Privacy Policy

Last updated: August 21, 2026

This Privacy Policy explains what data we collect through the Zinn Guard Discord bot and its associated web dashboard (together, the "Service"), operated by OVP Digital, why we collect it, and how we use it.

1. What data we collect

a) When you sign in to the web dashboard with your Discord account — through OAuth2 authorization (the "identify" and "guilds" scopes), we receive from Discord: your user ID, username and avatar, and the list of servers you administer (where you have the "Manage Server" permission). This data is kept only in your browser's encrypted, signed session cookie, and expires automatically after 7 days or when you log out. We do not store this data in a server-side database.

b) When the bot automatically bans a user — we record, for that server: the banned person's Discord username and ID, the reason shown, and the date/time of the action. These records are kept server-side (the last 200 per server) so you can view the moderation log from the web dashboard.

c) Each server's settings — whether auto-ban is enabled, the chosen mode of operation, and the configured reason text — are kept for as long as the bot remains on that server.

d) Technical hosting data — our hosting provider (Fly.io) may collect standard technical logs (for example, IP addresses of HTTP requests) for security and infrastructure operation purposes, under its own policies.

We do not collect email addresses, payment information, or any other personal data beyond what's listed above. We do not use analytics or advertising cookies — only a technical session (login) cookie and a cookie for your language preference (Romanian/English).

2. How we use the data

We use the data solely to provide the Service's functionality: signing in to the web dashboard, showing the servers you can administer, applying the configured auto-ban rules, and displaying the moderation log. We do not sell or rent your data to third parties.

3. Who we share data with

We do not share data with third parties for commercial purposes. Data passes through Discord's infrastructure (as the platform the bot runs on) and through our hosting provider, Fly.io, which acts as the technical operator of the infrastructure the Service runs on.

4. How long we keep data

Session (login) data expires automatically after 7 days or when you log out. The ban log is capped at the last 200 entries per server — older entries are automatically removed. A server's settings are kept for as long as the bot remains on that server; you can request their deletion at the contact address below, or by removing the bot from your server.

5. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to request access to your data, its correction or deletion, and to restrict its processing. For any request, please write to us at the contact address below.

6. Security

The session cookie is cryptographically signed to prevent tampering, and all communication with the Service happens exclusively over HTTPS. We take reasonable steps to protect your data, but no method of transmission or storage over the internet is 100% secure.

7. Children

The Service follows Discord's minimum age requirement (13) and is not directed at children under that age.

8. Changes to this policy

We may update this Policy from time to time. The updated version will be posted on this page, with the "last updated" date revised accordingly.

9. Contact

For privacy questions or to exercise your rights, write to us at contact@ovpdigital.ro.