Privacy Policy

This Privacy Policy describes how VantaNull / Apocrypha Sys ("we," "us," or "our") handles information when you use our Discord bots and related services (collectively, the "Bots"). This policy applies to all bots developed under the VantaNull and Apocrypha Sys brand, including but not limited to Truth or Dare, Whodunit, Mainline, Babble, Swatchie, and any future bots released under these brands.

We are a small, independent developer based in Denmark. We aim to collect the minimum data necessary to operate our Bots and we never sell user data to anyone.

1. Data Controller

The data controller responsible for your information is:

• Operator: VantaNull / Apocrypha Sys, an independent developer based in Denmark
• Contact email: apocryphasys@proton.me

2. What Data We Collect

When you use our Bots in a Discord server, the Bots may collect and store the following data, depending on which Bot is in use and which features are activated:

• Server (Guild) IDs: Unique identifiers for the Discord servers where the Bots are installed.
• Channel IDs: Unique identifiers for the Discord channels in which Bot commands are used.
• User IDs: Unique identifiers for Discord users who interact with the Bots (for example, by running a slash command, clicking a button, or participating in a game).
• User-provided content: Any text, configuration, or game data that you or your server's moderators submit through Bot commands. Examples include custom prompts added via /prompt add, role configurations, and game state.
• Operational metadata: Timestamps, cooldown counters, and similar values needed for game state and rate limiting.
• Error logs: Limited diagnostic information generated when something goes wrong, retained for a short operational period.

We do not collect:

• The content of regular messages sent in Discord channels. Our Bots run on slash commands and button interactions and do not enable the Message Content Intent.
• IP addresses, location data, payment information, or personal contact details beyond what Discord exposes through standard public profile data.
• Direct messages between users.
• Voice or video data of any kind.

3. Why We Collect This Data

We collect this data solely for the following purposes:

• Operating Bot features and games (storing custom prompts, tracking game state, managing roles, etc.).
• Enforcing per-server settings such as cooldowns and feature toggles.
• Debugging and diagnosing errors.
• Preventing abuse (for example, rate limiting or removing the Bot from servers that violate our Terms of Service).

We do not use your data for advertising, analytics tracking, profiling, or any purpose beyond operating the Bots.

4. Legal Basis (GDPR)

If you are in the European Union, the United Kingdom, or another jurisdiction with similar protections, our legal basis for processing your data under the General Data Protection Regulation (GDPR) is:

• Legitimate interest: Operating the Bots and providing the requested functionality to the Discord servers that have installed them.
• Consent: Where required, you provide consent by voluntarily interacting with the Bots in servers where they have been installed.

5. Data Sharing

We do not sell, rent, or share your data with third parties for marketing or analytics purposes.

The only third parties that may process data on our behalf are:

• Discord, Inc.: All Bot interactions necessarily pass through Discord's infrastructure. Discord's own Privacy Policy applies to that processing: https://discord.com/privacy
• Hosting infrastructure: Our Bots are self-hosted on private servers operated directly by us. We do not transmit your data to additional third-party services beyond Discord itself.
• Payment platforms (where applicable): If you purchase a premium subscription, the payment is processed by the relevant platform (Discord Premium Apps, SubscribeStar, Stripe, Ko-fi, PayPal). Those platforms handle billing data under their own privacy policies. We receive only the minimum information needed to grant entitlement (typically a user ID and subscription status).

We may disclose data if required to do so by law (for example, in response to a valid legal request from authorities in Denmark or the European Union).

6. Data Retention

We retain data only as long as it is needed to operate the Bots:

• Server-specific data (custom prompts, configurations, game state) is retained as long as the Bot remains installed on the server. If the Bot is removed, this data may be deleted at any time and is not guaranteed to be recoverable.
• User-specific data is retained as long as needed for active game features or per-user settings.
• Error logs are retained for a limited operational period (typically up to 30 days) and then deleted.

7. Your Rights

If you are in the European Union, the United Kingdom, or another jurisdiction with similar protections, you have the following rights regarding your data:

• Right of access: Request a copy of the data we store about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure ("right to be forgotten"): Request that we delete your data.
• Right to restriction of processing: Request that we limit how we use your data.
• Right to data portability: Request your data in a portable format.
• Right to object: Object to our processing of your data.

To exercise any of these rights, contact us at the email address listed in section 1. We will respond within 30 days. To verify your identity for a data request, we may ask you to provide your Discord user ID.

8. Children's Privacy

Our Bots are intended for users who meet Discord's minimum age requirement (13 years old, or 16 in jurisdictions where local law requires a higher age for data processing without parental consent). We do not knowingly collect data from users below this minimum age. If you believe we have inadvertently collected data from a user below the minimum age, please contact us and we will delete it.

9. Adult Content

Some of our Bots support content intended for adult (18+) audiences. Where such content is available, it is only intended for use in Discord channels properly marked as age-restricted (NSFW), in accordance with Discord's Community Guidelines. Server administrators are responsible for ensuring that adult-oriented Bot features are only used in appropriately age-restricted contexts.

10. Security

We take reasonable technical and organizational measures to protect your data, including:

• Self-hosted infrastructure under our direct control.
• Access restricted to the developer team.
• Database storage with access controls.

No system is perfectly secure. We cannot guarantee absolute security, but we will notify affected users in accordance with applicable law in the event of a confirmed data breach.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced through our Bots, our website, or our official Discord community. Continued use of the Bots after an update constitutes acceptance of the updated policy.

12. Contact and Complaints

For any questions, requests, or complaints about this Privacy Policy or our data practices, contact:

• Email: apocryphasys@proton.me
• Brand: VantaNull / Apocrypha Sys
• Country: Denmark

You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at https://www.datatilsynet.dk if you believe we have not handled your personal data properly.