Privacy Policy

Effective date: 27 October 2026

1. Who we are

Aphrodisia (“Aphrodisia”, “the Bot”) is a Discord application developed and operated independently by the Aphrodisia team (“we”, “us”, “our”). For the purposes of data protection law, we are the controller of the personal data described in this policy. Aphrodisia is an independent project. It is not affiliated with, endorsed by, or sponsored by Discord Inc.

2. Scope

This policy covers the data the Bot handles when you interact with it on Discord, and the data this website handles. It does not cover Discord itself. Discord collects and processes your data under its own Privacy Policy, and we have no control over that. Server owners and moderators may also have their own rules and practices, which this policy does not cover.

3. Data we store

The Bot does not build a profile of you just because you share a server with it. It stores data only when you, another member or a server administrator use one of its commands or features. Depending on what you use, it stores the following:

• Discord identifiers. The IDs of your account, and of the servers and channels where you use the Bot. These link stored data to the right user, server or channel.
• Content you create. Text, links and image URLs you submit through the Bot's commands, such as names, descriptions, custom fields and media links.
• Masquerade records. When the Bot re-posts a message as your character, it records which account sent the post, the character used, and the post's message, channel and server IDs, but not what the message said. This lets you edit or delete your posts and lets members see who is behind a character. These records are deleted automatically after 30 days.
• Preferences and settings. Choices you make for yourself, and configuration that server administrators set for their server.
• Interactions between members. Records of actions members take towards each other through the Bot. These can include who took the action, who it was for, any reason given, and when it happened.
• Values the Bot generates. Data it creates to deliver features, such as scores, counters, achievements and random values.

We do not store the content of your messages, your email address, phone number, IP address, location, contacts or payment details. Discord does not give bots access to most of these, and we do not ask for them.

Information about others: please do not submit sensitive personal information about yourself or about real people. That includes health, sexuality, religion, contact details and similar information.

4. Data we process but do not store

To work, the Bot receives some data from Discord in real time. It uses that data in memory and then discards it.

• Message content. The Bot can read messages in channels it has access to. It uses them only to decide whether a message calls for a response or an action you have turned on. For example, if you have chosen to have your messages re-posted in a different form, the Bot may delete your original message and post its content again on your behalf. Messages it does not need to act on are ignored. We do not store, analyse or keep copies of message content.
• Relayed content. If you send content through the Bot to be posted elsewhere, it is delivered and not kept by us.
• Server and member information. The Bot uses the server, channel, role and member information Discord provides to reply to commands, check permissions and display information. That information includes usernames, display names and avatars. We use it only while it is needed and do not save it.

5. Logs and error reports

• Operational logs. The Bot keeps technical logs. These may include user, server and channel IDs and error details. The log files have a fixed maximum size and are overwritten automatically as new entries arrive.
• Error reports. When a command fails, a technical report is sent to a private Discord channel that only we can see. Reports may include the command, its input, and the relevant IDs. Because they are posted on Discord, Discord also stores them under its Privacy Policy.

We use logs and error reports only to find and fix faults and to investigate abuse.

6. How we use data

• To provide the features you or your server choose to use.
• To keep the Bot secure, stable and free from abuse, and to enforce our Terms of Service.
• To respond to support requests and to requests about your rights.
• To produce aggregate, non-identifying statistics, such as how many servers use the Bot.
• To meet legal obligations.

We do not:

• sell, rent or trade personal data;
• use it for advertising, marketing or profiling;
• use it to train machine-learning or AI models;
• combine it with data from other sources;
• use it for any purpose that is not described in this policy.

We handle data received through Discord's API in line with the Discord Developer Terms of Service and Developer Policy.

7. Legal bases

Where the law requires a legal basis for processing, such as under the EU or UK GDPR, we rely on these:

• Performance of a contract. We process data to provide the Service you ask for, under our Terms of Service.
• Legitimate interests. We process data for security, abuse prevention, debugging and aggregate statistics. We have considered these interests and believe they do not override your rights, given how little data is involved.
• Legal obligation. We process data when the law requires it.

