1. Overview
This Privacy Policy applies to Arkon Discord Bot and its Dashboard. It covers data collected when you invite the bot, use commands, interact with verification / tickets / whitelist, or log in to the dashboard with Discord OAuth2. By using Arkon you agree to this policy.
Controller: Arkon Bot Team. For questions contact us via the support server or contact email listed on the dashboard or in the bot's Terms.
2. Data We Collect
We only collect data needed to operate the bot. We do not sell your data or use it for advertising.
| Category | Examples | Source |
|---|---|---|
| Discord Account (OAuth) | User ID, username, display name, avatar, guild list where you are server owner or have Administrator | Discord OAuth2 — temporary, used only to check dashboard permission |
| Guild Configuration | Prefix, auto-roles, welcome messages, moderation and security settings, ticket and suggestion settings | Dashboard or commands by server admins |
| Verification | Verification codes, account age, guild/user IDs, IP for duplicate check (per your duplicate-IP policy), captcha tokens if enabled | Verification pages |
| Platform Verify & Tickets | Screenshots you upload, submission status, ticket transcripts, added users, channel IDs | Platform Verify & Ticket panels |
| Moderation & Safety | Banned IPs, blocklists, honeypot stats, anti-nuke logs | Automated events / admin actions |
| Whitelist / Applications | Application answers (names + custom questions), vouches, review decisions | Whitelist application forms |
| Music & Usage | Playlist favourites, queue state (in-memory), 24/7 voice preference | Music commands |
| Technical Logs | Rate-limit counters per IP, login state, session creation time, error logs | Dashboard server (temporary, in-memory) |
We do NOT collect: Discord email (unless you explicitly grant it — we don't request it), passwords, payment card data (premium is handled manually), or message content except where needed for commands/autoresponder/logging you enable.
3. How We Use Data
- To provide core bot functions (e.g., assign roles, send welcome cards, enforce verification)
- To authenticate dashboard users and enforce guild permission checks
- To prevent abuse (duplicate verification checks, anti-raid, rate limiting)
- To operate tickets/whitelist/suggestions and generate transcripts
- To support premium features and admin panel (guild lists, stats)
- To troubleshoot, log errors, and improve reliability
4. Legal Basis (EEA/UK)
Where GDPR applies, we rely on: Contract (to provide the bot you requested), Legitimate Interest (security, anti-abuse, service improvement), Consent (dashboard OAuth, captcha), and Legal Obligation (if required to comply with law).
5. Sharing & Disclosure
We do not sell or rent your data. We share only with:
- Discord, Inc. — to call Discord APIs (bot + OAuth)
- Cloudflare Turnstile (if captcha is enabled) — to validate you are human
- Hosting/Database providers — your database, VPS/host, and music nodes — only to operate the service
- Law enforcement — only if legally required
No third-party analytics or advertising trackers are embedded in the dashboard.
6. Data Retention
- Dashboard sessions/login states: temporary, stored in-memory and auto-cleaned after about 7 days
- Verification codes: expire shortly after creation; verified/expired entries are cleaned up automatically
- Guild configs, tickets, whitelist, invites: retained while the bot is in the guild and a short period after removal, unless you request deletion
- Logs/banned IPs: retained as needed for safety, then deleted on guild request or bot leave
You can request early deletion via Contact below.
7. Security
We use Discord OAuth2, CSRF protection, rate limiting, and secure in-memory sessions. The dashboard should be served over HTTPS in production. However, no system is 100% secure — please report vulnerabilities to the Arkon team promptly.
8. Cookies & Local Storage
- Essential cookie: a session cookie stores a random session ID — required for login and expires automatically.
- Local Storage: your theme and UI preferences (e.g., selected server) — stays in your browser only.
No advertising or tracking cookies are set. Cloudflare Turnstile may set its own cookies when you verify.
9. Your Rights & Choices
Depending on your jurisdiction you may have rights to access, correct, delete, or object to processing of your personal data. To exercise them:
- Guild admins: delete via the dashboard (remove channels/panels/configs) or remove the bot from the server
- Individuals: contact the support server with your Discord User ID and guild ID to request data export or deletion for verification/ticket/whitelist records
- Dashboard: use the Logout button to clear your session; you can also revoke access in Discord → Settings → Authorized Apps
10. Children's Privacy
Arkon is not directed to children under 13 and does not knowingly collect data from them. Discord itself requires users to be 13+. If you believe a child provided data, contact us for prompt removal.
11. International Transfers
Your data may be processed on servers located in other countries than your own (where our host/MongoDB resides). By using Arkon you consent to this transfer as necessary to provide the service.
12. Changes to This Policy
We may update this policy to reflect feature changes. We will update the "Last updated" date above and, for material changes, announce via the dashboard or support server. Continued use after changes means you accept the updated policy.
13. Contact & Data Deletion
Questions, requests for access/deletion, or complaints?
- Support server: link listed on the dashboard
- Contact email: listed on the dashboard (if provided)
- Dashboard: your deployment URL
For fastest handling, include: your Discord User ID, Guild ID, what data you want removed, and proof you manage the guild (for guild-level deletes).
This template is for general information and does not constitute legal advice. Adapt it to your actual hosting, retention, and contact details and consider a legal review.