uma.guide Discord Bot — Privacy Policy
Last updated: June 11, 2026
This Privacy Policy explains what data the uma.guide Discord Bot ("the Bot") processes and how it is handled. The Bot is operated by the uma.guide team and can be contacted at [email protected].
1. Data We Process
The Bot processes the following data solely to respond to commands:
| Data | Purpose | Retention |
|---|---|---|
| User IDs | Scope pending results to the requesting user; rate limiting | In-memory only, max 1 minute |
| Channel IDs | Scope pending results to the correct channel | In-memory only, max 1 minute |
| Command queries | Look up requested game data (e.g. skill name, card name) | Not stored; processed and discarded |
| Message content | Required for prefix-based commands (e.g. !skill, !support) | Not stored; read and discarded immediately |
The Bot has no database and writes no user data to disk. All transient data is held in-memory and automatically expires within 1 minute.
2. Discord Intents
The Bot uses the Message Content privileged intent to support prefix-based commands. Message content is read only to parse the command and query — it is never stored, logged, or shared.
3. Logging
The Bot writes User IDs and Channel IDs to server logs for rate limiting and error diagnostics only. Logs are stored on a self-hosted server and are not shared with third parties.
4. Data Storage & Hosting
The Bot runs on a self-hosted server. No data is sent to third-party cloud providers or analytics services.
5. Data We Do Not Collect
The Bot does not collect:
- Persistent user profiles or preferences
- Server membership, roles, or presence information
- Any data that survives a bot restart
6. Children's Privacy (COPPA)
The Bot is not directed at children under 13. In accordance with Discord's minimum age requirement, users must be at least 13 years old. We do not knowingly collect data from users under 13.
7. Your Rights (GDPR)
If you are located in the European Economic Area or the UK, you have rights regarding your personal data under the GDPR. As the Bot stores no persistent personal data, there is nothing to access, export, or delete. If you have concerns, contact us at [email protected] and we will respond within 30 days.
The legal basis for processing User IDs and Channel IDs transiently is legitimate interest — specifically, the technical necessity of routing command responses to the correct user and channel.
8. Data Deletion
No personal data is stored persistently. Removing the Bot from your server immediately stops all data processing for that server. For any questions about your data, contact [email protected].
9. Changes
We may update this Privacy Policy at any time. The "Last updated" date at the top will reflect any changes. Continued use of the Bot after changes are posted constitutes acceptance.