Privacy Policy

What the bot stores

Everything is tied to Discord IDs (numbers that identify a server or user), not to real names.

• Server settings chosen by a server's admins: log, welcome and autorole channels and roles, the welcome message and card text, filter settings such as anti-link and the server's list of blocked words, its custom commands (their triggers and replies), and reaction role panels (which emoji gives which role, the ID of the person who set it up, and any banner image). Images uploaded for panels are stored by us and can be viewed by anyone with the link, since Discord has to load them.
• Economy data, per server: your coin balance, bank, debt, inventory and pets.
• Leveling data, per server: your XP, level and chosen rank card theme. If a server turns on its public leaderboard, your server nickname, profile picture, level and XP there can be seen by anyone at itzabot.dev/leaderboard. Your own levels, ranks and coins are shown to you (and only you) on your profile page when you're logged in.
• Giveaways: the prize, who hosted it, who entered and who won.
• Support tickets, per server: the ticket number and type, who opened, claimed and closed it, when, the close reason, and your answers to the ticket's questions. When a ticket closes, a transcript of its messages (names, profile pictures, message text and attachment links) may be saved in our database so the server's managers can view it on this dashboard, posted to the server's ticket log channel, and sent to you by DM if the server turned that on.
• Cooldowns: when you last used commands that have a cooldown.
• Bug reports you send with /bugreport: the text you write plus your Discord username, ID and profile picture, posted to a channel in our support server.
• Daily server activity for the dashboard's Stats tab: how many messages were sent, how many members joined and left, the member count, and how often each command was used, per server per day. These are counts only (no message text or user IDs) and are deleted after 90 days.
• Totals shown on our homepage: how many servers and users the bot is in and how many commands have been run. These are counts, not per-person records.

What the bot reads but doesn't keep

• Messages in servers it's in, to award XP, count daily activity, and apply the server's filters (for example removing links or blocked words). Message text isn't saved.
• Members joining and leaving, to send welcome cards, join and leave logs, and give autoroles, if the server has turned those on.
• Profile pictures and usernames, to draw welcome and rank cards.

What the website stores

You log in to the dashboard with Discord. We ask Discord only for your basic profile and the list of servers you're in, so we can show which ones you can manage.

• Your Discord ID, username, display name, profile picture link and when you last logged in.
• Discord login tokens, kept on our server and never sent to your browser, so the dashboard can load your server list. They're deleted when you log out.
• Two cookies: session, which keeps you logged in for up to 30 days, and oauth_state, which protects the login step and expires after 10 minutes.

To show the visitor count in the footer, each visit is counted once per day without cookies. We don't store your IP address: it's combined with your browser name into a one-way code, mixed with a random value that changes every day, so the code can't be turned back into your IP or linked across days. These codes are deleted after two days; only the total is kept.

The website has no ads and no third-party analytics or tracking scripts.

Who else is involved

We don't sell or share your data. A few services are involved in running ItzABot:

• Discord, which the bot and login run on. Discord's own privacy policy applies to your use of Discord.
• Our database and hosting providers, which store the data above.
• Cloudflare, which sits in front of itzabot.dev.
• Kitsu and OMDb: when you search with /media, your search text is sent to them to find the anime, film or show.

How long we keep it

Server and user data is kept while the bot is in that server, so things like balances and levels aren't lost. Website login data is removed when you log out. You can ask us to delete anything at any time (see below).

Your choices

• Delete your data: email [email protected] with your Discord user ID (or server ID, if you're a server owner) and we'll delete it.
• Stop the website's access: log out, or remove ItzABot under Discord's User Settings → Authorized Apps.
• Stop the bot: a server admin can remove ItzABot from the server at any time.

Age

ItzABot is for people who are allowed to use Discord, which means 13 or older (or the minimum age in your country, if that's higher).

Changes

If we change what we collect, we'll update this page and the date at the top. Also see our Terms of Service.