Privacy Policy for Donkcord
This Privacy Policy describes how We collect, use and disclose Your information when You use the Service, and tells You about Your privacy rights and how the law protects You. We use Your Personal Data to provide and improve the Service and only where We have a valid legal basis to do so.
Interpretation and Definitions
Interpretation
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means the Discord account You sign in with to access the Service.
- Application refers to Donkcord, the Discord bot and its web panel provided by the Company.
- Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects Consumers' personal information and determines the purposes and means of the processing of Consumers' personal information.
- Company (referred to as "the Company", "We", "Us" or "Our") refers to Donkcord.
- Consumer, for the purpose of CCPA/CPRA, means a natural person who is a California resident.
- Cookies are small files placed on Your Device by a website.
- Country/State refers to: New York, United States.
- Data Controller, for the purposes of the GDPR, refers to the Company as the legal person which determines the purposes and means of the processing of Personal Data.
- Device means any device that can access the Service, such as a computer, a cell phone or a tablet.
- Do Not Track (DNT) is a browser setting that asks websites not to track the user.
- Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. For the purposes of the GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to Your physical, physiological, genetic, mental, economic, cultural or social identity. For the purposes of CCPA/CPRA, Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with You.
- Sale, for the purpose of CCPA/CPRA, means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating a Consumer's personal information to a third party for monetary or other valuable consideration.
- Server Administrator means a person who manages a Discord server and has added the Application to it or configures it through the web panel.
- Service refers to the Application, the Website, the pages the Application publishes for embedding on third-party sites, and its API and webhooks.
- Service Provider means any natural or legal person who processes data on behalf of the Company.
- Usage Data refers to data collected automatically, generated by the use of the Service or from the Service infrastructure itself.
- Website refers to Donkcord, accessible from https://donkcord.com.
- You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
The Service does not ask You to type in personal details. When You sign in with Discord, We receive the following from Discord under the identify, guilds and guilds.members.read permissions:
- Your Discord user ID, username, display name and avatar;
- the list of Discord servers You belong to, used only to find the servers You share with the Application;
- Your membership details in those servers, such as nickname, roles and permissions, used to decide what You may do in the web panel.
We do not receive Your email address, phone number, postal address or payment details.
Data processed for Discord servers
The Application runs inside Discord servers at the request of their Server Administrators. Depending on how each server is configured, the Application processes:
- message content, attachments and reactions in channels it can see, in order to run moderation filters, logging, starboards, custom reactions and integrations;
- a rolling cache of recent messages so that edits and deletions can be shown in the server's audit log;
- records of moderation actions, warnings and other infractions issued in the server;
- tickets, submissions and voice messages left in voicemail channels;
- channel archives, which are held briefly for download and then deleted;
- messages sent through channel widgets embedded on third-party websites, and records of who sent them.
This data is stored for the server it came from and is visible to that server's moderators through the web panel. Server Administrators decide which features are on, how long logs are kept, and can delete records.
Usage Data
Usage Data is collected automatically when using the Service. It may include Your Device's IP address, browser type and version, the pages of the Service You visit, the time and date of Your visit, and other diagnostic data. We keep this in short-lived server logs for security and troubleshooting. We do not use analytics services.
Cookies
We use only cookies that are necessary to run the Service:
- Session cookie. Keeps You signed in to the web panel. Encrypted, and expires after seven days or when You sign out.
- Security cookie. Protects forms in the web panel from cross-site request forgery.
Channel widgets embedded on other websites keep a short-lived sign-in token in Your browser's local storage for that widget only. We do not use advertising cookies, tracking pixels or web beacons.
Use of Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain the Service, including to run the features Server Administrators have turned on and to monitor the Service for faults.
- To manage Your access: to identify You when You sign in and to check what You are permitted to do in each server.
- To keep records servers rely on: audit logs, infractions and moderation history that Server Administrators use to run their communities.
- To respond to You: to attend to and manage Your requests to Us.
- For security: to detect and prevent abuse, fraud and unauthorized access.
- For business transfers: to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of Our assets, in which Personal Data held by Us is among the assets transferred.
- To comply with legal obligations.
We do not use Your Personal Data for advertising, profiling or automated decision-making that produces legal effects concerning You.
Sharing of Your Personal Data
We may share Your Personal Data in the following situations:
- With Discord: every action the Service takes in a Discord server is carried out through Discord's API and is subject to Discord's own privacy policy.
- With Server Administrators and moderators: data the Application processes for a server is visible to that server's staff in the web panel, and events may be posted into that server's log channels.
- With third-party websites: where a Server Administrator embeds a channel widget on their own site, messages in that channel are shown on that site according to the visibility settings the administrator chose.
- With Service Providers: We use a hosting provider to run the Service and store its database. Server Administrators may also configure integrations that send data to outside services they choose; that data is sent on their instruction and governed by those services' policies.
