Privacy

What is public, by design

An organisation’s team registry is public on ENSv2: member names (label.team.org.eth), roles, start dates, revocation dates and each member’s numeric Telegram ID attested by the organisation. That is what lets anyone verify a person without trusting Kakunin. Members appear on the registry only after they open an invite from their own Telegram account.

What Kakunin stores off-chain

• Per organisation: a directory of members’ Telegram numeric ID, current @username and display name (used to detect lookalikes and to refresh names), and the impersonation alerts raised by checks.
• Telegram accounts that administer an organisation (numeric ID).
• The organisation’s operator key, encrypted at rest.
• Short-lived rate-limit counters. No cookies, no analytics, no advertising identifiers.

Who can see what

Alerts and @usernames of a self-serve organisation are visible only to signed-in admins of that organisation. A check shows the person checked the verdict and, for verified members, the public proof.

Your choices

Members can be revoked at any time by their organisation. To remove your Telegram account from an organisation’s directory, ask its admins, or open an issue at github.com/SamirStream/kakunin. Data written to a blockchain cannot be deleted; revoking a name records the revocation.