1 Scope and responsibility
This Privacy Policy explains how The Mayling Bot (Discord application ID 1501345603018293428) handles information. Capitalized terms have the meanings given in the Terms of Service.
The Service contains two parts: the private core Bot used in Selected Servers and AK Guesser, an Activity contained within the same Discord application. The Operator is responsible for the practices described here.
2 Data handled by the core Bot
Depending on the features enabled in a Selected Server, the core Bot handles these categories:
- Server and channel information: server IDs, channel IDs, allowed-channel settings, and related Discord context.
- Member and role information: User or member IDs, usernames or nicknames, role IDs, and stored member-role assignments.
- Message and command information: message text and related identifiers used to recognize prefix commands and Operator-managed triggers.
- Configuration information: prefixes, Operator-managed trigger settings, role-feature settings, channel settings, and other enabled configuration.
- Operational information: command use, audit or error records, and identifiers needed to secure, troubleshoot, and maintain the core Bot.
The core Bot accesses, uses, or retains these categories only when needed for an enabled feature, security, troubleshooting, or service operation.
3 Data handled by AK Guesser
AK Guesser may handle:
- Discord identity: the Player's Discord user ID, username, display name, and avatar.
- Activity context: relevant Selected Server, channel, and Activity-instance identifiers.
- Game information: artwork or skill-icon mode, daily and practice progress, typed operator guesses, skill-bonus outcomes, results, scores, timing, streaks, history, and the identifier of a posted result.
- Optional game feedback: a difficulty rating and any feedback note the Player chooses to submit, linked to that Player's completed daily run.
- Preferences: reminder choice and channel, time zone, theme, audio, transitions, and other interface settings.
- Session and operational information: a hashed session credential, expiry, IP-based rate-limit information, request details, and error records.
AK Guesser uses Discord sign-in to obtain the Player's Discord user ID, username, display name, and avatar. The Service may also refresh these identity details from Discord so displayed names and avatars stay current. Temporary Discord sign-in tokens are used only to authenticate the Activity and are not stored in the Service database.
4 Discord permissions and data access
The core Bot can read messages in Discord channels where it has access so it can recognize prefix commands and Operator-managed triggers. It may receive message text and related identifiers needed for those features.
The core Bot can also receive member and role information from Selected Servers to operate member-role features. Some message-content access and member data require Discord's Message Content or Guild Members privileged gateway intents. The Service uses this access only for the features described here and for necessary security and troubleshooting.
AK Guesser uses Discord sign-in to identify the correct Player and associate that account with game state and settings.
5 How data is used
The core Bot uses information to:
- respond to commands, Operator-managed triggers, and configured features;
- maintain server, channel, prefix, and member-role configuration; and
- secure the core Bot, diagnose failures, and maintain reliability.
AK Guesser uses information to:
- authenticate the correct Player and maintain game progress, results, statistics, and settings;
- display leaderboards that show each Player's rank, name, avatar, and results to other Players;
- post one automatic completion result per daily puzzle mode in the launch channel;
- use optional feedback to improve the game;
- send reminder mentions only when the Player enables them; and
- prevent abuse, secure sessions, and diagnose failures.
Both parts may also process information to comply with Discord requirements and valid legal obligations.
7 Retention and security
Except where applicable law requires retention, Discord API data is promptly deleted when it is no longer needed for the Service's stated functionality, when Discord or the relevant User requests deletion, or when the Service stops operating.
- Core Bot: server configuration and member-role records are kept while needed in a Selected Server, subject to the deletion rule above.
- Messages: message content is processed when the core Bot handles a command, trigger, or enabled workflow. Content or identifiers retained for a configured feature, audit record, or troubleshooting are kept only while that purpose remains necessary.
- AK Guesser: account-linked game history and settings are kept while needed to provide progress and statistics and are deleted after a verified request or when the Activity no longer needs them.
- AK Guesser practice and feedback: current practice progress stays in the Activity's memory and is discarded when the Player leaves or reopens it. Older stored practice records are eligible for deletion 24 hours after the session ends or expires; feedback is eligible after 90 days. The daily retention job removes eligible records. Stored practice records and feedback are also deleted with the associated account.
- AK Guesser sessions: session credentials stop working eight hours after they are issued. The Service stores only a hash of each credential. An expired hash is not accepted for authentication but may remain stored until the retention process removes it.
- Operational logs: request, error, and security logs have retention separate from the eight-hour session lifetime and are kept only while needed for security or troubleshooting.
- Discord posts: result and reminder messages follow Discord's and the Selected Server's retention controls after they are posted.
Reasonable safeguards are used to protect stored Discord data, including hashed Activity session credentials and server-side validation. These safeguards are designed to reduce the risk of unauthorized access, loss, or misuse.
8 Choices, deletion, and contact
Users may stop using features, disable reminders, or deauthorize AK Guesser. Server Administrators may restrict the Service's permissions, disable available features, or remove it from their Selected Server. Because the core Bot is private and unlisted, Users and Server Administrators cannot independently reinstall or authorize it elsewhere.
A User may request access to, correction of, or deletion of account-linked data. A Server Administrator may request deletion of Selected Server configuration. Reasonable verification may be required. For security, include only the Discord user ID or server ID needed to locate the relevant records. Do not include passwords, bot tokens, OAuth tokens, or other credentials.
Send privacy and deletion requests to danboarknights@gmail.com.
Revoking AK Guesser's Discord authorization prevents AK Guesser from using that authorization unless the User authorizes it again. Revocation does not itself delete existing account-linked game history or prevent the core Bot from processing data in a Selected Server. A User may request deletion of data linked to their account.
Removing the core Bot from a Selected Server stops it from receiving new bot events from that server. Removal does not itself delete retained data. Users may request deletion of data linked to them, and a Server Administrator may request deletion of retained server configuration.
The Service is not directed to anyone below Discord's applicable minimum age. The Operator does not independently collect or verify age. If the Operator learns that the Service obtained Discord API data from someone below that age, the Operator will promptly stop processing and delete that data, except where applicable law requires otherwise.
This policy will be updated when data categories, purposes, recipients, retention, or deletion choices materially change. Routine feature changes that remain within these descriptions do not require a rewrite.