Bot privacy policy

1. Operator and scope

Ethan Dorme--Talandier, a sole trader operating as VibeStarter, operates VibeStarter Community. Personal data contact: support@vibestarter.pro. Full contact details appear in the legal notice.

This page covers game-bot processing. The general VibeStarter privacy policy covers accounts, this website’s cookies and shared services. Linking to the customer support Discord server is a separate feature.

2. Data received and use

During installation from the VibeStarter application we process the authorizing member’s Discord identity and server ID to validate the link to the VibeStarter account, project and game; that identity is compared with the Discord account linked to the VibeStarter account. Discord account OAuth tokens are used during this exchange and are not retained.

For the web dashboard, we retain the Discord ID and username and an encrypted OAuth token for a sign-in session lasting at most one hour. We recheck servers and your permissions with Discord to authorize actions. Signing out deletes that session; expired sessions are cleaned during sign-ins and worker synchronizations. Two necessary cookies protect sign-in and maintain the session, without advertising use.

Premium access uses the Discord entitlement, product and server IDs and validity dates. We do not receive the purchaser’s payment details for this check.

The bot reports accessible server structure to VibeStarter: channel IDs, names and topics, categories, roles and permissions, and connection status. This information is used to offer destinations and check authorized actions. For AutoMod, the bot also reports rule IDs and creators, names, states, supported filters, actions and channel or role exemptions. These settings, including keywords and allow lists, may appear in the latest observation, stored actions and tool results viewed by the owner and their AI agent.

We retain preferences, automation rules, message templates, requested actions, results and relevant resource IDs. Game-server events are processed to apply rules and compose announcements; they may include player IDs or display names if the creator sends or uses them in announcements. Creators must minimize this information and inform their players.

For /evenements, Discord supplies interaction information including the server, member and permissions so the bot can respond for authorized channels. The member ID is held temporarily in memory to limit rapid calls; it is not sent to our API for this command.

3. Limited access

The bot does not subscribe to conversation streams, presence or the full member list and does not collect private messages. It can retrieve a targeted message to verify authorship before editing or deleting it. It does not need users’ Discord passwords.

Bot data is not used for advertising, commercial profiling or data resale.

4. Recipients and purposes

Information is processed on VibeStarter infrastructure hosted by Hostinger and is accessible to authorized people operating the service or handling support requests. Discord receives commands and published content; members with access to the destination channel see announcements. Discord applies its own privacy policy, including for its processing and international transfers. For AutoMod, Discord analyzes messages and enforces native protections. If alerts are configured, Discord may copy the relevant content and member information to the alert channel: the owner must choose a channel restricted to moderators. The bot does not receive the stream of blocked messages or AutoMod alerts and does not forward them to VibeStarter or an AI model.

When the owner asks an AI agent to prepare or manage the server, tool results such as channel structure and rules may be sent to the AI provider they use. That provider’s terms apply. The bot does not send a stream of member conversations to an AI model.

Processing necessary to provide the account holder’s service relies on contract performance. Security, abuse prevention and handling member interactions rely on our legitimate interest in operating a reliable service with limited data access. Creators remain responsible for player data they choose to publish. Shared-service providers and transfer arrangements are described in the general policy linked below.

5. Retention and unlinking

The association and latest observed server state remain while the association exists. Game settings, rules and action history remain with the project; unlinking alone does not erase them. Effective deletion of the project or owner account removes their related records from the active database.

The dashboard separately retains the latest server state and its action history, independently of a VibeStarter project. Deleting a project does not erase these dashboard records. Contact us with the server ID to request export or erasure; we verify the request before processing it.

Technical event history retains names, IDs, fingerprints and results instead of raw payloads. Entries older than 30 days are purged when a new event is received; without new traffic they can remain until project deletion or an erasure request. Produced text may also remain in a stored action or Discord message.

Command rate-limit identifiers remain temporarily in memory and are cleaned up after expiry. Security backups are separate from the active database; for an erasure request we explain the scope and handling of residual copies. Unlinking or deleting a project does not delete messages already posted to Discord: removal must be requested separately. AutoMod rules and existing alerts remain on Discord even after the bot is removed or Community access ends. Server administrators control their disabling or deletion; you can also contact us about your personal data.

6. Rights and deletion requests

You may request access, correction, erasure or restriction of your data and, depending on the processing basis, portability or object to its use. Server members without a VibeStarter account can also make these requests.

Email support@vibestarter.pro with the server or game concerned and details that help locate your data, such as a message ID. Do not send passwords or Discord tokens. We may request only what is necessary to verify that the request concerns you. We respond within one month, subject to extensions allowed by law.

Account holders can also use the VibeStarter export and deletion tools described in the general policy. You may lodge a complaint with the French data protection authority, CNIL (cnil.fr).