How we handle data
Version of November 5, 2026
BlueWave operates without a legal entity. We receive the data described below on bluewave.help, in Telegram and while working with ad accounts. Data questions: [email protected].
On the site
There are no forms, no sign-up and no ad trackers. The site sets no cookies.
- Visit statistics (Umami). We count visits and clicks: page address, where you came from, browser, OS, device, country by IP, taps on “Message a manager”, FAQ questions opened, language switches. We don’t store the IP: it is combined with browser data into a one-day hash, so one day’s visits from one person count as one visitor. We see only totals. Umami is not connected yet; we’ll add statistics later.
- Hosting. The site runs on Cloudflare Pages. The host records IP, request time, page and browser, so the site works and holds off attacks. Cloudflare sets how long these logs are kept, and we can’t change it.
- Theme. Light or dark is kept in your browser’s localStorage and never reaches us.
In Telegram
The buttons on the site open a private chat with the manager and fill in the first message. Until you press “Send”, we receive nothing. The message text sits in the t.me link, so Telegram can see it.
When you write, we receive your name, @username, ID, profile photo if it is public, and everything you tell us: spend, platforms, verticals, business manager and pixel IDs.
Telegram stores data under its own rules: telegram.org/privacy.
While we work together
- Payments. Your wallet address, transaction hash, amount, network. The blockchain is public, and nobody can delete a record from it.
- Group. Your members (names, @usernames) and the conversation. The group includes managers, team leads and the CEO.
- Ad accounts. They are registered to the agency, so campaigns, creatives, spend, statistics, connected business managers and pixels are visible to us. We use this for top-ups, replacement, balance transfer and calculating the rate. Data about visitors to your landing pages is collected by your pixels; we don’t export or use it.
We don’t ask for passports, documents, codes or passwords to personal accounts.
Why and who gets it
We answer requests, agree terms, deliver and top up ad accounts, calculate the rate, protect the site from attacks and see which buttons work. We send no mailings and we don’t sell data.
Data goes to:
- Telegram, which we use to talk to you;
- the platforms (Meta, TikTok, Google, Bing Ads, X, Telegram Ads), as far as the account needs it to work;
- Cloudflare as host and, once connected, statistics provider;
- public authorities, if the law requires it and the request is lawful.
Inside BlueWave, access is limited to the managers, team leads and management who handle your account.
How long we keep it
We keep conversations and payment data for 12 months, then delete them. Statistics stay only in aggregate form.
Blockchain records can’t be deleted.
Your rights
You can ask what we hold about you, ask us to correct or delete data, and object to processing. Write to [email protected], preferably from the same Telegram account the conversation ran on, so we can confirm the request is yours. We reply within a month.
If you are in the EU or Russia and think we broke the law, you can complain to the supervisory authority in your country.
Security
The site runs over HTTPS. Access to data is limited to people who need it for work. If a leak happens that could harm you, we’ll tell you in the chat right away.
Age
The service is for people who are 18 or older. We don’t knowingly collect data from minors.
Changes
A new version applies from its publication date. We tell clients about material changes in their group.
Contacts
Data: [email protected] Manager on Telegram: @bluewave_mngr