Privacy Policy
Last Updated: July 19, 2026
This Privacy Policy describes how Tausendsassa Discord Bot ("Bot") and its
associated web admin panel ("Web Panel") collect, use, and protect your
information.
1. Information We Collect
### Automatically Collected Data
- Discord User IDs: To identify users for map pins, cooldown tracking, and
OAuth2 login.
- Discord Server IDs: To maintain server-specific configurations.
- Discord Channel IDs: To post feeds, calendar summaries, and maps in
configured channels.
- Interaction Data: Slash command usage, button clicks, and component
interactions for functionality and analytics.
### User-Provided Data
- RSS/Atom Feed URLs: Feed sources you configure for monitoring.
- Location Information: Geographic locations you voluntarily share via the
`/map` pin feature, including geocoded coordinates from Nominatim
(OpenStreetMap).
- Map Customizations: Pin colors and map region preferences.
- Calendar URLs: iCal/ICS calendar feeds you configure for event
synchronization.
- Calendar Filters: Blacklist and whitelist terms for event filtering.
- Discord Event Data: Event titles, descriptions, and timing from iCal
feeds.
- Server Settings: Feed configurations, calendar settings, timezone
preferences, moderation settings, and webhook URLs.
- Feedback Submissions: Messages, subject category, and anonymity
preference sent via the `/feedback` slash command.
### OAuth2 Data (Web Panel)
- Discord username, avatar hash, and list of guilds where you have
administrative permissions (for access control only — not stored
persistently).
### Technical Data
- Log Data: Error logs, system performance metrics, and operational status.
- Cache Data: HTTP cache for feed requests (ETag, Last-Modified), webhook
cache, and map image cache (all automatically managed).
- Analytics: Anonymous page-view, map-view, slash-command, and
component-interaction counters aggregated hourly. No per-user analytics are
stored.
2. How We Use Your Information
### Core Functionality
- RSS/Atom Feeds: Monitor and post feed updates to configured channels via
Discord webhooks.
- Reddit & Bluesky Feeds: Fetch and display posts from Reddit (via public
RSS and authenticated JSON API) and Bluesky (via AT Protocol).
- RedGifs Media: Resolve RedGifs links to downloadable media for inline
display (guild-gated).
- Interactive Maps: Display user-set location pins on rendered maps,
accessible via Discord CV2 messages, the 3D globe page, and Discord
Activities.
- Calendar Integration: Fetch iCal data, manage Discord event lifecycle
(create/start/end automatically), and post weekly summaries.
- Moderation Logging: Record join, leave, kick, ban, unban, and timeout
events for server admins.
- Feedback System: Collect and manage user-submitted feedback with
per-guild status tracking.
- System Operation: Maintain bot functionality, monitor health, and
troubleshoot issues.
### Data Processing
- All data processing and storage occurs on the host server (PostgreSQL
database, local filesystem).
- No data is sold, traded, or rented to third parties.
- External service calls are limited to what each feature requires — see
Section 4.
3. Data Storage and Security
### Storage
- Primary storage: PostgreSQL database (hosted on the same server).
- Map cache: PNG images in `data/map_cache/` and per-guild directories.
- Logs: Rotating log files with automatic cleanup.
- Backups: Automated `pg_dump` backups stored locally, oldest removed after
7 days.
### Data Security
- Access to the database and server restricted to the bot operator.
- Database credentials never exposed to the Discord client or web visitors.
- Web Panel sessions use server-side signed cookies (itsdangerous) with 7-day
expiry.
- Map pins and GeoJSON endpoints require Discord OAuth2 login or a shared
access token — they are not publicly accessible.
- Regular automated backups of all configuration and user data.
### Data Retention
- Server Configuration: Retained while the bot is active on the server.
- Location Data (Map Pins): Stored until you remove your pin or leave the
server (one pin per user per guild).
- Calendar Data: Stored until the calendar is removed by an admin.
- Discord Events: Stored while active; cleaned up when events are deleted.
- Log Data: Rotated daily with limited retention.
- Cache Data: Managed automatically with size limits and periodic cleanup.
- Analytics: Hourly rollups retained indefinitely (aggregate counts only,
no user-level data).
- Feedback: Retained until the bot leaves the server; can be archived by
admins.
4. Data Sharing and Third Parties
### No Data Sales
We do not sell, trade, or rent your personal information to third parties.
### External Services
- Discord API: All bot functionality depends on Discord's API. User IDs,
server IDs, and message content are transmitted to Discord as part of normal
bot operation.
- Nominatim / OpenStreetMap: Location queries from map pins are sent to
OSM's geocoding service to resolve coordinates.
- iCal Hosts: Calendar URLs (Google Calendar, Outlook, etc.) are fetched to
retrieve event data.
- Reddit: Feed polling uses Reddit's public RSS endpoints and authenticated
JSON API (gallery resolution) with a stored browser cookie.
- Bluesky: Feed polling uses the Bluesky AT Protocol public API.
- RedGifs: Media resolution uses the RedGifs API v2 for HD media download.
- CDN / Basemaps: The 3D globe pages load map tiles from CARTO CDN and
MapLibre.
### Visibility
- Map pins are visible to all members of the server where they were set,
and to authenticated users of the Web Panel with access to that server's map.
- RSS feed and calendar configurations are visible to server admins via the
Web Panel and Discord dashboards.
- Calendar events and summaries are visible to all server members in
configured channels.
- Moderation logs are visible to server admins via the Web Panel.
5. Your Rights and Choices
### Data Control
- Remove Pins: Delete your location data using the `/map` command or the
pin options menu.
- Remove Calendars: Server admins can remove calendars via Discord commands
or the Web Panel.
- Leave Servers: Your map pin is automatically removed when you leave or
are removed from a server.
- Feedback: Submitted feedback can be archived by server admins. The
`/feedback` command includes an anonymous-submission option.
- Contact Admins: For data deletion requests, contact a server
administrator or the bot operator.
### Access
- View your current map pin via the `/map` command or the 3D globe page.
- Update your pin location at any time (subject to per-guild cooldown limits).
- Server admins can view and manage all server data via the Web Panel.
6. Cookies
The Web Panel uses a single session cookie (`session`) set by Starlette
SessionMiddleware. It contains a signed, opaque session identifier — no
personal data is stored in the cookie itself. The cookie expires after 7 days
of inactivity. No tracking or advertising cookies are used.
7. Data Processing Legal Basis
We process your data based on:
- Legitimate Interest: Bot functionality and system operation.
- Consent: Voluntary participation in map features and feedback submission.
- Contract Performance: Providing requested bot services to server admins.
8. International Data Transfers
- The bot operates on a server located in Germany.
- Discord services operate globally with their own data protection measures.
- Geocoding queries to OpenStreetMap may involve international data
transmission.
- Feed polling fetches data from servers worldwide based on configured URLs.
9. Children's Privacy
This bot is not intended for children under 13. We do not knowingly collect
information from children under 13. If you believe a child has provided
information, please contact us.
10. Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted at
`/privacy` on the Web Panel with an updated date. Continued use constitutes
acceptance of changes.
11. Contact Information
For privacy-related questions or requests:
- Contact the bot operator via Discord: `spa1teN`
- Use the `/feedback` slash command in any server where the bot is active
- Review the bot documentation and data management commands