Privacy Policy — Kelpyyium

Data We Collect

Kelpyyium collects only the minimum data necessary to provide its features:

User IDs — to track economy balances, levels, warnings, and permissions across servers.
Guild (Server) IDs — to store per-server configuration, settings, and feature toggles.
Message Content — processed in real-time for slash commands, proxy tag matching, global chat relay, prefix commands, and auto-moderation. Message content is not stored persistently unless part of a moderation action (e.g., a warning reason).
Moderation Records — warning reasons, ban/mute durations, moderator IDs, and action timestamps.
Economy Data — wallet and bank balances, transaction history.
Leveling Data — XP totals, level progress, and leaderboard rankings.
Proxy Data — proxy member names, display names, proxy tags, and avatar URLs (all user-provided).
Role Persistence Data — role IDs stored for users who leave a server so roles can be reassigned on rejoin.
Suspicious Account Records — user IDs flagged by the automated suspicious account detection system, with notes.

How Data Is Stored

All data is stored locally on the bot host machine as JSON files in the data/ directory. Data is cached in memory using ConcurrentHashMaps for performance and periodically written to disk.

                Key guarantees:
                Data is never shared with third parties.
Data is never sold or used for advertising.
No data is sent to external services or APIs beyond Discord's own API.
No analytics, tracking pixels, or telemetry data is collected.

            

Data Retention

Economy and leveling data is kept as long as the bot is active in the server.
Moderation records (warnings, bans, etc.) are kept indefinitely for server admin reference.
Proxy data is kept until the user manually deletes it or uses /deletedata.
Role persistence data expires automatically after the server-configured period.
Server configuration data is retained even if the bot is removed, but is not actively used. Server owners may request deletion by contacting the bot owner.

Your Rights

You have the right to:

View what data is stored about you — economy balances, levels, warnings, and proxy members are all visible through bot commands.
Request deletion of all your personal data using the /deletedata command. This permanently removes your economy data, leveling progress, warnings (as subject), moderation logs (as target), suspicious account records, pending reports, and all proxy members/groups.
Opt out of features that process your messages — ask a server administrator to adjust your permissions (e.g., deny globalchat.use or disable proxy features).

                Server administrators can request bulk data deletion by removing the bot from their server and contacting the bot owner directly through the support server or Discord DM.
            

Privileged Gateway Intents

Kelpyyium uses the following Discord privileged intents, as required by its features:

Guild Members (GUILD_MEMBERS) — required for role persistence (tracking member join/leave), suspicious account detection, welcome messages, and maintaining the member cache for moderation commands.
Message Content (MESSAGE_CONTENT) — required for proxy tag matching in message content, prefix command parsing, global chat relay content forwarding, and auto-moderation content filtering.
Presence (GUILD_PRESENCES) — required for suspicious account detection (analyzing account age and online status patterns).

Non-privileged intents used: GUILD_MESSAGES, GUILD_MESSAGE_REACTIONS, DIRECT_MESSAGES.

Global Chat & Webhooks

The Global Chat feature relays messages between linked channels across different servers using Discord webhooks.

Relayed messages are clearly attributed with a [GC] prefix on the webhook username to distinguish them from real user messages.
Messages are rate-limited (3 seconds per user) and content is capped at 2000 characters with a maximum of 5 attachments.
Message content is forwarded in real-time and is not stored by the bot after relay.

Proxy System & Webhooks

The Proxy system (PluralKit-style) sends messages via webhooks using user-configured display names and avatars.

Servers can enable a [proxied] indicator appended to proxied messages for transparency.
All proxy members, tags, and avatars are user-provided and can be deleted at any time by the user.

📬 Contact

For privacy concerns, data access requests, or any questions about this policy:

Use the /deletedata command to erase your personal data at any time.
Contact the bot owner through the support server or directly via Discord DM.
Server owners can contact the bot owner for server-level data requests.