1. Controller
Mike Schuesterl
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany
Email: [email protected]
Contact us at this address with any questions about data protection or to exercise your rights.
2. Overview
This privacy policy applies to
- the Discord bot Evil6 when it is used on a Discord server,
- the website evil6.com including its documentation, and
- the dashboard at evil6.com/dashboard.
Evil6 only processes data its features need. We don’t sell data, show ads or use tracking or analytics tools. Evil6 is not a product of Discord Inc.; your use of Discord is additionally governed by Discord’s privacy policy.
3. Discord bot
3.1 Which data is processed
| Category | Data | Purpose | Retention |
|---|---|---|---|
| Server settings | Server ID and name, channel and role IDs, module settings, server language | Bot configuration | As long as the bot is used; deletion on request (3.4) |
| User data | Discord user ID, username, language preference | Linking all features to you, replies in your language | As long as the bot is used; deletion on request |
| Leveling | XP and level from messages and voice time | Level system, leaderboard, level rewards | As long as the server uses the bot |
| Moderation | Warnings and mod log: action, affected user ID, moderator ID, reason, time; for Gulag punishments also the posted content | Moderation, escalation, accountability | As long as the server uses the bot or until admins delete the entries |
| Tickets | Ticket channel, creator ID, status, closing reason, timestamps – no message content | Ticket system | As long as the server uses the bot |
| Giveaways & polls | Entries and votes (user ID, chosen option) | Drawing winners, results | As long as the server uses the bot |
| Reminders | Text, time, channel, user ID | Delivering the reminder | Until delivered or deleted by you |
| Backups | Server structure: roles, channels, permissions – no messages | Backup and restore | Until admins delete the backup |
| Log events | Event type, involved IDs, time and, depending on the event, content such as the text of edited or deleted messages or old and new names | Logging feature | 30 days, then deleted automatically |
| Blacklist (across bots) | IDs of blocked users and servers with the reason; IDs of users and servers seen | Preventing abuse across all of the operator’s bots | Blocks until lifted; seen IDs as long as needed for the check |
3.2 Message content
Evil6 processes messages in real time to apply automod rules, the Gulag, the level system and logging. Content is only stored permanently in the cases listed above: as part of log events (30 days at most) and as the posted content of Gulag punishments in the mod log.
What Evil6 posts into a server’s log channels – for example deleted messages or, for bulk deletions, a text file with the removed messages – lives in Discord and is managed by that server’s admins.
3.3 Role of server admins
A server’s admins decide which modules are active and which channels Evil6 writes to. We recommend that server owners tell their members that moderation and logging are in use.
3.4 Removing the bot and deletion
Once Evil6 is removed from a server, it no longer collects new data there. Server owners can request deletion of all data of their server at any time, users the deletion of their data – an email to [email protected] with the server or user ID is enough. Entries needed to prevent abuse (blacklist) may be exempt from deletion.
4. Website
4.1 Server log files
For every request our web server stores the IP address, time, requested address, status code, amount of data transferred, referrer and browser identifier. Because the website is delivered via Cloudflare (4.2), the stored IP address is usually that of a Cloudflare server. The purpose is operating and securing the website. Log files are deleted after 14 days.
4.2 Cloudflare
The website is delivered through the network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which speeds it up and protects it from attacks. Cloudflare processes your IP address and technical connection data for this. Cloudflare’s data processing agreement applies; see section 8 for transfers to the USA.
4.3 No trackers, no external content
We don’t use analytics, tracking or advertising services. Fonts, scripts and images of the website are loaded from evil6.com itself. The dashboard is the exception (section 5).
4.4 Cookies
| Name | Purpose | Duration |
|---|---|---|
lang | Remembers your language – only set when you switch the language | 1 year |
e6sess | Dashboard session – only set when you log in or open the demo, and only sent to /dashboard | Until you log out or close the browser; session data on the server is deleted after about 30 minutes of inactivity |
Both cookies are strictly necessary to provide the function you asked for and therefore don’t require consent (§ 165(3) Austrian TKG 2021, § 25(2) German TDDDG).
5. Dashboard
To log in you are redirected to Discord (“Log in with Discord”, OAuth2). With your consent, Discord sends us your Discord ID, username, avatar and the list of your servers with your permissions there. We don’t receive your email address.
We store this data and Discord’s access token only server-side in your session. They are deleted when you log out or the session expires (after about 30 minutes of inactivity). Changes to settings are sent to the bot and stored as described in section 3; your Discord ID is included to check that you may manage the server.
Server icons and avatars in the dashboard are loaded directly from Discord’s CDN (cdn.discordapp.com), which receives your IP address.
6. Backup Plus
Backup Plus is purchased and billed through Discord. We don’t receive any payment data. Discord only tells us which server has a subscription so Evil6 can unlock the additional backup slots.
7. Legal bases
- Art. 6(1)(b) GDPR – providing the features a server uses with Evil6, and the dashboard when you log in.
- Art. 6(1)(f) GDPR – legitimate interests: protecting servers from spam, raids and abuse (Gulag, anti-raid, automod, blacklist), moderation on behalf of server admins, secure operation of bot and website (log files, Cloudflare).
8. Recipients & third countries
Data is not sold, rented or shared for advertising. The only recipients are:
- Discord Inc. (USA) – every action of the bot goes through Discord’s API.
- Hosting providers that run the bot, database and website – under data processing agreements.
- Cloudflare, Inc. (USA) – delivery of the website.
- Authorities, where we are legally required.
Transfers to the USA are based on the EU-US Data Privacy Framework where the recipient is certified, and additionally on EU standard contractual clauses.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to [email protected] and include your Discord ID so we can identify you.
You can also lodge a complaint with a data protection authority, in particular in the EU country where you live. In Austria that is the Datenschutzbehörde (Barichgasse 40–42, 1030 Vienna, dsb.gv.at); the authority responsible for us is the Bavarian Data Protection Authority (BayLDA, Promenade 18, 91522 Ansbach, Germany, lda.bayern.de).
10. Minors
Discord requires a minimum age (usually 13, higher in some countries). Evil6 is not aimed at children. If we learn that data of children below that age is processed, we delete it.
11. Changes
We update this policy when Evil6’s features or legal requirements change. The version published here applies; the date is shown at the top.