Zandercraft Bot Privacy Policy

Who we are

Zandercraft is an online media company that provides a variety of services including entertainment via our YouTube and Twitch channels, Minecraft servers, computer programs and Minecraft modpacks.

Our website’s address is: https://zandercraft.ca.

Consent

By using the Zandercraft Bot service, herein known as “the service”, you consent to our Privacy Policy (“the policy”) and agree to its terms.

Data we collect and why we collect it

The personal information and/or data that you are asked to provide, and the reasons why you are asked to provide it will be made clear to you at the point we ask you to provide the information and/or when we ask for your consent to collect the information.

If you contact us directly, we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

When you register for an Account, we may ask for your contact information, including items such as name, email address, and Discord username/tag.

Media

If you upload images to the service, you should avoid uploading images with embedded location data (EXIF GPS) included. Certain features of the service may allow users to download and extract any location data from images you provide. You are responsible for making sure that any images and/or other forms of media you upload to our site do not contain data you do not wish to be on the open internet. By uploading files using the service, you agree that you have the right to upload them and that we cannot be held responsible for them or any consequences pertaining to them.

If you have opted-in to the bot’s auto-moderation features, any images you send within channels the bot has access to will be downloaded for the purposes of nudity detection/removal. You are warned about this when enabling auto-moderation. If you do not agree with this use of images sent in your server, you should disable auto-moderation immediately. Images downloaded for this purpose are stored while they are being processed and are then immediately deleted. If there is an error in their deletion, they are cleaned up when the bot shuts down. We do not purposely retain any of these images and take multiple steps to prevent their retention.

Metrics/Analytics

Some analytic data is collected by us when you use the bot. Command and feature usage data is collected and processed by internal servers to allow us to better understand and serve you. Analytic data is collected via tracking and metric solutions hosted by us (with data being kept on our servers) to get a better understanding of our customer-base and where we can improve our services. We respect your right to privacy and limit our storage of any personally-identifiable information relating to your use of the bot. Command usage is logged, but we do not directly log the parameters given to the command.

Collected metrics/analytics include, but are not limited to:

• What command was executed (the command’s name – does not include provided arguments)
• Your username when you use a command
• The name of the guild in which a command is used
• Number of guilds the bot is in
• Number of users the bot has encountered
• User IDs for customized settings
• Guild ID for customized settings (erased when bot removed from guild)
• Any required data pertaining to settings that you have provided to the bot (e.g. server language, welcome message, etc.)
• Statistics pertaining to command and feature usage

Contact forms

Our site utilizes contact forms and live support chats to provide help to our customers. Any information you enter into these forms may be sent by email or via a third party service to us and may be saved in our logs for spam-control and security purposes. The data you submit through our live chat is sent to Tawk.to and is subject to their privacy policies and terms of service. Data submitted through our email contact forms is sent through multiple endpoints, as all emails are. Data submitted in our Discord support server is sent to Discord’s servers and is subject to Discord’s privacy policies and terms of service. This data may be retained indefinitely by us for quality assurance and accountability purposes. By submitting information through our live chat, Discord support server, or email contact forms, you agree that all support is provided as-is and without warranty.

Embedded content from other websites

The service may provide embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

How long we retain your data

If you reach out to our support team via the service’s official Discord support server, a transcript of each ticket you create is retained indefinitely for legal and quality-assurance purposes. This allows us to ensure our team adheres to proper conduct and also allows us to provide further support to our users for any issues discussed in the tickets.

For users that register for the service (if any), we also store any configuration values that the users provide in configuring the behaviour of the bot within their Discord server. This data is retained until the bot is removed (kicked or banned) from the Discord server. Log files containing usage data may be retained indefinitely and are not available to users for the purpose of maintaining security.

All users registered for the service can see, edit, or delete most of their server-specific configuration values at any time (using commands or by removing the bot from their Discord server), however, we reserve the right to keep data that pertains to the security of our website, service and organization including IP addresses and geo-ip data. This data helps us prevent attacks against our websites and infrastructure. Our system administrators can also see and edit most information that you submit to the service.

What rights you have over your data

If you have connected the service to your Discord server, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us (excluding service logs retained for security purposes). You can also request that we erase any personal data we hold about you by removing the service from your Discord server. This will remove server-specific configurations stored in our databases and does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Operating as a Discord bot, certain information is sent to Discord’s API, allowing for the proper operation of the service. This data is subject to Discord’s privacy policy which can be read at https://discord.com/privacy. Data sent includes embedded Discord server-specific data and user data obtained from the Discord API as well as settings configured by the user through the service.

How we use your data

We use the information we collect in various ways, including to:

• Provide, operate, and maintain the service
• Improve, personalize, and expand the service
• Understand and analyze how you use the service
• Develop new products, services, features, and functionality
• Communicate with you, including for customer service, to provide you with updates and other information relating to the service.
• Find and prevent fraud
• Prevention of security breaches

Additional information

How we protect your data

Personal data retention is kept to a minimum on our servers so that in the event of a data breach, it will not have much consequence. In addition to this, we have automated firewalls to ensure that attackers are blocked from accessing our servers. Most sensitive data is kept encrypted so that in the event of a breach, it will not be easily cracked.

What data breach procedures we have in place

If a data breach is detected, our servers will be taken offline and the bot’s token will be regenerated, preventing malicious control of the service. The servers will then be inspected, only coming back online when we are sure that the issue that was exploited is fixed. Information will be sent to HIBP (Have I Been Pwned) about the breach so that clients can be notified of the breach of their data.

What automated decision making and/or profiling we do with user data

Our firewalls automatically block malicious traffic and attacks. Data is collected on any user blocked on our website so that they can be reported to the appropriate authorities.

CCPA Privacy Rights

Despite being a Canadian entity, we provide you with certain CCPA-compliant rights as we value your privacy. Under the CCPA, among other rights, we provide California consumers with the right to:

Request that a business delete any personal data about the consumer that a business has collected, excluding logs retained for security, administrative, and legal purposes.

Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.

If you make a request, we will respond to you at our earliest convenience. If you would like to exercise any of these rights, please contact us, making your intent clear.

GDPR Data Protection Rights

Despite being a Canadian entity, we provide you with certain GDPR-compliant rights as we value your privacy. We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions. This will result in termination of your access to the service and does not include logs retained for security, administrative, and legal purposes.

If you make a request, we will respond to you at our earliest convenience. If you would like to exercise any of these rights, please contact us, making your intent clear.

Third-Party Privacy Policies

This Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party services for more detailed information. It may include their practices and instructions about how to opt out of certain options.

Log Files

The service follows a standard procedure of using log files. These files log commands preceded with either the default or server-specific bot prefix configured with the service sent in text channels or Direct Messages accessible by the bot. The information collected by log files includes the commands executed, their arguments, the name of the user that executed them, and the name of the Discord server that they were executed in. The purpose of the information is for analyzing trends, administering the service, recognizing and resolving bugs/issues with the service, providing more accurate customer support, and ensuring the security of the service.

Children’s Information

Another priority of Zandercraft is ensuring the protection of children using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

Zandercraft and the service do not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this information to our service, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records, excluding that required for legal and security purposes.

Last Updated: 2022-10-21