Privacy Policy for Orin Bot

( Published At: 9/19/2026 · Last updated: 10/27/2026 )

This Privacy Policy explains what information Orin Bot ("the Bot") and its web dashboard collect when you use them, and how that information is used.

Information We Collect

• Discord identifiers — your Discord user ID, and the server (guild) and channel IDs where the Bot is used. These are used to associate your data correctly and are not linked to your real-world identity. A basic record under your user ID is created the first time you use a command, message the Bot, send a message in a server it is in, or get mentioned there; it starts out empty.
• Commands you send — the content of messages that invoke a Bot command (e.g. messages starting with the server's prefix, + by default) and the options you enter in slash commands, so the Bot can process them. Text you give a command so that the Bot remembers it — for example a bio, an AFK reason, a warning reason, ticket form answers, a ban appeal, or a report to the developer — is saved as part of that feature.
• In-Bot game and economy data — things like your virtual currency balance, inventory, pets/team, farm, marriage and family status (including your partner's user ID and your children), bio text, the gender you choose to set (used by the marriage and family features), titles, achievements, quest progress, and play statistics and cooldown times.
• Leveling data — if a server turns on leveling: your XP in that server and the time you last earned XP.
• Moderation records, where applicable — saved per server through the Bot's moderation tools: warnings (reason, who gave it, and when); a ban record for each ban made with the Bot's ban command (the server's ID and name, the banned person's user ID, username, nickname and avatar link, the moderator's user ID and name, the reason, how long it lasts, and whether it can be appealed), which also holds the answers submitted and the moderators' decision if the ban is appealed; temporary bans and temporary roles until they end; channel locks and server lockdowns (who started them, and when) until they are lifted; open tickets (including answers to the ticket form); and each server's ticket blacklist. Kicks and timeouts, and bans or kicks done directly in Discord, are carried out through Discord, which keeps its own record of them (for example the server's audit log); the Bot does not keep a separate history of those.
• Giveaway entries — the user IDs of people who enter a giveaway (and, once it ends, of the winners), kept until 30 days after it ends.
• Reports to the developer — if you use /report-bot: your user ID, the category you pick, the message you write, and when you sent it. The report is passed to the developer in a direct message on Discord, where your username and avatar are shown with it so the developer can reply to you there.
• Server configuration — settings server admins choose, such as the prefix, timezone, the Bot's nickname in that server, mod-log channels and which events are logged, disabled commands, welcome and level-up messages, leveling and auto-role settings, ticket panels, reaction-role panels, and security (anti-nuke) rules and whitelists.
• Website and dashboard data — described below under Website & Dashboard.

What the Bot Can See, and What We Don't Collect

• We do not permanently store the text of regular messages that aren't Bot commands. The Bot can read messages in the channels it has access to — it needs this to notice commands (and short replies to its own prompts), AFK mentions, leveling, and the optional logs below — but a message's length is only briefly used to calculate leveling XP, and regular message text is not otherwise stored or processed by the Bot.
• Optional mod log. If a server's admin turns it on, the Bot posts events such as deleted or edited messages (their text, and deleted images), members joining and leaving, role and nickname changes, and slash command use in that server's own mod-log channel. These posts live in that server's Discord channel under that server's control; the Bot does not save them in its own storage, and it can only show a deleted or edited message it still has in short-term memory.
• Ticket chats are not kept. When a ticket closes, a text copy of the conversation (up to 1,000 messages) is sent by direct message to the person who opened the ticket and the person who closed it, and the ticket channel is deleted.
• Servers and DMs where the Bot is not a member. When you use the Bot from your own Discord account (User Install), it cannot read the messages there; it only receives the command you run, your user ID, and where you ran it.
• We do not collect payment or financial information. The Bot's virtual currency and items have no real-world monetary value and cannot be bought, sold, or exchanged for real money.
• We do not ask for your email address, and we do not sell your data or share it with third parties for advertising or marketing.

How We Use This Information

Solely to operate the Bot's features and dashboard — running commands, maintaining your in-Bot progress, enforcing the settings server administrators configure for their own servers, answering reports and appeals, and keeping the service working and secure.

Website & Dashboard

• Signing in with Discord. When you log in, Discord shares your user ID, username (display name), and avatar, and the list of servers you are in along with your permissions there, so the dashboard can show the servers you can manage. We do not receive your email address, and the login does not let us read your messages.
• Sign-in cookie. A small signed cookie keeps you logged in for up to 7 days; scripts on the page cannot read it. Your Discord access token is kept on our server only (not in the cookie); it is deleted when you log out, and removed some time after it expires.
• Stored in your browser. Your chosen theme, a note that you dismissed the cookie notice, and whether you are signed in (so the page can show the right view). This stays on your device and is not used to track you.
• Dashboard activity log. When an administrator saves a change on the dashboard, it records the server, who made the change (user ID and display name), what changed, and when. The server's administrators can view it; only the newest 100 entries from the last 30 days are kept per server.
• Detect timezone. Only if an administrator clicks this button, their IP address is sent to a third-party IP-lookup service (and to a second one if the first can't answer) to suggest a timezone. We do not store the IP address.
• Fonts and pictures from other sites. The Bot's home page and dashboard use a font from Google Fonts, so your browser contacts Google's servers (which can see your IP address) to load it. Avatars, server icons, and emoji are loaded from Discord's servers. These Terms of Service and Privacy Policy pages load nothing from other sites.
• Technical data. Like any website, the web host's network handles technical details such as your IP address and browser type in order to deliver pages and keep the service secure.

Who Else Handles Your Data

The Bot runs on Discord, and Discord's own Privacy Policy covers what you do on Discord. Our data is stored on the servers of the Bot's hosting provider. Apart from the services named above and what the law may require, your data is not shared with anyone else.

Data Storage & Retention

Your data is stored securely and is accessible only to the Bot's developer(s) for the purpose of running and maintaining the Bot. The staff of a server can see that server's own settings, logs, and moderation records through the Bot's commands and the dashboard.

• Your profile, economy, pets, family, and similar in-Bot data is kept until you ask us to delete it. It is not deleted automatically when you leave a server or when the Bot is removed from one.
• A server's settings, warnings, and leveling data are kept until that server's admins remove them or ask us to delete them, including after the Bot has left that server.
• Open tickets are removed when the ticket closes, temporary bans and roles when they end, channel locks and lockdowns when they are lifted, finished giveaways 30 days after they end, the dashboard activity log after 30 days, and a dashboard sign-in after 7 days at most or when you log out.
• Reports to the developer and ban records (including any appeal) are kept until they are deleted on request.
• Automated backups of this data are kept for a short rolling period (currently 12 days) purely to recover from technical failures, and are not used for any other purpose. Deleted data can therefore remain in backups for up to 12 days.

Your Rights

You can request a copy or deletion of your data at any time by messaging @hana.css on Discord, or by using the Bot's /report-bot command. Server administrators can similarly request deletion of their server's configuration and logs.

You can also change some things yourself: set or clear your bio with /set-bio, end your AFK status with /unafk, and log out of the dashboard at any time. A gender can't be changed once you have set it, but you can ask us to remove it.

Children's Privacy

Discord requires users to be at least 13 years old (or the minimum age in their country) to use Discord. We do not knowingly collect data from anyone below that age.

Changes to This Policy

We may update this Privacy Policy occasionally. Continued use of the Bot after changes means you accept the updated policy as well.