1. Who We Are
This Privacy Policy explains how Vulps ("we", "us", "our") collects, uses, stores, and protects personal data when you use the Truth or Dare Bot Discord application (the "Bot"). We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how we handle your data, please contact us:
2. Data We Collect
2.1 User Data
When you interact with the Bot, we collect and store the following information about you:
- Your Discord User ID (a unique numerical identifier assigned by Discord)
- Your Discord username (as it appears at the time of interaction)
- Experience points (XP) and level progress across global and server-specific leaderboards
- Vote count (from votes cast via Top.gg)
- Whether you have accepted the Bot's rules and terms of service
- Ban status, ban reason, and associated moderation message IDs, where applicable
- Account creation date within the Bot's database
- Scheduled deletion date, if a deletion request has been made
2.2 Server Data
When a server administrator sets up the Bot in a Discord server, we collect:
- The Discord Server ID
- The server name (as it appears at time of setup)
- The Discord User ID of the server administrator who completed setup
- Server configuration settings (XP values, designated channel IDs, announcement preferences)
- Premium/entitlement status and entitlement expiry date
- Ban status and moderation records relating to the server
2.3 User-Submitted Content
If you use the /create command to submit a truth or dare question, we store:
- The text of the submitted question
- Your Discord User ID as the submitter
- The Discord Server ID from which the submission was made
- Approval status, approval date, and the moderator's Discord User ID if approved
- Ban status and ban reason if the question was removed
- Deletion status and deletion date
2.4 Moderation & Activity Data
To operate our moderation system we collect:
- Reports submitted by users, including the reporting user's ID and the content being reported
- Moderation actions taken (approvals, bans, unbans) including the moderator's ID and timestamps
- Activity tracking data used to populate leaderboards
2.5 Data We Do Not Collect
We do not collect email addresses, IP addresses, payment details, or any sensitive personal data as defined by UK GDPR Article 9. We do not use cookies or tracking technologies on any website associated with the Bot.
3. Legal Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contract performance (Article 6(1)(b)): Processing necessary to provide the Bot's core gameplay, XP tracking, and server configuration features to users who have accepted our Terms of Service.
- Legitimate interests (Article 6(1)(f)): Processing necessary to maintain the safety and integrity of the service, including moderation logs, ban records, and abuse prevention. Our legitimate interest does not override your rights and freedoms.
- Legal obligation (Article 6(1)(c)): Where we are required by law to retain or disclose information.
4. How We Use Your Data
We use the data we collect solely for the following purposes:
- Delivering the Bot's core features: truth and dare gameplay, question delivery, and interactive controls
- Tracking XP and maintaining global and server-specific leaderboards
- Managing the question approval queue and community content moderation
- Enforcing community rules and our Terms of Service, including issuing and recording bans
- Communicating service announcements to configured server channels
- Enabling premium features for entitled servers
- Improving the stability and reliability of the Bot through structured logs
5. Third-Party Services
5.1 Discord
The Bot operates exclusively within the Discord platform. Discord processes interaction data as part of their platform. Discord's Privacy Policy is available at discord.com/privacy. We receive only the data Discord makes available through their API; we do not receive passwords or payment information.
5.2 Top.gg
The Bot is listed on Top.gg, a Discord bot directory. If you vote for the Bot on Top.gg, Top.gg sends a webhook notification to us containing your Discord User ID and vote timestamp. This is used to record your vote count within the Bot. Top.gg's Privacy Policy is available at top.gg/privacy.
5.3 Hosting & Infrastructure
Your data is stored in a PostgreSQL database hosted by Contabo, with servers located in their Hub Europe data centre in Germany (European Union). The UK has granted adequacy status to the EU under UK GDPR, meaning this transfer is lawful without requiring additional safeguards.
6. Data Retention
We retain your data for as long as necessary to provide the Bot's services or as required by law. Specifically:
- User records are retained for the duration of your use of the Bot. If you request deletion, your record is scheduled for removal and purged within 30 days of your request.
- Server records are retained while the Bot remains in the server. Records are marked as deleted when the Bot is removed, and purged within 30 days.
- Moderation records, including permanent ban records, are retained indefinitely. This is necessary to enforce bans and protect the integrity of the service. A permanent ban is tied to your Discord account for its lifetime.
- Question submissions are retained indefinitely to maintain the question pool, unless deleted upon request or as part of a moderation action.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request correction of inaccurate data.
- Right to erasure: You may request deletion of your personal data, subject to our legitimate interests in retaining moderation records.
- Right to restriction: You may request that we limit how we use your data in certain circumstances.
- Right to data portability: You may request your data in a structured, machine-readable format.
- Right to object: You may object to processing based on legitimate interests.
- Right not to be subject to automated decisions: We do not make solely automated decisions with significant effects on you.
To exercise any of these rights, please contact us via our Discord support server at discord.vulps.co.uk or directly at Vulps22 on Discord. We will respond within one calendar month as required by UK GDPR. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Data Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. These include structured access controls on our database and sanitisation of sensitive values in our logging systems. No transmission over the internet is completely secure; while we strive to protect your data, we cannot guarantee absolute security.
9. Minimum Age
The Bot contains NSFW (Not Safe For Work) content. You must be at least 18 years of age to use the Bot, or the minimum age required by your local laws, whichever is greater. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a minor has used the Bot, please contact us immediately.
10. Child Safety & the Online Safety Act 2023
We take the safety of children seriously and have implemented a layered approach to preventing minors from accessing age-restricted content through the Bot.
10.1 Platform-Level Controls
The Bot operates entirely within the Discord platform. NSFW content can only be delivered within channels that have been designated as NSFW by a server administrator using Discord's own channel settings. Discord, as a regulated user-to-user service under the Online Safety Act 2023, applies its own age-gating controls to NSFW-designated channels. We rely on these platform-level controls as a first layer of child safety protection. As a third-party application operating within Discord's infrastructure, we have no independent ability to verify the age of individual users beyond what Discord's platform makes available to us.
10.2 Our Own Safeguards
In addition to Discord's platform controls, we apply the following safeguards:
- All user-submitted questions enter a human moderation queue before being added to the question pool. Any content that could be harmful to or exploitative of children is rejected and the submitting user may be banned.
- We maintain an active reporting system that allows users to flag inappropriate content. Flagged content is reviewed by our moderators promptly.
- Users and servers found to be attempting to circumvent age restrictions, or to expose minors to NSFW content, will be permanently banned from the Bot.
- Our Terms & Conditions require all users to be at least 18 years of age and confirm that use of the Bot by minors is prohibited.
10.3 Reporting Child Safety Concerns
If you encounter content through the Bot that you believe may harm a child, please contact us immediately via our Discord support server at discord.vulps.co.uk or directly at Vulps22 on Discord. You may also report concerns to the Internet Watch Foundation or the NCA's CEOP Command.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The effective date at the top of this document reflects the most recent revision. Where changes are material, we will endeavour to notify users via our support server or within the Bot itself. Continued use of the Bot following an update constitutes acceptance of the revised policy.
12. Contact & Complaints
For any privacy-related queries, to exercise your rights, or to raise a concern:
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Telephone: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF