Session string is very sensitive data, people who have your session string could login your account and can do anything to your Telegram account. Be sure to keep it private and safe.
Session string is only for people who deploy it on Heroku, you don't need it if you run this userbot on your cloud server or VPS because the session is saved as session_name.session file.
When you deploy it to Heroku, you see this
The README
api_id
andapi_hash
should be get from https://my.telegram.org/apps as mentioned on Heroku deployment page or the READMEAlternatively you can use replit to run codes to get the session string, but use it at your own risk, here is one if you want to try https://repl.it/@Leorio/stringsessiongen#main.py
Session string is very sensitive data, people who have your session string could login your account and can do anything to your Telegram account. Be sure to keep it private and safe.
Session string is only for people who deploy it on Heroku, you don't need it if you run this userbot on your cloud server or VPS because the session is saved as
session_name.session
file.