does not store IP addresses.
All advertising features are off: no Google signals, no ad personalisation, no user-provided data.
It never loads inside your account area, in the admin area, on a reseller's site, or for our own staff.
Your choice for this browser: Google Analytics allowed unless you are in the EU/EEA, the UK or Switzerland.
Other services that load on our pages
Cloudflare — all traffic to this site passes through Cloudflare, which protects it against attacks and abuse and may set strictly necessary security cookies, for example when it asks your browser to pass a bot check.
Live chat (Tawk.to) — when enabled, the chat widget loads only while you are signed in. The chat provider may set its own cookies, and it handles what you type into the chat under its own privacy policy.
Contact button — the floating contact button links to our Telegram and WhatsApp. Nothing is loaded from those services unless you follow a link.
Charts — the charts inside your account load a script from cdnjs, a public library CDN run by Cloudflare.
Google and Telegram sign-in — when these buttons are offered, “Continue with Google” takes you to Google's own sign-in page and back, and the Telegram button loads a script from telegram.org on the sign-in and sign-up pages.
Google Fonts — our pages use Google Fonts typefaces, so your browser may fetch them from Google's servers, which then see your IP address.
Data retention & your rights
We keep account and transaction data while your account is active and as required for records. You may request deletion of your account by contacting us.
