Last updated 2024/7/5
Welcome to the privacy policy! Almost nobody reads this, but I'm glad to see that some people do!
Anyway, there's a bit of a checklist when it comes to the requirements of a privacy policy, so here goes.
The name of the service is "Suicide Prevention Bot", but I'll be referring to it as "the bot" becuase nobody has time for such a long name.
This policy applies to everyone interacting with the bot, or accessing the website. **This means you!**
We also have a Terms of Service that applies to you. Legally, you're supposed to read that too. Enjoy.
Well to start off, we don't collect any sensitive or personal information, unless you explicitly submit it to us.
To be precise, we collect your non-senitive user preferences, such as your choice to opt-out of bot DMs, and we save messages you submit to us with the "Report Issue" button. If that message happens to contain otherwise sensitive or personal information, take care before submitting it. There is an extra confirmation prompt to remind you before the issue actually gets submitted.
Other than user preferences and submitted issues, we do not collect any other data whatsoever from you, unless you are a Discord server administrator. In that case, we also store the language you have set.
We do not collect any other information, period.
Apparently, I have to explain why we collect the data that we do. Well, we collect your user and (potentially) server preferences, because that's obviously necessary for the bot to function. Otherwise, it would just ignore your opt-out preferences and send you DMs anyway. That would be a bit rude, wouldn't it?
We collect your submitted issues because that's the whole point of the "Report Issue" button. If we didn't collect those, then we wouldn't be able to see them, and then we wouldn't be able to address the issues. Shocker.
As stated above, we collect your information when you submit it to us. This is done through slash commands or buttons. We don't automatically collect sent messages or anything else.
Well I'm supposed to list out all the thousands of third parties that most companies share their user data with, but in this case, not only do we not share any data with third parties, we don't even have any meaningful data to share. So, no one.
Bot developers may be granted access to the list of reported messages, so if you consider them a third party, then there you go.
I (the bot owner) guess technically I could go into the database and see who decided to opt-out of DMs. But I won't. I don't care.
Based on where you live, your government may have granted you certain rights regarding your data.
If the GDPR applies to you, you have the right to request a copy of the data we have on you, and to request that we delete it. You can do this by contacting us at [email protected]. If you do for some reason request a copy of your data, I'll probably just send you a screenshot of your entry in the database where I store your opt-out preference. It's not very exciting. I'll delete it, too, if you ask. If you want me to delete any reported messages, be sure to include the Message ID and Server ID. Otherwise, all I need is your User ID.
If you live in California, you have the right to stay cool, because those beaches are sick. Come visit some time! It's fun. You also have the right to request a copy of your data, and to request that we delete it. You can do this by contacting us at [email protected]. If you do for some reason request a copy of your data, I'll probably just send you a screenshot of your entry in the database where I store your opt-out preference. It's not very exciting. I'll delete it, too, if you ask. If you want me to delete any reported messages, be sure to include the Message ID and Server ID. Otherwise, all I need is your User ID.
If you live somewhere else that has additional privacy rights, follow the same instructions as above for Europe and California. I'll do my best to comply with your local laws.
Simply don't press any bot buttons or use any slash commands. By not interacting with the bot, you risk submitting any data to us. Easy as that. The bot will still function, but you won't be able to report any issues or save any preferences.
The bot is hosted in sunny Los Angeles, California, in the United States. If you're not in the US, your data will be transferred internationally. If you're in the US, then it won't be. Welcome to Geography 101.
The GDPR says that I have to treat your data with the same level of protection as if it were in Europe. I'll do my best, but I can't guarantee that the US government won't come knocking on my door and demand your data. If they do, I'll let you know, unless the file a gag order or something. Then I won't be able to tell you. The point is that nobody would care about your bot opt-out preference anyway.
Forever!!!! *dramatic sound effect*
Yes, I store your DM opt-out and server language preferences forever, unless you ask me to delete it. I also store your reported messages forever, unless you ask me to delete them.
There really shouldn't be any personal information in there anyway.
First and foremost, I use SSL. It's 2024, everyone does that now. If you're not using SSL, you're doing it wrong.
Your user preferences are stored in a MySQL database, and your reported messages are stored in a Discord channel. The database stores no sensitive information, and the Discord channel is only accessible to bot developers.
Really, the most important security measure is that everything is open-source. You can see the code for yourself, and see that I'm not doing anything shady. If you don't know how to read code, then that's a skill issue.
We hope to never need to update this policy, but if we do, it's ususlly whenever new bot features are added, in order to account for them. Usually, I announce changes in our Discord server, so if you're in there, you'll know.
You also have the right to complain to me about your privacy rights. Go ahead - [email protected].
Well I apparently need to reiterate that you can contact me at [email protected], as well as the fact that the name of the entity responsible for this privacy policy is "Suicide Prevention Bot".
Welp, that was boring. Did you make it to the end? Legally, you're supposed to.
Anyway, I have fulfilled my legal requirements, making that the longest possible way to say "we store your user preferences and reported messages and nothing else."