1. Scope

This Policy describes data processing when you use the Liebe Discord bot, website, control panel, API, music features and related services. Use of individual Discord servers is also governed by their owners’ rules and policies.

For questions about data processing, contact us through the support server. We may verify the requester’s identity and authority in order to handle a request.

2. Categories of data processed

Depending on the features you use, we may process:

your Discord ID, username, display name, avatar, language and information available through Discord OAuth;
server IDs, names, icons, roles, channels and settings, as well as information about your permissions on a server;
messages and their metadata, reactions, voice activity, moderation events, requests, ideas, tickets, achievements and statistics, only when the relevant feature is enabled;
music-source search queries, the current track, queue, playback position and voice-channel information; active player state is generally held temporarily and is no longer used after playback stops;
subscription, plan and payment-status data and transaction IDs; the payment provider processes full bank-card details;
IP address, device type, browser, session information, cookies, security logs, errors and technical analytics;
content and settings voluntarily provided by you or a server administrator.

We do not ask you to submit special categories of personal data, payment credentials or access secrets through the Service. Do not put such information in messages, forms or settings.

3. Purposes and legal grounds

We process data to:

authenticate you through Discord, provide features and perform the user agreement;
provide moderation, logging, activity analytics, economy, music playback and other enabled modules;
process subscriptions, prevent fraud and meet accounting and tax requirements;
protect accounts, investigate abuse, diagnose errors and maintain stability;
contact you and handle requests;
meet legal obligations and protect the legitimate interests of the project and users;
analyze and improve the Service in aggregated or minimally necessary form.

Depending on the situation, processing is based on performance of an agreement, consent, a legal obligation or a legitimate interest where it does not override the data subject’s rights and freedoms.

4. Roles of participants

For account, website, subscription and Liebe infrastructure data, Liebe determines the purposes and means of processing. A Discord server administrator independently decides which modules to enable and which member data to process through them; in that respect, the administrator may act as a separate data controller. Contact the administration of the relevant server about its settings and logs.

5. Recipients and external services

Only authorized people and providers who need access to operate the Service receive data. Data may be provided to:

Discord, for authentication and bot operation;
hosting, database, security, monitoring and content-delivery providers;
the payment provider, to process and refund payments;
music sources, to search for and retrieve content you request;
public authorities and other parties when disclosure is required by law or necessary to protect rights.

External services process data under their own documents. For cross-border transfers, we use grounds and safeguards provided by law.

6. Cookies and local storage

Necessary cookies and local storage support sign-in, security, language, theme and interface settings. Additional analytics is used only where there is an appropriate legal ground. Blocking required cookies may make authentication and some features unavailable.

7. Retention and deletion

We retain data no longer than needed for its stated purpose, an enabled feature, dispute resolution, security or a legal obligation. The specific period depends on the data category and server settings. Once the purpose has been met, data is deleted, anonymized or archived where further retention is required.

Removing the bot from a server or disabling a feature does not always immediately delete backups and mandatory logs. They are deleted according to the retention cycle or isolated until the applicable period expires.

8. Security

We use access controls, authentication, logging, backups and other reasonable organizational and technical safeguards. No method of transmission or storage guarantees absolute security. If an incident occurs, we take steps to limit its effects and send notices when required by law.

9. Your rights

Where provided by law, you may request information about processing, access, correction, blocking, deletion, withdrawal of consent or restriction of processing, or object to processing. You may also end sessions, remove the bot from a server you manage and change available privacy settings.

A request must make it possible to identify the requester, the data and the requested action. Some information may be retained after a request where necessary to comply with law or a contract, prevent abuse or protect rights. You may contact Roskomnadzor or a court.

10. Minors’ data

The Service is not intended for independent use by people who, under applicable law, cannot give valid consent or enter into an agreement. Where a legal representative’s consent is required, it must be obtained before use. If we discover data obtained unlawfully, we take steps to delete it or restrict its processing.

11. Automated processing

Filters and rules may automatically flag messages or initiate moderation actions. They are tools for server administrators and may make mistakes. A significant decision must be reviewed by an authorized person where required by law or by the nature of the decision.

12. Changes to this Policy

The current version is published on this page. For material changes, we use an available means of notice. Continued use after changes take effect means acceptance of the updated Policy only to the extent permitted by law.