This policy covers the Discord bot AirDrop Arena Bot (the "Bot") and its website (the "Website"). Both are run by an individual developer in Denmark, called "we" below. We are the data controller for the data described here. The owners and staff of each Discord server decide which features are switched on in their server.
The Bot only gets the data that Discord gives bots in servers where it is installed. Here is what it stores, and why:
| Data | When | Why |
|---|---|---|
| Discord account info: user ID, username, display name, profile picture, roles, server join date | When you are in a server with the Bot or use it | To identify you in its features and show your name and picture on cards and leaderboards |
| Levels: XP, number of messages counted, time of your last XP gain | When you chat | Levels, rank cards, leaderboards |
| Achievement stats: messages sent, time spent in voice channels, commands used, AI questions asked, join date | When you chat, use voice, use commands or ask the AI | /achievement and achievement rankings |
| Message archive: message text, author ID and name, channel, time sent, edits, and when a message was deleted | Messages in channels the Bot can read. Log, ticket and spam-trap channels are excluded. | So the AI assistant can answer questions about server conversations. Message counts are also used for achievements. |
| Deleted messages: kept in the archive and marked as deleted | When a message is deleted | Moderation. By default, only server staff can ask the AI about deleted messages. |
| Support tickets: topic, description, ticket messages and a transcript when the ticket is closed | When you open a ticket | To give support. The transcript is posted to the server's log channel and may be sent to you by DM. |
| Moderation records: kicks, bans, timeouts, unbans, reasons, the moderator, end time of timed bans, and the content of messages posted in the spam trap | When a moderation action happens | To enforce server rules, end timed bans automatically, and keep a log in the server |
| AI questions and answers: your question and short-term conversation memory | When you ask the AI | To answer you and remember follow-up questions for a short time |
| Website technical data: IP address (kept in memory for rate limiting only), login session cookies for the admin and owner panels | When you visit the Website | Security and keeping you logged in |
We do not collect your email, password, phone number, payment details, IP address through Discord, or messages from servers where the Bot is not installed. We also do not read your direct messages to other people.
We do not sell your data, use it for advertising, or use it to train AI models.
We process data on the basis of our legitimate interests and those of the servers that use the Bot (GDPR Art. 6(1)(f)). Those interests are providing the community features you use, and keeping servers safe and moderated. Where you start something yourself, such as opening a ticket or asking the AI, we also process the data to do what you asked.
The public Website and the /leaderboard and /achievement commands show display name, username, profile picture, rank, XP, level and achievement progress of ranked members of each server. Anyone with the link can see the Website. Server stats such as member count are also public. The message archive, tickets, moderation records and deleted messages are never shown on the public Website.
We share data with nobody else, unless the law requires it.
All stored data is kept on our server in Frankfurt, Germany, in a separate folder for each Discord server. Data sent to Google for AI answers may be processed outside the EU under Google's safeguards for international transfers.
Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to its processing, and get a copy of it. To use these rights, contact us as described below and include your Discord user ID. We answer within one month. If we delete your data, your XP, stats and archived messages for that server are removed. If you are still in the server, new activity may be recorded again.
You can also complain to the Danish Data Protection Agency (Datatilsynet) or the data protection authority in your country.
The Service is meant for people who meet Discord's minimum age. We do not knowingly collect data from anyone under that age. If you think a child's data has been collected, contact us and we will delete it.
Data is stored on a private server. Access to the Bot's internal API is protected with a secret key, and the admin and owner panels are behind passwords. No system is perfectly secure, but we take reasonable steps to protect your data.
We may update this policy, for example when the Bot gets new features. The "Effective" date at the top shows the latest version. Important changes will be announced where possible.
For privacy questions or data requests, open a support ticket in a server where the Bot is installed, or contact the bot owner, Larsenator, on Discord.