8. Who can see your data

• Other members of a server. Some content is displayed in the server where it is used, such as content you create, scores and leaderboards. Anything the Bot displays can be seen by everyone who can see that channel.
• Discord. The Bot runs on Discord, so everything it posts or receives passes through Discord.
• Us. We can access stored data to operate, maintain and support the Bot and to investigate abuse. Nobody else has access.
• Authorities. We may disclose data when the law requires it, or when we believe in good faith that disclosure is necessary to protect someone's safety, to prevent fraud or abuse, or to defend our legal rights.
• A future operator. If the Bot is ever transferred to another operator, its data may be transferred with it. That operator must follow this policy or tell you about changes in advance.

We use no third-party analytics, advertising or tracking services in the Bot.

9. Pseudonymity and its limits

Some features hide your Discord identity from other members, for example by showing a pseudonym or a character instead of your account. These features are pseudonymous, not anonymous:

• Discord knows which account sent each command and message.
• We may be able to link a pseudonym back to the account that used it. We would do this only to investigate a serious violation of our Terms or Discord's rules, or when legally required.

10. Storage and security

Stored data is kept in a database on infrastructure we operate. The database cannot be reached from the internet, and access is restricted to us. Discord, Cloudflare and other service providers process data in many countries. By using the Service, you understand that your data may be processed outside your country of residence.

We take reasonable technical and organisational measures to protect data, but no system is completely secure. We do not guarantee backups, so lost data may not be recoverable. If a data breach is likely to put your rights at risk, we will tell affected users and the relevant authorities as the law requires.

11. Retention

• Content and settings are kept until you, a server administrator or we delete them, or until they are no longer needed to provide the Service.
• Servers that remove the Bot. Data is not deleted automatically when the Bot is removed from a server. This lets the server pick up where it left off if it adds the Bot again. A server owner can ask us to delete it at any time, and we may delete data for inactive servers without notice.
• Masquerade records are deleted automatically 30 days after the post was made.
• Logs are kept as described in section 5.
• Discord requests. We will delete data whenever Discord asks us to.

12. Your rights and how to use them

Wherever you live, you can ask us to:

• access the personal data we hold about you and get a copy of it in a portable format;
• correct data that is wrong;
• delete some or all of your data;
• restrict how we process it, or object to us processing it;
• withdraw consent, where we rely on it.

Much of your data can be edited or deleted directly with the Bot's commands. Server administrators can manage their server's data the same way.

For anything else, contact us using the details in section 16 and include your Discord user ID or server ID. Before we act, we may ask you to confirm the request from the Discord account concerned, so that nobody else can request your data. We will reply within 30 days. For a server-wide deletion, we may ask the server owner to confirm.

If we delete your data, any features that rely on it will stop working for you. Some records may remain for a short time where we must keep them to deal with abuse or meet a legal obligation, or in log files until they are overwritten.

Depending on where you live, you may have further rights under local law. You may also complain to your local data protection authority. We do not sell or “share” personal information as those terms are defined in US state privacy laws, and we will not treat you differently for exercising your privacy rights.

13. Children

The Bot is only for people who meet Discord's minimum age in their country, which is at least 13. We do not knowingly collect personal data from anyone younger. If you believe a child under that age has given us personal data, contact us and we will delete it.

14. This website

This website sets no cookies and uses no analytics or tracking. It is served through Cloudflare, which processes requests under its own Privacy Policy and may set strictly necessary security cookies. Our web server keeps standard access logs (IP address, time, requested page and browser type) for a short period, for security and fault-finding.

15. Changes to this policy

We may update this policy when the Bot or the law changes, and will change the effective date when we do. We will announce material changes in the support server before they take effect where reasonably possible. We will not use data already collected in a materially new way without telling you first.

16. Contact

For privacy questions, data requests or complaints, email [email protected] or open a ticket in the support server.