Link your Kanapka account

This is unofficial automation using recovered APIs. It is not endorsed by Kanapka. Compatibility may break and your account could be restricted or sanctioned.

This deployment is an auth preview: it does not place orders or send order reminders. The planned service enables both features by default: reminders Monday/Wednesday at noon, 15:00 and 20:00, ordering at 21:00 (Europe/Warsaw), catching up until the earlier of 23:00 or the verified cutoff minus a safety margin. It selects one random fully subsidized item from “Launches”. Separate controls and skip will be provided before ordering is enabled. That release will require updated consent.

Automation may fail, be delayed, or have an uncertain result. Unknown submissions require reconciliation; do not blindly retry them.

The browser handles your password and sends it to Google. The Pi stores an encrypted refresh token granting ongoing account access. Compromised page hosting/browser code can steal credentials; a compromised Pi can misuse linked accounts, potentially including account changes. Encryption does not prevent host compromise.

Telegram sees bot messages, metadata and enrollment links. Fallback codes contain encrypted tokens. Logout deletes the bot’s local tokens, not Google sessions; your phone remains signed in. Audit records last 30 days; future resolved order records last 14 days. There are no backups: storage loss requires new approval and login. Remote orders survive local loss. The Pi and Quick Tunnel have no availability guarantee.