Privacy Policy

Ophelia 💅🏻 ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Discord bot services ("Services").

By using Ophelia 💅🏻, you agree to the collection and use of information in accordance with this policy.

We only collect data that is necessary for our Services to function properly:

Discord Profile

User ID, username, discriminator, avatar URL

Server Settings

Guild ID and configuration settings only — never channel names or member lists

Usage Stats

XP levels, coins, and activity stats for leveling features

AI Chat Memory

Important facts you share with the AI — stored securely in our self-hosted database, never your full conversations

Email Address

Optional, via Discord OAuth consent — used only for identity confirmation and Ophelia account recovery

• No Message Content: We never store your messages — all chat, moderation, and audit logs stay on Discord's own servers, not ours.
• Authentication Data: OAuth tokens are stored securely for session management only.
• Email Address: When you log in via the dashboard, Discord may share your email address (only if you approve it on the Discord authorization screen). We store it solely to confirm your identity and help you recover access to your Ophelia account. We do not sell it, share it with third parties, or use it for marketing. If you remove the email scope from your Discord authorized apps or request deletion, the stored email is removed with your account data.
• Dashboard Preferences: Theme settings, language preferences stored locally.

• Service Provision: To operate, maintain, and provide core bot features (moderation, entertainment, utilities).
• User Experience: To personalize your dashboard experience and remember preferences.
• Gaming Systems: XP tracking, leaderboards, achievements, economy features.
• Moderation: To execute and track moderation actions (warnings, mutes, bans) configured by server admins.
• Improvement: Anonymous usage statistics to improve our services.
• Support: To assist with troubleshooting and support requests.

• Sell Your Data: We never sell, rent, or lease your personal information to third parties.
• Track Across Websites: We don't use tracking cookies or cross-site tracking.
• Send Spam: We never send promotional messages without your consent. The only messages we may ever send are official announcements about Ophelia 💅🏻 itself and other services developed by Deadlock Studio (our developer team) — and even those always respect your consent and Discord's communication settings.
• Share Unnecessarily: Data is only shared as described in this policy.

Privacy laws are different in every part of the world. Depending on the country or region you live in, additional legal protections may apply to your personal data on top of the universal rights above — exactly like Discord's own Privacy Policy, which applies regional rules for each user's country.

Find your region below — if you live there, these rules apply to you:

• Encryption Everywhere: All traffic to and from our dashboard is encrypted with HTTPS/TLS, and data at rest in our self-hosted database is stored encrypted.
• Self-Hosted Infrastructure: Our database runs on infrastructure we own and control — not on any big third-party cloud. Your data never sits on someone else's managed platform.
• Strict Access Controls: Access to production systems is limited to authorized team members only, secured with strong authentication and least-privilege principles.
• Isolated Network: The database is not exposed to the public internet — it accepts connections only from our own application inside a private network.
• Session Security: Login sessions are signed and verified cryptographically; OAuth tokens are stored securely and used only to keep you logged in.
• Active Monitoring: Systems are monitored around the clock, and we apply security updates promptly when they become available.
• Discord API Compliance: All data collection follows Discord's Developer Terms of Service and the Discord Developer Policy.

We keep third-party involvement to an absolute minimum. Here's the honest breakdown:

Discord Inc.

Discord is our data source, not a recipient we send your data to. When you log in via Discord OAuth, Discord shares your basic profile (ID, username, avatar — and email only if you approve) with us. Our bot's commands and responses pass through Discord's servers under their Privacy Policy.

Self-Hosted Database

Our database is a self-hosted PostgreSQL instance on our own private infrastructure. We do not hand your data to any database company — there is no third-party database provider in the chain.

Private Cloud Infrastructure

The bot and dashboard run on our own cloud infrastructure hosted in professional, redundant data center facilities with physical security, backup power, and network protection.

Analytics

Anonymous, aggregated usage statistics only — nothing that identifies you personally.

We treat your data as confidential and share it with governments or law enforcement only when we are legally required to. Specifically, we may disclose your data:

• Valid Legal Process: To comply with a legally binding subpoena, court order, or other valid legal demand from a government or law-enforcement agency in a jurisdiction where we operate — after carefully reviewing whether the request is lawful, specific, and within legal limits.
• Rights & Safety: To protect the vital interests, rights, and personal safety of our users or the public — for example investigating suspected abuse, fraud, or attacks on our infrastructure.
• Legal Obligations & Defence: To establish or defend legal claims, or to comply with applicable law and regulatory obligations.

We take the rights of minors and their families seriously:

• Parent & Guardian Requests — Yes: If you are a parent or legal guardian of a user under 18 (or under your country's age of digital consent), you can exercise any privacy right on their behalf — including viewing their data, correcting it, or requesting full deletion. Just reach out through our support server or email with proof of guardianship, and we'll act on it.
• Guardian Consent: Where local law requires verifiable parental consent before processing a minor's data, we rely on the fact that account creation and consent happen on Discord's platform under Discord's Terms of Service — and we remove data on guardian request without argument.
• No Targeting of Minors: We never use minors' data for profiling, advertising, or automated decision-making. Ever.