Privacy Policy

Last updated: August 1, 2026

This Privacy Policy applies to BoundRealms Mod (the Discord bot, Application ID 1532765106608406750) and the associated website at www.boundrealms.net. Read it in full before adding the bot to your server.

1. Who We Are

BoundRealms Mod is an independently operated Discord bot. It is not affiliated with, endorsed by, or part of Discord Inc. The bot is developed and maintained by a private individual ("we", "us", "our").

By adding BoundRealms Mod to your Discord server, or by using commands within a server that has the bot, you agree to this Privacy Policy.

2. Discord Permissions & Intents We Use

BoundRealms Mod requests only the permissions required for its moderation features:

Bot Permissions

• Send Messages / Embed Links - to respond to commands and send moderation logs.
• Read Messages / View Channels - to receive and process messages for AutoMod.
• Manage Messages - to delete messages that violate server rules.
• Moderate Members (Timeout) - to apply temporary timeouts as punishment.
• Kick Members - used for escalated enforcement actions.
• Ban Members / View Ban List - to apply and manage bans.
• Use Slash Commands / Use Application Commands - to register and respond to the bot's 24 slash commands.

Gateway Intents

• Message Content Intent (Privileged) - required to read message text for AutoMod filtering. Message content is processed in memory only and is never stored.
• Guild Members Intent (Privileged) - used to look up member information when applying punishments and checking roles.
• Guilds - standard intent to receive guild and channel events.
• Guild Messages - standard intent to receive message events for AutoMod.

3. Data Collected by BoundRealms Mod

The bot stores data in a local SQLite database. The following table describes exactly what is stored:

Beyond the above, no other data is collected. The bot does not log all messages, does not build user profiles, and does not track users across servers.

4. Data Collected by the Website (www.boundrealms.net)

4a. Discord OAuth2 Login (optional)

The website offers an optional "Log In with Discord" feature. If you choose to log in, we receive from Discord's API and temporarily store in server memory:

• Your Discord User ID
• Your Discord username
• Your Discord avatar URL
• A list of Discord servers you manage (servers where you have the "Manage Server" permission), including their IDs, names, and icon URLs

This data is stored exclusively in-memory for the duration of your session (maximum 24 hours) and is deleted when the session expires or when you log out. This data is never written to a database or disk.

We request the following Discord OAuth2 scopes: identify and guilds. We do not request access to your email address, messages, or any other data.

4b. Session Cookie

When you log in, the website sets a single session cookie named br_session. This cookie contains a random token (not your Discord ID or any personal data) and is used to identify your session. It is set as HttpOnly, SameSite=Lax, and expires after 24 hours.

4c. Preference Storage

The website stores a single key, cookies-ok, in your browser's localStorage to remember that you dismissed the cookie consent banner. It contains no personal data.

4d. Server Logs

The web server may log standard HTTP request metadata (request path, timestamp, response code) for diagnostic purposes. These logs are stored locally and are not linked to personal identifiers.

5. How Data Is Used

All collected data is used exclusively to operate the bot's features:

• Applying your server's AutoMod configuration to incoming messages.
• Tracking repeated violations to apply progressive punishments (warn → 10-minute timeout → 1-hour timeout → ban) within a 24-hour window.
• Allowing server moderators to view, manage, and clear warning history using slash commands.
• Sending moderation action logs to the server's configured log channel.
• Providing server administrators with a web dashboard to view which servers they manage (when logged in).

Data is never used for advertising, marketing, analytics, or sold to any third party under any circumstances.

6. Data Storage & Security

Bot data is stored in a SQLite database file located on the server that hosts the bot. Access to this file is restricted to the server operator. Each server's data is fully isolated - one guild's data cannot be accessed by another guild or its members.

Website session data is stored only in process memory and is never persisted to disk. It is automatically cleared when the server restarts.

We apply reasonable technical measures to protect stored data. However, no system is 100% secure. If you believe there has been a security incident, please contact us immediately (see Section 12).

7. Data Retention & Deletion

Violation Records

Violation counts reset after 24 hours of inactivity per user (the 24-hour window). Records are not automatically purged from the database beyond this reset logic, but server administrators can delete them at any time:

• /clearwarnings <user> - clears all violation records for a specific user in your server.
• Removing the bot from your server - does not automatically delete data, but you may request deletion (see below).

Server Configuration

Configuration data (custom words, log channel, automod rules) is retained as long as the bot is in your server. It is not automatically deleted when the bot is removed. To request deletion, contact us.

Website Sessions

Session data is deleted when you log out, when the 24-hour session expires, or when the web server restarts. There is no persistent user account - every login creates a fresh session.

Requesting Full Deletion

Any server administrator may request complete deletion of all data associated with their server (guild ID). We will process deletion requests within 30 days. Contact details are in Section 12.

8. Third-Party Services

• Discord - the bot operates on Discord's platform. Your use of Discord is subject to Discord's Privacy Policy. BoundRealms is not affiliated with Discord Inc.
• Cloudflare - the website is served via Cloudflare Tunnel. Cloudflare may process request metadata (such as IP addresses and request headers) in accordance with Cloudflare's Privacy Policy. We do not share data with Cloudflare beyond what is inherent in routing web traffic.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or analytics service.

9. Children's Privacy

BoundRealms Mod is not directed at children under the age of 13 (or the applicable minimum age in your country). We do not knowingly collect data from children. If you believe a child has used the bot or the website and data has been collected, please contact us and we will delete it promptly.

Users of Discord must comply with Discord's Terms of Service, which require users to be at least 13 years old.

10. Your Rights

Depending on your location, you may have rights under applicable data protection law (including GDPR, CCPA, and others). These include the right to:

• Access - request a copy of the data we hold about your server or user ID.
• Correction - request correction of inaccurate data.
• Deletion - request deletion of all data associated with your server or user ID.
• Objection - object to processing of your data.
• Portability - request a machine-readable copy of your data.

To exercise any of these rights, contact us via the information in Section 12. We will respond within 30 days.

You may also remove the bot from your server at any time, which prevents any further data collection related to your server.

11. Changes to This Policy

We may update this Privacy Policy when new features are added or applicable laws change. The "Last updated" date at the top of this page reflects the most recent revision. We will not retroactively reduce your rights without clear notice.

Continued use of BoundRealms Mod or the website after changes are posted constitutes acceptance of the updated policy.

12. Contact