Privacy Policy

Last updated: June 2026

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) for the operation of this Service is:
Pipis the Mod Bot Team
E-mail: pipismodbot@gmail.com

2. What Data Is Processed?

When signing in via Discord OAuth2, the following data is processed temporarily:

• Discord User ID – unique identifier for your Discord account
• Username and display name – shown in the navigation bar
• Avatar URL – for displaying your profile picture (if available)
• Server memberships – to determine which servers you have access to
• Session cookie – an encrypted, server-side session cookie to maintain your login state

No passwords, email addresses, or other personal data are transferred or stored from Discord beyond what Discord provides as part of the OAuth2 flow.

3. Purpose of Processing

Data is processed solely for the purpose of authentication and authorization within the Mod Bot WebUI. The legal basis is Art. 6(1)(b) GDPR (processing necessary for the performance of a contract or to take steps prior to entering into a contract).

4. Retention Period

Session data is stored only for the duration of the active session. Upon logout or session expiry, all session data is deleted. No persistent storage of user data takes place on the server.

5. Disclosure to Third Parties

Personal data is not disclosed to third parties. Data is exchanged with Discord (Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA) solely for authentication purposes. Discord’s privacy practices are governed by their Privacy Policy (discord.com/privacy).

6. Cookies

The Service uses a single technically necessary session cookie to maintain the login state. This cookie contains no tracking information and is not used for advertising purposes. It is a session cookie and is automatically deleted when the browser is closed or upon logout.

7. Your Rights

Under the GDPR, you have the following rights in relation to the operator:

• Right of access to your stored personal data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure of your data (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact: pipismodbot@gmail.com

8. No Analytics or Tracking Tools

The Service does not use any external analytics, tracking, or advertising tools. No usage statistics are transmitted to third-party providers.