Link your Kanapka account

This is unofficial automation using recovered APIs. It is not endorsed by Kanapka. Compatibility may break and your account could be restricted or sanctioned.

The service can send reminders Monday/Wednesday at noon, 15:00 and 20:00, and order at 21:00 (Europe/Warsaw), catching up until the earlier of 23:00 or the verified cutoff minus a safety margin. It selects one random fully subsidized item from “Launches”, quantity one. Both preference switches start enabled for new accounts; separate Telegram buttons disable either feature or skip a delivery date. Administrator rollout approval, verified configuration and global ordering gates also apply. Existing auth-preview accounts remain inactive until explicitly activated and have reminders and auto-order off.

Automation may fail, be delayed, or have an uncertain result. Unknown submissions require reconciliation; do not blindly retry them.

The browser handles your password and sends it to Google. The Pi stores an encrypted refresh token granting ongoing account access. Compromised page hosting/browser code can steal credentials; a compromised Pi can misuse linked accounts, potentially including account changes. Encryption does not prevent host compromise.

Telegram sees bot messages, metadata and enrollment links. Fallback codes contain encrypted tokens. Logout deletes the bot’s local tokens, not Google sessions; your phone remains signed in. Audit records last 30 days; future resolved order records last 14 days. There are no backups: storage loss requires new approval and login. Remote orders survive local loss. The Pi and Quick Tunnel have no availability guarantee.