Privacy Policy

Effective date: [Set policy date]

Data used by the app

Community Bot receives Discord command interaction data, including server IDs, user identifiers, permissions, and command inputs, to process requests. It stores each server’s ID and configured greeting in its settings directory until the operator deletes that file. The starter does not store message history. Server managers can also store custom slash-command names, descriptions, configured message text, and destination channel IDs. These remain stored per application and server until removed by a manager or the operator. When invoked, the bot sends the configured message to the chosen destination.

Linked Roles

When enabled and authorized by you, the app temporarily uses an OAuth access token to publish an “account connected” status to Discord. The starter does not persist OAuth access or refresh tokens. A short-lived, single-use cookie and encrypted, persisted state protect the authorization flow; they expire after ten minutes. Your connection metadata remains with Discord until changed or disconnected there.

Configuration dashboard

When you sign in to the configuration dashboard, the app requests your Discord identity and server list to show servers you can manage. Your user identity, OAuth access and refresh tokens, and CSRF token are encrypted in the application database. Sessions expire after 24 hours of inactivity or seven days, whichever comes first. Expired records are removed during session maintenance. An HttpOnly cookie contains only an opaque session identifier. Signing out deletes the local session; it does not revoke Discord’s app authorization. Dashboard settings are stored with the same per-application and per-server data as slash-command settings. Last-selected servers are remembered for up to 90 days. The browser stores section preferences locally for up to 90 days and unsaved form drafts in tab-local session storage for up to 24 hours; these are cleared locally on sign-out. Explicitly authorized system administrators can manage servers where this app is installed.

Logs and service providers

The app logs startup information and errors, which may include command names, server IDs, and technical error details. Hosting providers may also process request metadata such as IP addresses. The operator must describe their chosen hosting providers and log retention here before publishing this policy.

Purpose and sharing

Data is used to run commands, save server settings, and provide requested role connections. The app communicates with Discord’s API to provide these functions. The starter includes no advertising or analytics integrations.

Your choices and deletion

You can stop use, remove the bot, or revoke the app’s authorization in Discord. Removing the bot does not automatically erase server settings. For deletion requests, contact [Set app contact] and identify the relevant server. The operator may need to verify your authority to request deletion.

Operator

[Set app operator] is responsible for operating this app and keeping this policy accurate as features and data practices change.