- For business transfers: in connection with, or during negotiations of, any merger, sale of Company assets, financing or acquisition of all or a portion of Our business.
- With Your consent: for any other purpose with Your consent.
Retention of Your Personal Data
The Company retains Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.
- Sign-in data: held in Your session cookie and discarded when it expires or You sign out. We do not keep Your Discord access token on the server.
- Server records (audit logs, infractions, tickets, submissions, voice messages, widget messages): kept for as long as the server uses the Application, subject to retention limits set by the Server Administrator. When the Application is removed from a server, that server's records are deleted on request.
- Message cache: recent messages are kept only long enough to report edits and deletions, then pruned automatically.
- Channel archives: deleted automatically shortly after they are generated.
- Server logs and error records: up to 30 days.
- Backups: the database is backed up on a rolling schedule and old backups are overwritten. Deleted data may persist in a backup for up to seven days.
We may retain Personal Data for longer where required by law, to resolve disputes or to enforce Our agreements.
Transfer of Your Personal Data
Your information is processed on servers operated by Our hosting provider, which may be located outside Your state, province or country. Where required by applicable law, We ensure that international transfers are subject to appropriate safeguards, such as standard contractual clauses. By using the Service You consent to this transfer.
Delete Your Personal Data
You may ask Us to delete the Personal Data We hold about You by contacting Us. Data held for a Discord server is controlled by that server's administrators, who can delete it from the web panel; You may also ask them directly. We may need to retain certain information where We have a legal obligation to do so.
Disclosure of Your Personal Data
Law enforcement
Under certain circumstances, the Company may disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities.
Other legal requirements
The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the Company, prevent or investigate possible wrongdoing in connection with the Service, protect the personal safety of users of the Service or the public, or protect against legal liability.
Security of Your Personal Data
Session data is encrypted, stored credentials for integrations are encrypted at rest, and the Service is served over HTTPS. No method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee absolute security.
GDPR Privacy
Legal basis for processing Personal Data under the GDPR
We may process Personal Data under the following conditions:
- Consent: You have given Your consent for processing Personal Data for one or more specific purposes, for example by signing in with Discord or posting through a channel widget.
- Performance of a contract: processing is necessary to provide the Service to You or to the server You are using.
- Legal obligations: processing is necessary for compliance with a legal obligation to which the Company is subject.
- Vital interests: processing is necessary to protect Your vital interests or those of another natural person.
- Public interests: processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Company.
- Legitimate interests: processing is necessary for the purposes of the legitimate interests pursued by the Company, including keeping the Service secure, preventing abuse, and keeping the moderation records that Discord communities rely on.
In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.
Where the Application processes data inside a Discord server on a Server Administrator's instructions, the Server Administrator determines which features run and how long records are kept, and the Company processes that data on their behalf.
Your rights under the GDPR
The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights. You have the right under this Privacy Policy, and by law if You are within the EU or the UK, to:
- Request access to Your Personal Data. The right to access, update or delete the information We have on You.
- Request correction of the Personal Data that We hold about You.
- Object to processing of Your Personal Data where We rely on a legitimate interest and there is something about Your particular situation which makes You want to object.
- Request erasure of Your Personal Data where there is no good reason for Us to continue processing it.
- Request the transfer of Your Personal Data to You or to a third party in a structured, commonly used, machine-readable format.
- Withdraw Your consent at any time where the Company relied on Your consent to process Your Personal Data.
Exercising Your GDPR data protection rights
You may exercise Your rights of access, rectification, cancellation and opposition by contacting Us. We may ask You to verify Your identity before responding. You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. If You are in the European Economic Area or the UK, please contact Your local data protection authority.
CCPA/CPRA Privacy Notice for California Residents
This section supplements the information contained in this Privacy Policy and applies solely to all visitors, users and others who reside in the State of California.
Categories of Personal Information collected
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular Consumer or Device. In the preceding twelve months We have collected the following categories:
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Discord user ID, username, avatar, IP address | Yes |
| B. Personal information categories listed in the California Customer Records statute | Name, address, telephone number, financial information | No |
| C. Protected classification characteristics | Age, race, religion, sex | No |
| D. Commercial information | Purchase records | No |
| E. Biometric information | Fingerprints, voiceprints | No |
| F. Internet or other similar network activity | Interaction with the Service, browser type, pages visited | Yes |
| G. Geolocation data | Physical location | No |
| H. Sensory data | Audio recordings, such as voice messages left in a server's voicemail channel | Yes, where a server enables voicemail |
| I. Professional or employment-related information | Job history | No |
| J. Non-public education information | Grades, transcripts | No |
| K. Inferences drawn from other personal information | Profiles reflecting preferences or behavior | No |
| L. Sensitive personal information | Account credentials, precise geolocation, contents of messages not directed to the Business | Message content in Discord servers where the Application runs, used only to provide the features the server enabled |
Under CCPA/CPRA, personal information does not include publicly available information from government records, deidentified or aggregated Consumer information, or information excluded from the CCPA's scope.
