privacy policy

This Privacy Policy describes what information Ecstasy (the "Bot") collects, how it is used, and your rights regarding that information.

1. Information We Collect

The Bot collects the minimum data necessary to operate. Specifically:

Automatically processed (not stored)

• Command invocations (server ID, channel ID, user ID, message content) — processed at the moment the command runs, not persisted unless required by a feature below.

Stored in our database

• AFK status: your Discord user ID, the AFK reason text you provided, and the timestamp it was set. Removed automatically when you return.
• Snipe data: deleted and edited messages, and removed reactions, scoped to the channel they occurred in. Stored to power the ,snipe, ,editsnipe, and ,reactionsnipe commands. Includes the original message content, author ID, and timestamp.
• Last.fm integration: if you log in with ,lf login, we store your Last.fm session key linked to your Discord user ID so the Bot can fetch your scrobbles. You can revoke this at any time with ,lf logout.
• Custom commands: any custom commands or aliases you create with the Bot.
• Server-side caches: non-personal caches such as the CS2 skin database.

Not collected

• We do not collect your email, password, IP address, payment information, or any data outside what Discord exposes through its API.
• The Bot does not read or store the content of normal chat messages — only commands directed at it, or messages required by features you explicitly invoked (snipes capture deleted/edited messages in the channel where the feature is enabled).

2. How We Use Your Information

Collected information is used solely to:

• Respond to commands you run.
• Power features you opted into (AFK, snipes, Last.fm integration, etc.).
• Diagnose errors and improve the Bot.

We do not sell, rent, or share your data with advertisers or unrelated third parties.

3. Third-Party Services

To deliver its features, the Bot sends requests to the following third-party services. Your Discord user ID is not sent to any of these unless explicitly listed:

• Discord — required for the Bot to operate.
• Cobalt instances — for media downloading. The video/audio URL you provide is sent to the chosen Cobalt instance. No personal data is sent.
• Steam Community / steamhistory.net — public profile lookups. The query (vanity name or SteamID64) is sent.
• Instagram, TikTok, Twitter/X (vxtwitter), GitHub, Telegram, Lovely.bio, Last.fm, Valorant (henrikdev.xyz), cs2inspects.com — public profile lookups. Only the username/identifier you query is sent.
• Tenor / Giphy — when caption/GIF commands resolve provided URLs.

Each service has its own privacy practices, which we do not control. Refer to their respective privacy policies for details.

4. Data Retention

• AFK records are deleted automatically when you return.
• Snipe records are kept until the channel's snipe history is cleared (,clearsnipe) or naturally rotated out by newer entries.
• Last.fm session keys are kept until you run ,lf logout or request deletion.
• Custom commands persist until you delete them.

We retain data only as long as needed to provide the relevant feature, or as required by law.

5. Your Rights

You may at any time:

• Access the data we hold about you by contacting us.
• Delete your data by:
  • Removing yourself from AFK by sending any message.
  • Running ,lf logout to remove your Last.fm session key.
  • Running ,clearsnipe (if you are a moderator) to clear snipe history in a channel.
  • Contacting us to request full deletion of any remaining data tied to your Discord user ID.

Removing the Bot from a server stops further data collection in that server but does not automatically delete previously stored records — request deletion as described above.

6. Security

We take reasonable technical and organisational measures to protect stored data, including a private PostgreSQL database not accessible from the public internet. No system is perfectly secure; in the unlikely event of a breach, affected users will be notified.

7. Children's Privacy

The Bot is not directed at children under 13. Discord's own Terms of Service already require users to meet a minimum age. We do not knowingly collect data from anyone below that threshold. If you believe a minor's data has been collected, contact us for removal.

8. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be reflected in the "Last updated" date at the top of this document. Continued use of the Bot after updates constitutes acceptance of the revised policy.

9. Contact

For privacy questions, data access requests, or deletion requests, contact: y@remorse.cat