Discord bot privacy
What the bot stores, why, and for how long.
What is stored
- For each server: its id, name, icon, member count, language, settings (channels, roles, daily games hour, welcome and goodbye message texts) and the list of announcements already posted.
- For the daily games leaderboards: the player's Discord id and name, the day, the game and the score.
- For statistics: the name of each command used, the server, the language, the duration and whether it worked. No user id.
- For statistics: the Discord id of people who vote for the bot on a bot list.
What is not stored
The bot does not read message content and does not download the member list. When someone joins or leaves a server, Discord tells the bot (the Server Members intent): that event is only used to post the welcome or goodbye message, if the server turned it on, and nothing about that member is stored. No Discord token is kept: logging in to the dashboard only reads your id, then the token is dropped.
Auto-roles: if the server chose some, the bot gives those roles to whoever joins, with the Manage Roles permission the server's admins grant it; a member who still has to accept the server's rules is only remembered (their id, in memory, for 24 hours at most) until they do, and nothing is saved.
Role menus: for each menu, the server's choice of channel, title, text, roles with their labels and emojis, the id of the published message and the Discord id of the manager who set it up are stored. When a member uses one, the bot gives or removes the role and keeps nothing about them, apart from an in-memory counter, a few seconds long, that limits changes made too close together.
Dashboard login
Logging in with Discord sets an encrypted session cookie (mlbbdex_discord, httpOnly, 7 days) holding your Discord id, name and avatar, and a temporary cookie (mlbbdex_discord_oauth, 10 minutes) during the login. Both are strictly necessary for the service you ask for.
Retention
When the bot leaves a server, its data is deleted 30 days later, along with its players' results (if the bot comes back within that time, the settings are still there). Command statistics are deleted after 90 days.
Your rights
To see or delete the data tied to your Discord id or your server, write to contact@leoderoin.fr. Removing the bot from the server starts the automatic deletion.