AnchorBot Privacy Policy

1. Scope and operator

This Privacy Policy explains how information is collected, used, disclosed, and retained when you use AnchorBot’s Discord application, bot, website, and related support (the “Service”). It covers information AnchorBot receives from Discord, server administrators, users who interact with the bot, and website visitors.

The controller and operator is NotDotRae / AnchorBot, an independent operator based in Virginia, United States. Privacy questions and requests may be sent to Rae@rae.onl.

Discord separately controls information it handles under its own privacy policy.

2. Information we handle

We distinguish information the bot accesses transiently to work from information it stores as configuration. Not every field available through Discord is retained.

Information we do not intentionally collect

AnchorBot does not create user profiles or intentionally collect payment-card data, government identifiers, precise geolocation, biometric data, health information, address books, advertising identifiers, or Discord passwords or account tokens. Do not include sensitive personal information in commands or configured messages. Discord message content can contain information we did not ask for; we process it only as described here and take reasonable steps to avoid retaining irrelevant content.

Cookies and tracking

The AnchorBot legal website does not set AnchorBot-controlled cookies, use local storage, load advertising technology, or run audience analytics. Our host may process ordinary request and security data as described above. Because we do not sell or share data for cross-context behavioral advertising, there is no cookie-advertising opt-out to operate on this page.

3. How we use information

We use information only as reasonably necessary to:

• provide requested commands, pinned messages, embeds, polls, webhook delivery, and configuration;
• identify the relevant Discord server or channel and check user or bot permissions;
• detect activity that triggers refreshing or removing a configured pinned message;
• operate, maintain, troubleshoot, secure, and prevent abuse of the Service;
• respond to support, privacy, copyright, and legal requests;
• comply with law and enforce our Terms and platform rules; and
• measure aggregate bot availability or server count without building individual user profiles.

We do not use Discord API data to make decisions that produce legal or similarly significant effects about a person.

4. Legal bases where applicable

Where laws such as the GDPR or UK GDPR require a legal basis, we rely on:

• performance of a contract to provide the Service you or your server request under the Terms;
• legitimate interests in operating a reliable, secure, minimal-data Discord utility, preventing abuse, answering requests, and improving aggregate performance, balanced against user rights;
• legal obligations when processing is needed to comply with law or valid legal process; and
• consent where we specifically ask for it and applicable law requires it, which you may withdraw prospectively.

Providing optional configured content or a webhook URL is voluntary, but the related feature cannot work without it. Server and channel identifiers and relevant Discord event data are necessary for the bot to operate in Discord.

5. How information is disclosed

We do not sell personal information. We do not share it for targeted or cross-context behavioral advertising. We may disclose information only as follows:

• Service providers. Discord supplies and receives platform data; Convex hosts bot configuration records; Vercel hosts and delivers this website; and infrastructure vendors may provide networking, security, or operational support. They may process data only to provide their services, subject to their agreements and applicable law.
• At your direction. Configured messages are posted in the Discord channels selected by authorized users. Information you place in a public or member-visible channel is visible according to that channel’s settings.
• Optional integrations. If enabled, top.gg may receive aggregate server-count statistics. Feature-specific third parties will receive a command’s input only when needed to return a requested result and only after the feature is made available.
• Legal and safety reasons. We may preserve or disclose information when reasonably necessary to comply with law or legal process; protect rights, safety, or security; investigate abuse; or enforce agreements.
• Operational transfer. If the Service is reorganized or transferred, relevant information may transfer with it, subject to this Policy and required notice.

We do not disclose Discord API data to data brokers, advertising networks, or monetization services, and we do not use message content to train AI or machine-learning models.

For details about provider handling, review Discord’s Privacy Policy, Convex’s Privacy Policy, and Vercel’s Privacy Notice.

