TeleDrop — Privacy Policy

Last updated: 2026-09-26

TeleDrop is a Chrome extension that helps the user find and download media from the currently open Telegram Web page. It runs only on https://web.telegram.org/. It is not affiliated with Telegram.

This policy describes how TeleDrop handles user data, including website content processed only on the device. Chrome Web Store rules require this disclosure even when nothing is sent to the developer.

Single purpose

TeleDrop’s only purpose is to scan media in the open Telegram Web chat (and open Info tabs) and let the user download selected items. User data is used only for that purpose. TeleDrop does not use user data for advertising, analytics, profiling, or resale.

The use of information handled by this extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Data handled on the device

The extension reads information already available to the Telegram Web page in the user’s logged-in session. It does not scrape the left chat list or load the full chat history by itself. It may handle:

• Telegram message identifiers present in the page (mid, peerId, docId)
• Media metadata such as type, filename, size, dimensions, or duration when Telegram Web exposes them
• Media URLs, blobs, canvas thumbnails, or other previews already in the page
• Media in the open chat, including photos or files that Telegram has not auto-downloaded (placeholders the user would otherwise click to load). Those items are identified from the page DOM; the original file is requested from Telegram only if the user starts a download
• When the user opens them, Telegram Web Info tabs such as Photos, Files, and Stories
• When the user enables those options, avatars / profile pictures and website link-preview media that Telegram Web already shows

This is website content processed locally in the browser. TeleDrop does not operate a developer-controlled server and does not send chat messages, media files, contacts, cookies, or account credentials to any developer-controlled server.

Requests to Telegram, not to the developer

Traffic that leaves the device for this product goes to Telegram (or another site the user opens), over HTTPS in the existing browser session. It is not sent to the TeleDrop developer.

When the user starts a download (including Download, Download RAR, or a TeleDrop download button), the extension may request the original file from Telegram using the download manager of the Telegram Web client that is open (Web K or Web A) or a media URL already on the page.

While scanning, the extension may also ask Telegram Web for a small preview thumbnail or filename/size from the in-page message store, so the scanner can list items that are on screen but not fully loaded. That uses the same Telegram session. It does not upload chat content to the developer.

The extension may read the browser UI language on the device to pick a translation when language is set to Automatic. That value stays on the device.

Local storage and retention

Preferences are stored only on the user’s device with Chrome’s storage.local API. They never leave the device through this extension. This may include:

• Interface language preference
• Default scan filters
• Whether automatic scan is enabled
• Whether download buttons are shown on media
• Whether profile photos and link-preview media are included in scans
• Last scanner layout (large thumbnails, compact thumbnails, or details)
• Position of the floating scanner button on the page
• How many files were saved by Download selected or Download RAR when that batch was not cancelled and had no failures, and how many of those batches finished cleanly. TeleDrop uses this only to decide when an optional store-rating dialog may appear
• How many times that dialog was postponed, whether it was dismissed for the current version, and the extension version those counters belong to. When TeleDrop updates to another version, the postpone and that version-only dismiss start over on the device
• If the user closes that dialog without choosing, the clean-batch count at that moment, so it can appear again after the next successful download. That count stays on the device and is not sent anywhere
• Whether the user chose Rate, on the dialog or from Help. That choice stays on the device across updates so the dialog is not shown again

The rating-dialog counters are not analytics and are not sent to the developer. The in-page scan list lives in memory for that Telegram Web tab and is discarded when the tab is closed or the page is reloaded. Preferences remain until the user changes them or uninstalls TeleDrop. Uninstalling the extension deletes this storage. The developer cannot access or remotely delete data on the user’s computer.

Permissions

• storage — preferences and the local rating-dialog counters listed above
• downloads — detect when a save TeleDrop started has finished or failed, so batch downloads stay sequential
• Host access to https://web.telegram.org/* — scanner UI and download bridge; no other sites

MAIN-world script

A content script runs in the page’s MAIN JavaScript world so TeleDrop can use Telegram Web objects already in that page. On Web K that is mtprotoMessagePort and appDownloadManager. On Web A that is the client’s in-page state (getGlobal / getActions().downloadMedia) and media download URLs. That is used to:

• Read message metadata and preview thumbs for the scanner list
• Download the original file after the user clicks Download, Download RAR, or a TeleDrop download button (chat media, Stories viewer, or media viewer)

It is not used to collect, store, or send chat content, contacts, or credentials to the developer.

Downloads

Files are saved to the user’s computer by the browser or by Telegram Web. Optional RAR packaging happens locally in the browser.

The extension uses Chrome’s downloads API only to see when a save that TeleDrop started has finished (so batch downloads stay sequential) or was interrupted. It does not read the contents of downloaded files, and it does not start, cancel, or change unrelated downloads.

Third parties

The extension does not sell user data and does not include advertising, analytics, or crash-reporting SDKs. Telegram Web remains subject to Telegram’s own privacy policy and terms. Download and preview traffic to Telegram is described above.

If the user taps Buy me a coffee, the browser opens Buy Me a Coffee (buymeacoffee.com/onimock) in a new tab. That site has its own privacy policy. TeleDrop does not send chat or media data there.

If the user chooses Rate on the dialog or the Rate link in Help, the browser opens this extension’s reviews page on the Chrome Web Store (chromewebstore.google.com) in a new tab. Opening that page does not send Telegram chat or media, and TeleDrop does not learn whether a review was published.

Children

TeleDrop is not directed at children under 13 and does not knowingly collect personal information from children.

Changes

If this policy changes, the date at the top is updated. Continued use of the extension after an update means the new policy applies to later use.

Contact

Questions about this policy or the extension: onimock@gmail.com.