Privacy Policy

Information Collected

• NabBot processes Discord user, server, and channel IDs to provide the bot and dashboard. Usernames, server names, and avatar hashes may be held in memory or in a Redis cache so NabBot can work efficiently without repeatedly requesting the Discord API. In-memory cache data is cleared when the bot stops. Redis cache data is retained for up to 60 days and removed sooner when Discord reports that the relevant member or server is no longer available.
• Operational logs may contain Discord user or server IDs and are retained for up to 30 days. NabBot does not store message content, direct-message content, command parameters, or attachments in these logs.
• Command usage is stored in the database for statistical purposes. Timestamps, user IDs, and command names are stored; no command parameters or attachments are stored.
• Deaths, level ups, and other character data are kept in the database, regardless of their registered Discord user. Characters are public Tibia data. If a character is unlinked from a Discord user, its Discord user ID is cleared, but the character data may remain.
• Information posted by NabBot in the designated server log channel is not stored on our end. The information is only available in the designated Discord channels and might be removed by server managers at any time.
• The dashboard uses essential OAuth-state and session cookies to secure sign-in and keep users authenticated. These cookies contain opaque tokens, are Secure, HttpOnly, and SameSite=Lax. Dashboard sessions expire after seven days of inactivity.
• Contest rules describe the information collected for each contest. Contest entries and winner information may be published and retained indefinitely when the applicable rules say so.

Use of NabBot is also subject to Discord's Privacy Policy, which governs how Discord collects and processes data across its platform.

How We Use Information

We use this information to provide and secure NabBot, authenticate dashboard users, manage server settings, maintain service caches, process requested premium or support transactions, investigate operational issues, and improve the website and dashboard. Where applicable, we process information because it is needed to provide the requested service or because we have a legitimate interest in operating, securing, and improving NabBot.

Information Shared

• As part of CipSoft's Fansite Programme, NabBot shares the number of servers using NabBot and the number of unique users who used it during the previous month. These are aggregate counts; no IDs, names, or other identifying information are shared.

Third-Party Services

Cloudflare (Proxy and Security)

Cloudflare provides proxy and security services for NabBot's websites. It may process request and network data as part of providing those services, as well as aggregate traffic measurements. For more information, see Cloudflare's Privacy Policy.

Hosting

NabBot's self-hosted services are hosted in Austria, within the European Economic Area.

Stripe (Payment Processing)

We use Stripe, a third-party payment processor, to handle premium purchases. When you initiate a payment, Stripe may collect personal and financial information such as your name, email address, and payment details. Stripe processes this information under its own privacy policy. For more information, please refer to Stripe's Privacy Policy: https://stripe.com/privacy.

Patreon (Subscription Platform)

We currently use Patreon as an additional platform for supporting NabBot. When you subscribe via Patreon, the platform may collect personal and financial information such as your name, email address, and payment method. Patreon processes this information under its own privacy policy. For more information, please refer to Patreon’s Privacy Policy: https://privacy.patreon.com.

Umami (Website Analytics)

We use a self-hosted Umami analytics instance to understand how visitors use the NabBot website and dashboard and to improve them. Umami records page views, page titles, referring sites, browser, operating system, device type, screen size, language, and country. We do not use custom events, distinct IDs, session replay, or performance monitoring. Umami does not use tracking cookies or collect directly identifying personal information for this analytics purpose, and it is configured not to record URL query strings or fragments. Detailed Umami analytics records are retained for 13 months. We may retain aggregate monthly statistics indefinitely. Only the NabBot team can access our Umami instance at umami.nabbot.xyz.

Children

NabBot is available only to users who meet Discord's applicable minimum-age requirements.

Changes to This Policy

We may update this policy when our practices change. We will announce material changes through the official NabBot Discord server.

Your Rights and Contact

NabBot is owned and operated by Allan Galarza, based in Mexico. If you have questions about this policy or want to request access to, correction of, deletion of, restriction of, or objection to the processing of your personal information, contact us at admin@nabbot.xyz.

Some requests may be limited when information needs to be retained to operate NabBot, protect the service, meet legal obligations, or preserve public Tibia character data.

For any other question about this policy or how NabBot handles information, you can also contact us at admin@nabbot.xyz.