Privacy Policy

Last updated: 10.09.2026

Note: this is a starting template, not legal advice. Replace the bracketed placeholders, and have a lawyer review it before relying on it for a real, public-facing service.

1. What we collect

We collect the minimum needed to run the Service:

From Discord, when you log in: your Discord user ID, username, display name, and avatar, plus an access token and refresh token so we can check which servers you're in and what permissions you hold there. Tokens are encrypted before being stored.
Servers and commands: the Discord server IDs and names the bot is installed in, and the Lumen scripts (commands) you write for a server, along with which Discord account last edited each one.
Server settings: if a server owner or admin chooses extra "manager roles," we store those role IDs against that server.
Bug reports: the title, description, and your Discord ID/username, if you submit one.
Session data: a cookie identifying your logged-in session. It doesn't contain your Discord credentials directly, just a reference to session data (like your account ID) kept on our server.

We don't collect message content from your server beyond what a command you wrote explicitly reads or stores (for example, splitting a triggering message into words inside your own script), and we don't run analytics or advertising trackers on this site.

2. How we use it

To let you log in and see which servers you can manage.
To run the commands you've written when their trigger fires in Discord.
To check permissions (are you an admin, owner, or in a manager role) before letting you change a server's commands or settings.
To follow up on bug reports, and optionally to post them to our internal Discord for tracking.

We don't sell your data, and we don't share it with third parties except Discord itself (since the Service is built on Discord's platform) and, for bug reports, our own internal Discord server if a webhook is configured.

3. How long we keep it

Account and token data: kept while you have an account, deleted (or you can request deletion) when you stop using the Service.
Commands and server settings: kept while the bot remains installed in that server, since they're what makes the bot work there.
Bug reports: kept for as long as needed to track and resolve them.

4. Your choices

You can revoke the Service's access to your Discord account at any time from your Discord account settings.
A server owner or admin can remove the bot from their server at any time, which stops the bot from running any commands there.
You can ask us to delete your account data by contacting us (see below). We'll do so unless we need to keep something for legal or security reasons.

5. Security

Discord access and refresh tokens are encrypted before being stored, rather than kept as plain text. As with any online service, we can't guarantee perfect security, but we take reasonable steps to protect your data.

6. Children's privacy

The Service is built on Discord, which requires users to meet Discord's own minimum age requirement. We don't knowingly collect data from anyone below that age.

7. Changes to this policy

We may update this policy from time to time. Significant changes will be noted here with an updated "Last updated" date.

8. Contact

Questions about this policy, or want your data deleted? Reach us at glaceevee@proton.me, or use the bug report form if you're logged in.