1. Information Collection

We only collect and process information necessary to run the Bot's core features (XP progression, suggestions, bug reports, and support channels). This includes:

• Discord Guild Data: Discord Server IDs, Server Names, and custom channel settings (e.g. suggestions panels, forum channels, sticky message lists).
• User Identity Data: Discord User IDs, Usernames, and Avatar hashes. This is used for XP leaderboards, and displaying suggestion credits on the web dashboard.
• File Uploads (Telemetry & Logs): Files (such as log files and zip packages) uploaded voluntarily via our bug report system.

2. Use of Information

The collected information is used solely to configure, maintain, and provide the interactive functions of the Bot:

• To count chat activity and assign XP levels and automatic roles.
• To post and organize suggestions submitted by users, and coordinate dashboard responses.
• To link forum reports with their respective developers for support ticket handling.
• To display configuration choices in the server settings panel dashboard.

3. Sharing & Disclosure

We enforce a strict zero-sharing policy. We do not sell, rent, trade, or distribute your private information to third-party advertisers or external services. All data is kept strictly inside our own database, running in an isolated network with no public access.

Information is only exposed within the Discord interface (such as XP leaderboard commands or public suggestions board threads) as explicitly configured by server administrators.

4. Data Security

We are committed to securing your data. We implement the following security measures:

• Sandboxed file uploads: All submitted bug logs are served with download-forcing and execution-disallowing HTTP security headers (CSP, Content-Disposition, and MIME-sniffing protection).
• Parameterized database queries throughout, to prevent SQL injection.
• Automated detection and temporary blocking of IPs that probe the dashboard for common injection/attack patterns.
• Access restriction: Only designated guild moderators can view dashboard administration commands, scoped to the servers they actually manage.

5. Cookies

The dashboard sets exactly one cookie, and only when you actively choose to use it: a session cookie created when you log in with Discord, so the dashboard can remember that you're signed in between page loads. This cookie is strictly functional — nothing is set just by visiting this page or any other public page (Terms of Service, Impressum, the login screen).

• We do not use analytics, advertising, or third-party tracking cookies of any kind.
• The session cookie is deleted when you log out, and automatically expires after a period of inactivity.
• The small banner shown on first visit is just a heads-up about the above — dismissing it stores a flag in your browser's local storage, not a cookie.

6. Retention & Deletion

We believe in data minimization. We only store data as long as the Bot resides in the guild or as required to verify services:

• Auto-Cleanup: Voluntary uploads (bug report files, logs) are automatically scanned and permanently deleted from our server directory after **30 days**. The personal identifiers on the underlying bug report record (Discord user, tag, install ID) are further anonymized after **90 days**.
• Manual Deletion: Users may request deletion of their database records (e.g. suggestion history or XP score details) by reaching out to the server developers.
• Guild Removal: When the Bot is kicked or banned from a server, its configuration entries will remain inactive and can be purged upon request.

7. Patcher Telemetry

The Actions & Stuff RTX Patcher includes an optional, opt-in telemetry feature to help us diagnose rare graphics rendering bugs that only occur on specific hardware. This is separate from the Bot's Discord-related data collection described above.

• Opt-in only: On first launch, the Patcher asks for your explicit consent before sending anything. You can decline, or change your mind anytime in the Patcher's Settings tab.
• What is sent: A one-time summary per Patcher version — GPU model, driver version and VRAM, CPU model, RAM size, Windows build, Minecraft edition, in-game graphics/RTX settings, and which BetterRTX build and Actions & Stuff subpack you have installed.
• What is NOT sent: Your name, Windows username, file contents, serial numbers, IP address, or anything else that identifies you as a person.
• Random ID: Telemetry is linked only to a random identifier generated locally on your device, not to your Discord account or any hardware serial number.
• Bug reports: If you submit a bug report through the Patcher, you can additionally choose to attach your Minecraft content log (usernames automatically removed) and recent GPU driver event logs, to help us pinpoint the exact rendering failure.
• Transparency: Every telemetry payload the Patcher sends is also saved to a local file (last_hardware_ping.json) so you can inspect exactly what was transmitted.
• Your control: You can request deletion of all telemetry and bug report data tied to your random ID at any time via the "Delete My Data" button in the Patcher's Settings tab. This immediately erases the corresponding server-side records and rotates your local ID.

8. Changes to this Policy

We may update this Privacy Policy from time to time to reflect operational or legal updates. Any modifications will be posted directly on this page with an updated revision date. Your continued use of the Bot after policy modifications constitutes your agreement to the new policy.