Privacy Policy

1. Introduction

This Privacy Policy explains how /plu/ral collects, uses, stores, and protects your personal information when you use our Discord bot, web platform, and mobile application. We are committed to protecting your privacy and being transparent about our data practices.

2. Open Source Transparency

/plu/ral is open source software released under the GNU Affero General Public License v3.0 (AGPL 3). This means you can:

• Examine the source code to verify our data handling practices
• See exactly what information is collected and how it's processed
• Review the security measures and encryption implementations
• Verify that our privacy policy accurately reflects the code

The complete source code is available at GitHub. We encourage security researchers and privacy-conscious users to examine our code.

3. Information We Collect

3.1 Account Information

When you authenticate with Discord OAuth, we collect:

• Discord user ID (unique identifier)
• Username and display name
• Email address
• Avatar URL
• OAuth access and refresh tokens

3.2 Member and Configuration Data

You may choose to create and store:

• Member names, descriptions, and custom IDs
• Avatar images for members
• Member information, such as pronouns, birthdays, and status messages
• Proxy tags and configurations
• Group information and member associations
• Fronting status and history
• Color preferences and customization settings

3.3 Discord Usage Data

Depending on server configuration, we may store different types of proxying data:

• Message IDs (original and proxy messages)
• Default Configuration: Message IDs only, no message content is stored
• Log Cleaning Enabled: Hashed message content for matching third party logging bots
• Simple Proxy Logging: Proxy events logged to configured channel, no content stored in our database
• Moderation Logging: Full message content and server moderation actions logged to configured channel
• Channel and server IDs where proxying occurs
• Webhook information for message delivery

Important: Moderation logging data is never shared with third parties outside of the server's configured logging channel. Server administrators control these logging settings.

3.4 Configuration and Preferences

We store your platform preferences including:

• Display themes and appearance settings
• Privacy and proxying preferences
• Third-party integration settings (PluralKit tokens, etc.)
• Detailed analytics collection preferences (opt-in only)
• Account type and subscription status

3.5 Analytics Data

We collect two types of analytics:

• Anonymous Analytics (Always Collected): Website page views, user regions, button interactions, response times, and general usage patterns for service improvement.
• Detailed Analytics (Opt-In Only): Proxied message counts, fronting history, detailed usage statistics, and platform-specific metrics

4. How We Use Your Information

We use your information to:

• Provide proxying functionality through Discord
• Synchronize data across web, mobile, and Discord platforms
• Manage your member configurations and groups
• Process premium subscriptions and billing
• Provide customer support and technical assistance
• Improve our services and develop new features
• Ensure security and prevent abuse

5. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Data is encrypted in transit and at rest
• Access is limited to authorized personnel for support purposes
• We use secure cloud infrastructure with regular backups
• Access logs are maintained for security monitoring

6. Data Sharing and Third Parties

6.1 Third-Party Applications

When you authorize third-party applications:

• Data is shared only within the permissions you grant
• Applications have their own privacy policies and terms
• You can revoke access at any time through your account settings
• We are not responsible for how third-party applications handle your data

6.2 Service Integration

When you enable integrations with services like PluralKit:

• Data is shared according to your integration settings
• External services have their own data handling practices
• You control what data is shared through your preferences

6.3 Legal Requirements

We may disclose information when required by law or to protect our rights and users' safety.

7. Data Retention

We retain your data as follows:

• Account and member data: Until you delete your account or specific data
• Proxied message logs: Retention varies by server configuration (see section 3.3)
• Moderation logs: Stored according to server administrator preferences
• Anonymous analytics: Retained for service improvement and performance monitoring
• Detailed analytics: Only collected if you opt-in, retained for service improvement
• Complete deletion: All data permanently removed within 24 hours when you use deletion tools

8. Your Rights

You have the right to:

• Access your personal data through the web platform or mobile app
• Modify or update your information at any time
• Delete all your data using account settings or the /delete_all_data command
• Export a copy of your data using account settings or the /export command
• Control third-party application access and integrations
• Opt into detailed analytics collection through your privacy settings (disabled by default)

Note: Anonymous analytics (page views, response times, etc.) are always collected to ensure service functionality and cannot be disabled. These are not used to identify you, or sold to third parties. They are used to improve the service and provide a better experience for all users.

9. Developer Access

Our developers may access your data in limited circumstances:

• To provide technical support and resolve issues
• To debug problems and improve service functionality
• Access is logged, monitored, and limited to what's necessary
• We maintain strict internal confidentiality policies

10. Children's Privacy

Our service is intended for users 13 years and older, consistent with Discord's terms. We do not knowingly collect information from children under 13.

11. Changes to This Policy

Changes to this Privacy Policy will be posted on this page and announced in our Discord support server. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us through our Discord support server or through the appropriate channels provided in our documentation.