LEGAL

Privacy Policy

Effective date: 28 October 2026

Important: This policy describes the planned minimal-data implementation. Verify it against the deployed code, hosting provider, logs and retention practices before publication. Add any missing disclosures.

1. Controller and contact

Hunnypot is operated by Jade & Clarke, Germany. Privacy inquiries: info@jadeclarke.de. Provider details are available in the legal notice.

2. Data processed

To provide the bot, we may process Discord server IDs, configured channel IDs, user IDs, message event metadata, ban results, and technical error logs. If moderation logging is enabled, log records may contain user identifiers, timestamps, server identifiers, and reasons for enforcement. The planned core bot does not need to permanently store message content to detect a message in the configured channel.

3. Purposes and legal basis

Data is processed to operate the service, apply server-requested moderation rules, maintain security, diagnose errors, and respond to support requests. Where the GDPR applies, processing may rely on legitimate interests under Article 6(1)(f) GDPR in providing server security and preventing abuse. Other legal bases may apply in specific circumstances and must be assessed before deployment.

4. Automated moderation

Hunnypot uses an administrator-selected channel as a trigger. A message posted there may lead to an automatic server ban and a request to Discord to delete the user's messages from the previous seven days across that server. The bot does not independently archive those deleted messages. Server operators should disclose this rule to their members and provide an appeal or review route.

5. Retention

Server configuration is retained while needed to provide the service and is removed when no longer necessary or following a verified deletion request, subject to applicable obligations. Technical logs should be retained only for a defined, limited period. Before launch, specify the actual log retention period and implement automatic deletion.

6. Recipients and hosting

Discord processes information under its own privacy terms. The bot hosting provider and GitHub Pages may process technical connection data as necessary to deliver the services. Before launch, identify the actual bot host and any relevant processors, locations and international transfers.

7. Your rights

Where applicable, you may request access, correction, deletion, restriction, portability, or object to processing. You may also lodge a complaint with a competent data protection supervisory authority. Contact info@jadeclarke.de for privacy requests. Identity verification may be required to protect others' information.

8. Website and cookies

This static GitHub Pages site does not intentionally set analytics or advertising cookies. GitHub Pages may process technical access information under GitHub's own privacy documentation. External links lead to third-party websites with their own policies.

9. Updates

We may revise this policy as the service changes. The current version and effective date will be published on this page.