BotStable Join Discord

Legal

Privacy Policy

Last updated:

This policy explains what personal data BotStable collects, why, and what you can do about it. BotStable is a free hobby project run by one private person in Hungary. For privacy questions, contact [email protected].

1. Who is responsible

The data controller is the private individual who runs BotStable. Contact: [email protected].

2. What we collect

Panel account (panel.botstable.eu)

  • Username, email address, and the first and last name you enter (these can be a nickname)
  • Your password, stored only as a secure hash, never in plain text
  • Two-factor authentication settings, if you turn it on
  • IP addresses and timestamps of logins and actions on the panel (activity logs)

Your server

  • The files you upload and the console output of your bot. We don't look at these, except as described in our Terms of Service (abuse investigations, or when you ask us for help).

Discord

  • Your Discord username and user ID when you join our Discord server or open a ticket
  • The content of support tickets. We may keep ticket transcripts so we can follow up on issues and handle abuse. Transcripts are stored on our website host (Cloudflare) at private, unguessable links that only staff receive, and are deleted after 12 months.
  • If you delete a message in our Discord server, its content may be kept in a staff-only moderation log.

Email

Website (botstable.eu)

  • We don't use analytics, tracking or cookies. Fonts are hosted on our own site. Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from attacks. The Locations section on the homepage checks if our servers are reachable by connecting your browser directly to them, so your IP address also reaches our server provider, OVHcloud.

Status page reports (status.botstable.eu)

  • When you report an issue on our status page, we store the reason and the details you send, and a one-way hash of your IP address to prevent spam. The hash is made with a random value that changes every day, so it can't be turned back into your IP address. We don't store your IP address itself.
  • Reports are forwarded to our staff Discord.
  • The report form uses Cloudflare Turnstile to check that you're a person and not a bot. Turnstile processes information such as your IP address and browser details for this check.

We don't sell your data, and we don't use it for advertising.

  • To provide the service (GDPR Art. 6(1)(b), contract): creating your account, running your server, answering your tickets and emails, and contacting you about your server (for example the 30-day inactivity notice).
  • To keep the service secure (GDPR Art. 6(1)(f), legitimate interest): activity logs, IP addresses and ticket transcripts help us prevent abuse, investigate breaches of our terms and protect other users.

4. Who else processes your data

We use these services to run BotStable. They only get the data they need to do their job:

  • OVHcloud: hosts our panel and bot servers. The servers are located in Canada, which the EU considers to have an adequate level of data protection.
  • Cloudflare: DNS, website hosting, security, email forwarding for [email protected], and the Turnstile check on the status page report form.
  • Discord: our community server and support tickets.
  • Google (Gmail): emails to [email protected] are forwarded to a Gmail inbox.
  • Brevo: sends our outgoing emails from [email protected].
  • A hosting provider for our support bot: processes Discord data from our server.

Some of these providers may process data outside the EU. Where they do, they use legal safeguards such as EU adequacy decisions or Standard Contractual Clauses.

5. How long we keep it

  • Account data: while your account exists. Deleted when you ask us to, or after inactivity as described in our Terms of Service.
  • Server files: while your server exists. Deleted together with the server.
  • Activity logs: up to 90 days.
  • Ticket transcripts and emails: up to 12 months, unless we need them longer to deal with abuse.

We may delete data sooner. We don't guarantee we'll keep any data for these full periods.

6. Your rights

Under the GDPR you have the right to:

  • see what data we have about you
  • correct wrong data
  • have your data deleted
  • limit or object to how we use it
  • get a copy of your data in a usable format

To use any of these rights, email [email protected] or open a ticket in our Discord server. We'll reply within one month.

If you think we're handling your data wrongly, you can complain to the Hungarian data protection authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH, naih.hu) or the authority in your own EU country.

7. Age

BotStable is only for people aged 16 and over. If we learn that someone under 16 has an account, we'll delete it.

8. Security

We use HTTPS everywhere, hashed passwords, a firewall, and key-only SSH access to our servers. No system is perfectly secure, so please use a strong password and turn on two-factor authentication in the panel.

9. Changes

We may update this policy. Important changes will be announced in our Discord server.

10. Contact

[email protected]