Privacy Policy

Effective and last updated: 26 July 2026

1. Controller and contact

2. Data processed

• Discord server, channel, user, and message IDs;
• selected target language;
• server settings, plan status, and monthly character usage;
• message text when a user actively requests translation;
• translated text, target language, and detected source language in a temporary cache;
• technical logs needed for security and troubleshooting;
• privacy-preserving technical incident reports, including an incident reference, bot version, error category, sanitized diagnostic information, runtime information, and—if configured—a salted pseudonymous server fingerprint;
• support reports voluntarily submitted through the Discord command, including the selected category and text deliberately entered by the user;
• Discord user, server, and message IDs temporarily held in process memory for cooldowns, duplicate-request detection, concurrency control, burst detection, and temporary anti-abuse blocks;
• contact-form information such as name, email address, subject, message, and optional Discord IDs.

The bot does not request Discord passwords, payment credentials, postal addresses, or phone numbers.

3. Message content

In enabled channels the bot observes new messages so it can add a Translate button. Message text is sent to the translation provider only after a user actively clicks Translate or uses the message translation command.

Automatic technical incident reports are designed not to include message text, translated text, usernames, raw Discord user IDs, raw server IDs, channel names, or server names. A voluntarily submitted support report contains the text the user deliberately enters. Users should not submit passwords, tokens, API keys, payment details, or special-category personal data.

4. Purposes

• provide private machine translations;
• remember user languages and server settings;
• enforce plan limits and protect the shared translation quota through cooldowns, duplicate-request detection, concurrency controls, burst detection, and temporary blocks;
• reduce repeated API costs through caching;
• secure, troubleshoot, and operate the service through minimized technical incident reports;
• respond to support and privacy requests.

5. Legal bases

Processing is carried out where necessary to provide functionality requested by users or server administrators and for legitimate interests in operating, securing, and improving the service. Where consent is legally required, processing will take place only after consent.

6. Service providers

• Discord provides the platform and application API;
• DeepL receives text selected for translation;
• Railway hosts the bot and PostgreSQL database;
• GitHub Pages hosts these legal pages;
• Formspree, when the contact form is activated, receives form submissions and forwards them to the operator.

Data is not sold to advertisers or data brokers.

7. Retention

• User languages and server settings are retained while needed to provide the service.
• Server-specific configuration, user preferences, and usage data are removed when the bot is removed from that server, subject to backups and technical retention periods.
• Cached translations are intended to be deleted after approximately 30 days.
• Technical logs are retained only as long as reasonably necessary.
• Anti-abuse identifiers and counters are held only in bot-process memory, expire automatically according to the configured cooldown, duplicate, request-window, or temporary-block periods, and are cleared when the process restarts.
• Automatic technical incident reports in the private support channel are generally deleted within 90 days unless longer retention is required to investigate a continuing security or reliability problem.
• User-submitted support and contact enquiries are generally retained until the request is resolved and, where appropriate, for up to 12 months afterwards unless legal obligations require longer retention.

8. International processing

Service providers may process data outside the user's country. Where required, appropriate transfer safeguards are used by the relevant provider.

9. User rights

Depending on applicable law, users may request access, correction, deletion, restriction, portability, or objection and may complain to a competent data protection authority.

10. Discord issue reports, contact form, and data requests

The optional /report-issue command opens a private Discord form. The resulting support-channel message does not attach the reporter's username or Discord user ID. The user's Discord user ID is used temporarily in memory only to enforce an anti-spam cooldown and is not persisted for that purpose.

The contact form is voluntary. Required fields are marked accordingly. Its information is used only to process and answer the request. Do not submit passwords, tokens, API keys, payment information, or special-category personal data.

Email acciento89@gmail.com and include your Discord user ID and, where relevant, the server ID. Never send a password, bot token, or API key.

11. Children

The service is intended only for users who meet Discord's minimum age requirements in their country.

12. Security and abuse prevention

Reasonable technical and organizational safeguards are used, but no online service can guarantee absolute security.

To protect availability and the shared translation quota, requests may be delayed, rejected, or temporarily blocked. The anti-abuse guard measures message length but does not retain a separate copy of message text. Alerts generated by a temporary spam block are designed not to contain message text, translated text, usernames, raw user IDs, raw server IDs, channel names, or server names.

13. Changes and contact

This policy may be updated when the service, providers, or legal requirements change. Questions can be sent to acciento89@gmail.com.