Privacy policy of the site bibi.gg and VPN telegram bot @bibi_fast_vpn_bot

The administration of the site bibi.gg and the telegram bot @bibi_fast_vpn_bot undertakes to maintain your privacy on the Internet. We attach great importance to the protection of the data you provide. Our privacy policy is based on the requirements of the European Union General Data Protection Regulation (GDPR). We collect personal data in order to: improve the operation of our service, communicate with visitors of the site, process user data for the online trading service, provide services related to the activity of this site, as well as for the following actions.

Important: this Privacy Policy describes the operation of bibi.gg and the Telegram bot @bibi_fast_vpn_bot
bibiVPN mobile app Privacy Policy is available here .

What data we collect and why

We collect only what the service cannot work without. We store:

  • Your account email address — for signing in with a code, service notifications and payment receipts.
  • Your payment history — amount, date, method, status and payment number. We never receive or store bank card details: payments are processed by YooKassa (NKO YooMoney LLC) and, in the iPhone app, also by Apple.
  • The app installation number and information about your account’s devices — platform, last sign-in time, access term and traffic volume — to grant access and the free trial. We do not record which websites you open through the VPN.
  • Your Telegram ID, username and Telegram profile name — if you use the Telegram bot (see “Telegram bot”).
  • Email addresses that requested a sign-in code but did not sign in — 30 days (see “Email address when signing in with a code”).
  • Marks of opening service emails and clicking links in them — 90 days (see “Service emails”).
  • Technical data of site visits and web analytics data (see “Use of technical data when visiting the site”).

This data is needed to provide the service: give you VPN access, accept payment, answer your requests and inform you about important account matters.


Data storage, modification and deletion

We keep your account email, device information and payment history while your account exists; payment records are also kept as long as needed for payment accounting and refunds. Retention periods for other data are given in the sections below. You may request information about your data, correct it, delete your account and withdraw your consent to processing — write to support@bibi.gg or to @bibi_vpn_support on Telegram. Who receives data and why is listed in “Use of personal data by other services”.


Telegram bot

When you open the Telegram bot @bibi_fast_vpn_bot, we store your Telegram ID, username (@username) and the name from your Telegram profile, the time and where you came to the bot from (for example, the website or an email). If you pay through the bot, we also note whether you reached the payment page and whether the payment went through. This is used for payment statistics and to help you if a payment fails. These records are kept while you use the bot. To have them deleted, write to support@bibi.gg or to @bibi_vpn_support on Telegram. The bot may send you messages about the bibiVPN service; you can opt out with the /stop command or by blocking the bot. Only the service administrator has access to these records. Payment records themselves are kept longer, as described in “Data storage, modification and deletion”.


Email address when signing in with a code

When you request a sign-in code by email — in the app, in the personal account on the website or in the Telegram bot — we store the email address, the time of the first and the last code request, the number of requests, where the request came from (app, website or bot) and the device type (Android, Windows or Apple), if it can be determined from the technical data of the request. The record is kept even if the code is never entered. It helps us assist you when you contact support, see at which step signing in fails and remind you about an unfinished sign-in. If signing in is not finished, the service administrator may send a reminder email to this address — no more than once every 7 days and only while the record is kept; every email contains an unsubscribe link, and you can also unsubscribe with the button in your email app. For this the record also keeps the time of the last email, the number of emails, the unsubscribe date and the date the mail server rejected the email. The record is kept for 30 days after the last code request and is then deleted. If you unsubscribed or the address does not exist, we keep indefinitely only its one-way fingerprint (hash), the date and the reason, without the address itself, so as not to write to it again. Only the service administrator has access to these records. Your IP address is not included in them: to protect against code guessing, only its hash is used in a temporary counter that expires on its own within a day.

Service emails

We send service emails to your account address — for example, that access is about to end or has ended, that a payment went through or was not completed — as well as emails sent by the service administrator. Every such email except the payment confirmation contains an “unsubscribe” link; you can also unsubscribe with the button in your email app. To know whether an important notice reached you, the email contains an invisible image: when your email app loads it, we record that the email was opened and the time of the first opening. Links and buttons in such emails go through an api.bibi.gg address and open the target page right away; we record which link was clicked and the time of the first click. The “unsubscribe” link is not tracked. Opening and click marks are kept for 90 days and then deleted; no IP address, device or browser data is stored. Some email apps load images on their own, so the mark is approximate. If you block image loading in your email app, there will be no mark. Emails with a sign-in code, payment confirmations and reminders about an unfinished sign-in contain neither such an image nor click tracking.

Use of technical data when visiting the site

When you visit the site bibi.gg, records about your IP address, time of visit, browser settings, operating system, as well as other technical information necessary for the correct display of the site's content are stored in the database. Based on this data, it is impossible for us to identify the identity of the visitor.

The site bibi.gg uses web analytics and ad measurement services: Yandex Metrica (Yandex LLC) and the Google Ads tag (Google LLC). They store cookies in your browser and receive information about the visit: IP address, browser and device data, pages viewed, the referring source (including ad tags), on-page actions and, for Yandex Metrica, a recording of actions (Session Replay). This information is used for visit statistics and ad measurement; on payment, the amount and the payment number are passed, but not your email address. The contents of the email and sign-in code fields and the data of the personal account are not included in the Session Replay recording. By continuing to use the site you agree to this processing; you can opt out by blocking cookies in your browser settings. See the Yandex Metrica terms and how Google uses cookies in advertising.


Providing information to children

If you are a parent or guardian and you are aware that your children have provided us with their personal information without your consent, please contact us. On our service it is forbidden to leave personal data of minors without the consent of parents or guardians.


Use of cookies

We use cookies to provide the content of the site correctly and for the convenience of using the site bibi.gg. These are small files that are stored on your device. They help the site remember information about you, such as in which language you visit the site in and which pages you have already opened. This information will be useful on your next visit. Thanks to cookies, the website’s browsing becomes much more convenient. You can configure your browser to accept or block cookies by yourself. Failure to accept cookies may limit the functionality of the site.


Use of personal data by other services

To run the service we use third-party services that receive part of the data:

  • YooKassa (NKO YooMoney LLC) — payment processing; receives the amount, the payment number and the data needed for the payment and the receipt. You enter card details on its page.
  • Apple — in-app payment in the iPhone app via the App Store.
  • Telegram — if you use our bot or contact support on Telegram.
  • Yandex Metrica (Yandex LLC) and the Google Ads tag (Google LLC) — site visit statistics and ad measurement (see “Use of technical data when visiting the site”).
  • The email service we send emails through — receives the address and the email text.

These organisations process data under their own rules, available on their websites. We do not pass personal data to other organisations, except when lawfully required by authorised public authorities.


Links to other sites

Our bibi.gg website may contain links to other websites that are not operated by us. We are not responsible for their content. We encourage you to read the privacy policy of each site you visit, if available.


Changes to the privacy policy

Our website bibi.gg may update our privacy policy from time to time. We will notify you of any material change in this privacy policy. We monitor amendments in legislation relating to personal data in the European Union. If you have provided us your personal data, we will notify you of any change in the privacy policy. If you provided your personal data incorrectly, we will not be able to contact you.


Feedback, final clauses

You can contact the administration of the site bibi.gg regarding any questions related to the privacy policy using the contact information in the relevant section of this site. If you do not agree with this privacy policy, you may not use the services of the bibi.gg site, in which case you should refrain from visiting our site.