Privacy Policy
1. Who is responsible
GothCatHunter
Email: [email protected]
“We” means the person above, who runs the Discord bot Rexomat and the website www.rexomat.com.
2. The bot on Discord
When the bot is in a server, Discord sends it your user ID, name, avatar and roles, and the messages in channels it can see. What the bot keeps depends on the modules the server turned on; every module starts switched off.
| Module | What it keeps |
|---|---|
| Leveling | Your XP and whether you want a ping when you level up. Message content isn't stored. |
| Moderation | Warnings, mutes, timeouts, kicks and bans: who, what, why, by whom and when. Deleted after the time the server chose (180 days unless it changed that). |
| Tickets | Your tickets: your answers to the questions, what happened to them, and staff notes. If staff save a transcript, also the messages in the ticket. |
| Teams | Teams, their owners and members, and a log of team actions. |
| Events | Who signed up, and what you typed into the sign-up form. |
| Giveaways | Who entered and who won. Deleted 30 days after the giveaway ends. |
| Server Logs | Nothing. It posts joins, leaves, bans, nickname and role changes, voice activity and deleted or edited messages to the server's log channel. To show deleted and edited messages, it keeps recent messages in memory only, never on disk. |
Welcome, Verification, Reaction Roles, Anti-Nuke, Role Pings and Owner Tools store nothing about you. A server's settings are stored for that server. If a server makes its leaderboard public, its members' names, avatars, levels and XP can be seen by anyone. A server backup made by a server's owner saves its roles, channels and settings and which members (by ID) have which roles.
3. The website
- Log in with Discord: we get your user ID, username, avatar and your servers with your permissions there, to show which servers you can manage. Your login is kept for up to 7 days or until you log out.
- Cookies: only one, your login session, which the site needs to work. No analytics, advertising or tracking.
- Change history: who changed what on the dashboard and when, so the server's other managers can see and undo it. Deleted after 90 days.
- Web server logs: IP address, time, page and browser, to keep the site secure and fix errors. Deleted after 14 days.
- Discord images: avatars and server icons load from Discord (cdn.discordapp.com), so your browser connects to Discord to show them.
- Verifying on the website: we check that you're in the server (and your account's age, if the server asks) and give you its role. We don't keep anything.
- Support server: if you allow “Join servers for you” when you log in, we store your user ID, name, avatar, when you agreed and the Discord token for it, only to add you to our support server. You can take it back in Discord under Settings → Authorized Apps, or ask us to delete it.
4. Legal basis
Under the GDPR (Art. 6(1)): (b) to provide the bot and the dashboard; (f) our legitimate interest in keeping servers and the service safe (for example moderation, anti-nuke, server and web logs); (a) your consent for the support server, which you can withdraw at any time.
5. Who else gets data
- Discord Inc. (USA), certified under the EU-U.S. Data Privacy Framework. Discord's Privacy Policy applies to what you do on Discord.
- Hosting: Zap Hosting runs our server and only processes data on our behalf.
- Cloudflare, Inc. (USA), certified under the EU-U.S. Data Privacy Framework, carries the website's traffic to protect it from attacks. It sees your IP address and the pages you open, on our behalf.
- Nobody else. We don't sell data or use it for advertising.
6. How long it's kept
- Where it isn't said above: while the server uses the module, or until a manager deletes it on the dashboard. Ticket transcripts are deleted after the time the server chose, if it chose one.
- If the bot leaves a server, that server's data stays until someone asks us to delete it.
- Backups: daily backups for 14 days; server backups and backups of the bot's data until they're deleted on the dashboard. Bot logs: 14 days.
7. Your rights
You can ask for a copy of your data, and to correct, delete or limit it, get it in a portable format, or object to processing based on legitimate interest. Email [email protected] with your Discord user ID. You can also complain to a data protection authority, for example Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, Austria (www.dsb.gv.at).