Privacy Policy

1. Introduction

ScammerSlammer ("we", "our", or "the Bot") is a Discord bot designed to detect and ban scam accounts across Discord servers. This Privacy Policy explains how we handle your data in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect the following types of data:

• Discord User Data: User IDs, usernames, display names, avatars, membership status, and messages.
• Server Data: Server IDs, configuration settings (log channels, ban roles).
• Ban Records: Information about banned users, including user ID, reason for ban, who issued the ban, and servers affected.
• Reports & Evidence: Messages, images, or attachments submitted via the bot for reporting suspected scammers.
• Automated Logs: Event logs of scam detection, automated bans, and other moderation-related actions.

When a user is flagged for scams and added to the database, we store their User ID, username and display name at the time of entry, the ID of the moderator who added them (or "automod"), the guild ID where they were detected, and the list of guilds they have been banned from. Usernames are not updated if changed later.

3. Non-Personally Identifiable Information (Non-PII)

All data collected by ScammerSlammer is limited to Discord user IDs and publicly visible information. Discord user IDs and usernames are considered public and do not directly identify any individual in the real world. We do not collect names, addresses, phone numbers, or any other personal information outside of Discord.

4. Purpose of Processing

We process your data under legitimate interest (Article 6(1)(f)) to protect Discord communities from scams:

• Detect and prevent scams within Discord servers.
• Enforce global bans for known scammers.
• Provide moderation logs to server admins and moderators.
• Allow users to report suspected scammers and provide evidence.
• Maintain a safe environment for Discord communities.

5. Legal Basis (GDPR)

Under GDPR, we process data based on the following legal grounds:

• Legitimate Interest: Prevent fraud and scams across Discord servers.
• Legal Obligation: Maintain records for moderation and enforcement purposes.
• Consent: Users voluntarily submit reports or evidence, giving explicit consent for processing that specific data.

6. Data Sharing and Transfers

We do not sell or rent your data to third parties. Data may be processed by:

• Discord API services to provide bot functionality.
• Cloudflare R2 storage for storing report evidence and images.
• MongoDB Atlas for database storage.

7. Website Contact Form

When you submit messages via our website contact form (processed through Web3Forms), we collect your name, email address, message content, and IP address and browser metadata for security and spam prevention. This data is used solely to respond to inquiries and provide support. It will not be shared or sold to third parties.

8. Data Retention

We retain personal data only as long as necessary:

• Ban records: Until the ban is revoked, or permanently if the user remains banned.
• Reports and evidence: Until reviewed and processed for moderation purposes.
• Automated logs: Retained for moderation and audit purposes for a reasonable period.
• Contact form submissions: Retained only to respond to the inquiry and comply with security requirements.

9. Your Rights

You have the following rights under GDPR:

• Right to access your personal data.
• Right to request correction of inaccurate data.
• Right to request deletion of your data.
• Right to restrict or object to processing.
• Right to lodge a complaint with a data protection authority.

To exercise these rights, please contact us via our website contact form.

10. Data Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction.