Privacy Policy
Last updated: September 29, 2026
This policy describes the privacy practices for the Discord bot operated by the owner of this website (“I,” “me,” or “the operator”). The bot is a personal project intended for my own use, not a public service.
Information the bot may process
When Discord delivers an interaction or command to the bot, the bot may process the Discord user ID and username, server and channel identifiers, and the command text or options needed to respond. It only receives message content, attachments, or other information when Discord provides them and a bot feature needs them.
How information is used
Information received by the bot is used to run its features, respond to commands, and keep the bot operational. I do not sell personal information or use it for advertising.
Storage and sharing
I do not intentionally maintain a separate profile or database of users’ personal information through this bot. Information needed to handle a command may be processed temporarily. The computer, hosting provider, or other infrastructure running the bot may produce technical logs; their retention depends on that environment.
If you submit a Hall Of Fame removal request, the username or user ID you provide, the related image name, your Yes/No response, any explanation you provide, and the UTC date and time are saved in a server-side text file for review. A Yes response requires an explanation of at least 500 words and no more than 5,500 characters. Basic anti-spam controls also use your IP address to enforce a short rate limit; only a one-way hash of the IP is stored in the private rate-limit file, and expired entries are pruned when later requests are submitted. Request files are not displayed on the website and may remain on the server until manually deleted.
The website's security controls keep short-lived, pseudonymous abuse records for invalid, cross-origin, or rate-limited API requests. These records contain a keyed hash combining the IP address and user-agent, separate keyed hashes of each, the API endpoint, a reason code, and the response status; the raw values are not included in these records. Old abuse records are deleted after 30 days. The site does not use canvas, font, or other high-entropy browser fingerprinting.
The hosting server keeps standard HTTP access logs with the request path (not its query string), status, IP address, and user-agent; these logs are rotated weekly. For security review, a separate access log also records query strings in a root-only directory, keeps two daily rotations, and is processed by the server's log transmitter. Only selected suspicious requests are forwarded over the encrypted Tailscale network to the operator's PC. Forwarded query parameters with names resembling credentials or personal contact information are redacted. The PC receiver stores suspicious request paths, IP addresses, and user-agent strings in its local database; ordinary successful browsing requests are not forwarded.
Discord processes information when you use Discord and deliver events to the bot. Its handling of that information is governed by Discord’s Privacy Policy. I do not control Discord’s data practices.
Retention and your choices
Because the bot is intended for my own use, it is not designed as a public service with user accounts or a self-service data dashboard. You can stop interacting with the bot at any time. If the bot is added to a server, its administrator can remove it or limit its access.
Policy updates
I may update this page if the bot’s features, code, or hosting change. The date above shows when it was last updated. This policy should be revised if the bot begins storing or otherwise using information in a new way.