Privacy policy

RimFrost c/o Christian Bargmann, Vestergade 16C, 1. th., 7850 Stoholm, Denmark. Write to us at support@rimfrost.dk.

The RimFrost Discord bot, the bots servers create themselves and run through Bot Personalizer, the website rimfrost.dk and the dashboard at dash.rimfrost.dk. What we process about you depends on which features the administrators of your server have turned on.

You log in with Discord. We receive your Discord user ID, username and avatar, plus the list of your servers and your permissions on them. Discord's login tokens are kept in your session, so the dashboard can see which servers you may manage.

• Levels: user ID, username, avatar, XP and the number of messages that earned XP.
• Achievements: your progress (messages, reactions, minutes in voice, threads) and the IDs of threads and messages already counted.
• Moderator: warnings and punishments with user ID, the moderator's ID, the action, the time and the reason. The reason is the text the moderator writes, or the name of the automod rule.
• Tickets: who opened, claimed and closed a ticket, and when.
• Events and movies: your sign-ups.
• Game roles and LFG: who created and joined a post.

The bot reads messages to give XP, count achievements and run automod (such as bad words, links and spam). The content is only processed in memory and is not stored in our database.

If administrators have turned on the audit log, the bot posts edited and deleted messages in a channel on the server. Ticket transcripts are also posted in a channel on the server. They are kept by Discord, not by us.

If you use /live, the bot posts your name, your link and your message in the channel the administrators chose. We do not store the link or the message; they only exist in the message on Discord. The bot does not read your status on Discord.

Settings, texts and images administrators add in the dashboard, and the streamers, feeds and game servers they follow. For Bot Personalizer we also store the token, Client Secret and Discord authorization of the server's own bot. They are stored encrypted.

If administrators turn on the public leaderboard, anyone can see the name, avatar and level of the server's members with XP, without logging in.

• To provide the features administrators have turned on for the server. The legal basis is our and the server's legitimate interest in those features working (GDPR Article 6(1)(f)).
• To give you access to the dashboard when you log in. The legal basis is that it is necessary to provide the service you ask for (Article 6(1)(b)).
• To keep the service secure and fix errors (Article 6(1)(f)).

We do not use the data for advertising, do not sell it and do not profile you.

• Webdock.io ApS runs our server in Denmark as our data processor.
• Discord, because everything happens through Discord. Discord's own privacy policy applies to what Discord holds.
• If you open a support ticket on our own Discord server, an AI assistant answers first. The messages and images in the ticket are sent to Anthropic (Claude) to write the answer.
• For some features our server fetches data from Twitch, YouTube (Google), Reddit, RSS sources, game servers, IMDb, emoji.gg and KLIPY. We do not send your personal data to them. They only receive requests from our server, such as the name of a streamer.
• The dashboard shows images directly from Discord, Twitch, emoji.gg and KLIPY. Your browser loads them from their servers, so they can see your IP address.

Our server and database are in the EU (Denmark). Discord is based in the United States, and processing by Discord follows Discord's terms.

• Dashboard logins expire after 14 days and are then deleted.
• A server's data is kept while the bot is on the server. If the bot is removed, all of the server's data is deleted automatically after 30 days. If the bot is added again before then, the setup is still there. If you want the data deleted right away, write to us.
• Administrators can remove data themselves, for example XP with /remove-xp and achievements with /achievements-reset or in the dashboard.
• Database backups are kept for 14 days.
• Error logs are deleted automatically on a rolling basis.

• rf_session keeps you logged in for 14 days.
• rf_accounts remembers the Discord accounts you have logged in with in this browser, so you can switch between them (14 days).
• rf_state protects the login against misuse and lasts 10 minutes.
• rf_lang remembers the language you chose (local storage in your browser).

They are needed for the dashboard to work. We use no cookies for statistics, advertising or tracking.

Some help articles show a video from YouTube. The player sets no cookies until you start the video. If you start it, Google's own cookie and privacy rules apply.

All traffic to the dashboard uses HTTPS. Bot tokens and Client Secrets are stored encrypted. Only users with the Manage Server permission can change a server's setup, and our server is protected by a firewall.

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability and to object. Write to support@rimfrost.dk and we reply within one month. Include your Discord user ID so we can find your data.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk, or to the authority where you live.

You must be the age Discord requires in your country. We do not knowingly collect data about children below that age.

If we change this policy, we update the date at the top. We point out significant changes clearly here.