Workspace preferences
Settings
TelePilot keeps this prototype’s bot profiles in this browser. Tokens and webhook verification belong in a secure server environment.
Local browser data
Profiles and commands are saved using localStorage on this device only. Connect a backend database before using this pattern with a team.
Telegram credential safety
Never put a BotFather token in React code, localStorage, or a URL. Store it only in backend secrets and call Telegram’s Bot API from server-side functions.
This is why live message testing remains disabled until a secure backend endpoint is connected.