Sources of Personal Information
We obtain the categories of personal information listed above from Discord when You sign in or when the Application operates in a server You are in, from You when You post through a channel widget, and from Your Device automatically when You use the Service.
Use of Personal Information
We use the personal information We collect for the purposes described in "Use of Your Personal Data" above: to provide the Service, to identify You, to keep server records, to respond to You, for security, and to comply with the law.
Disclosure of Personal Information
In the preceding twelve months, We have disclosed the following categories of personal information for a business purpose: Category A (Identifiers), Category F (Internet or other similar network activity), Category H (Sensory data) and Category L (Sensitive personal information). These are disclosed to Discord, to the Server Administrators and moderators of the server the data belongs to, to Our hosting provider, and, where a Server Administrator has embedded a channel widget or configured an integration, to the website or service they chose.
Sale and sharing of Personal Information
We do not sell personal information and have not sold personal information in the preceding twelve months. We do not share personal information for cross-context behavioral advertising. We have no actual knowledge that We sell or share the personal information of Consumers under 16 years of age.
Your rights under the CCPA/CPRA
The CCPA/CPRA provides California residents with specific rights regarding their personal information. If You are a resident of California, You have the following rights:
- The right to notice. You have the right to be notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
- The right to know. You have the right to request that We disclose the categories of personal information collected, the sources, the business purpose, the categories of third parties with whom We share it, and the specific pieces of personal information We collected about You.
- The right to correct inaccurate personal information We hold about You.
- The right to delete. You have the right to request the deletion of Your personal information, subject to certain exceptions, such as completing the transaction for which it was collected, detecting security incidents, complying with a legal obligation, or other internal and lawful uses compatible with the context in which You provided it.
- The right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.
- The right to limit use of sensitive personal information. We use sensitive personal information only to provide the Service as configured by each server.
- The right not to be discriminated against for exercising any of Your rights. We will not deny You the Service, charge different prices, or provide a different level of service because You exercised Your rights.
Exercising Your CCPA/CPRA data protection rights
To exercise any of Your rights under the CCPA/CPRA, and if You are a California resident, You can contact Us by email at the address in the "Contact Us" section. Only You, or a person registered with the California Secretary of State that You authorize to act on Your behalf, may make a verifiable request related to Your personal information. Your request must provide sufficient information that allows Us to reasonably verify You are the person about whom We collected personal information or an authorized representative, and describe Your request with sufficient detail. We will respond within 45 days of receiving Your request. If We require more time, We will inform You of the reason and extension period in writing. We do not charge a fee to process or respond to Your verifiable request unless it is excessive, repetitive or manifestly unfounded.
CalOPPA Privacy Notice
CalOPPA requires any person or company that collects personally identifiable information from California consumers online to post a conspicuous privacy policy stating what information is collected and with whom it is shared. In accordance with CalOPPA:
- users can visit the Service anonymously; signing in with Discord is required only for the web panel and for posting through channel widgets;
- this Privacy Policy is linked from the home page of the Website and from within the Service;
- this Privacy Policy's link includes the word "Privacy" and can be easily found on the pages listed above;
- users will be notified of any privacy policy changes on this page;
- users can change their personal information by changing their Discord profile, or by contacting Us.
Do Not Track policy
Do Not Track is a preference You can set in Your web browser to inform websites that You do not want to be tracked. We do not track users across third-party websites and do not use tracking or analytics technologies, so We do not respond differently to DNT signals.
Your California privacy rights (California's Shine the Light law)
Under California Civil Code Section 1798, California residents with an established business relationship with Us can request information once a year about sharing their Personal Data with third parties for the third parties' direct marketing purposes. We do not share Personal Data with third parties for their direct marketing purposes.
California privacy rights for minor users (California Business and Professions Code Section 22581)
California residents under the age of 18 who have registered accounts with the Service have the right to request the removal of unwanted content that they have publicly posted. To request removal, contact Us using the contact information below and include the Discord account associated with the content. Please note that Your request does not guarantee complete or comprehensive removal of content posted online and the law may not permit or require removal in certain circumstances.
Children's Privacy
The Service is not directed to anyone under the age of 13, and Discord requires its users to be at least 13. We do not knowingly collect Personal Data from anyone under 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us and We will remove it. Where consent is the legal basis for processing and the law of Your country requires consent from a parent, We may require that consent before We collect and use Your information.
Links to Other Websites
The Service may contain links to other websites that are not operated by Us, and channel widgets may be embedded on websites that are not operated by Us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.
Contact Us
If You have any questions about this Privacy Policy, or want to exercise any of the rights described in it, You can contact Us:
- By email: contact@donkcord.com