6. Retention and deletion

We keep information only for the shortest period reasonably necessary for the purpose described, subject to legal, security, dispute, and backup needs. Our retention criteria are:

• Stored server configuration, pinned content, and webhook URLs are retained while the related feature is active or needed to provide the Service. They are deleted when an authorized command removes them, the affected channel is deleted, the data is no longer necessary, or a verified deletion request is completed. When we detect that the bot has been removed from a server, residual configuration is scheduled for deletion, normally within 30 days.
• Transient Discord event data is not kept as a separate message archive. It is ordinarily discarded after the command or event cycle, except for content an authorized user deliberately converts into stored pin configuration and short-lived in-memory caching needed to operate the bot.
• Bot-generated messages on Discord remain subject to server administrators’ controls and Discord’s retention practices. Stopping a feature may delete the bot’s latest pin but cannot guarantee deletion of copies, quotes, exports, screenshots, or data independently retained by Discord or users.
• Website request and security records are retained under Vercel’s operational and security schedules. AnchorBot does not maintain a separate audience-analytics database.
• Support, legal, and abuse records are retained for as long as reasonably needed to resolve the matter, demonstrate compliance, enforce agreements, or meet legal requirements.

Deletion from active systems may not immediately remove data from encrypted backups. Backup copies are isolated from ordinary use and expire or are overwritten under provider schedules unless preservation is legally required.

7. Security

We use reasonable administrative and technical safeguards appropriate to the Service, including access controls, authenticated database requests, transport encryption supplied by providers, limited data collection, and restricted operational access. No system is perfectly secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

You share responsibility for security. Restrict the bot’s permissions, limit configuration commands to trusted roles, keep webhook URLs secret, remove obsolete content, and promptly rotate exposed webhooks in Discord. If you believe AnchorBot data or credentials have been compromised, contact us immediately.

8. International processing

The Operator is based in the United States, and the Service’s providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where applicable law requires a transfer mechanism, we rely on provider contractual safeguards, adequacy decisions, or another lawful mechanism.

9. Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an explanation of personal information; object to certain processing; withdraw consent; or appeal a denied request. You may also have a right not to receive discriminatory treatment for exercising privacy rights.

To make a request, email Rae@rae.onl with the subject “AnchorBot privacy request” and include the Discord server ID, channel ID, relevant feature, and the right you wish to exercise. Do not send a Discord password, bot token, webhook token, government ID, or unnecessary personal information. We may request limited information to verify your identity, authority over the server, and the scope of the request. Authorized agents must provide proof of authority where legally permitted.

Because persistent bot records are generally keyed to a server or channel rather than a user, the most effective deletion request usually comes from a server owner or administrator. We will still evaluate requests from individual users and act where we can reasonably identify their information without harming others’ rights.

If a request is denied, you may appeal by replying with “Privacy appeal” and an explanation. You may also complain to the privacy or data-protection authority where you live. We aim to respond within 30 days, or within the period required by applicable law, and will explain any permitted extension.

No sale or targeted advertising. AnchorBot does not sell personal information or use it for targeted advertising, so there is no sale/sharing opt-out required for those practices. We treat legally recognized browser opt-out signals, including Global Privacy Control, as an opt-out where applicable; the site has no advertising or cross-site tracking to disable.

10. Children and teens

The Service is not directed to children under 13 or anyone below Discord’s minimum age in their country, if higher. We do not knowingly solicit information from such children. If you believe a child below the applicable age has provided information through AnchorBot, contact us with enough detail to locate it. We will take reasonable steps to delete the information and prevent further processing.

Server owners and administrators are responsible for using appropriate Discord age gates and channel settings and for avoiding configuration that exposes minors to age-restricted content.

11. Third-party services and links

This Policy does not replace Discord’s or another third party’s privacy terms. Discord controls its platform, accounts, messages, permissions, and data retained independently of AnchorBot. Third-party sites linked from a command or this website may collect information under their own policies. Review those policies before using them.

12. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, or providers. Material changes become effective 30 days after posting unless a change is required sooner for law, security, or platform compliance. The “Last revised” date identifies the current version. Where appropriate and reasonably available, we may also provide notice through the website, bot, or support channel.

13. Contact

NotDotRae / AnchorBot
Independent operator based in Virginia, United States
Rae@rae.onl

For a privacy request, include “AnchorBot privacy request” in the subject. For a security concern, include “AnchorBot security” and do not place live credentials in the message.