Privacy Policy

1.1. The data controller is the operator of the DiscordForge platform (discordforge.org).

1.2. For questions regarding data processing, contact: contact@discordforge.org

1.3. We process data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Polish data protection laws.

2.1. When you sign in via Discord OAuth2, we collect:

• Discord User ID
• Discord Username
• Discord profile avatar

2.1.1. We do not collect your email address during sign-in. Email is collected only when you make a payment — in that case it is provided directly to our payment processor (Stripe) and is not stored on our servers.

2.2. When you add a bot or server, we collect:

• Discord Bot / Server ID
• Bot or server name, description, and tags
• Invite links and other details you provide

2.3. We automatically collect via Google Analytics (GA4):

• IP address (anonymized)
• Browser type and version
• Operating system
• Pages visited and time spent
• Referral sources

2.4. We also collect data through our internal analytics system to provide listing owners with performance insights:

• IP address (anonymized via hashing — used solely for counting unique visitors and preventing abuse)
• Browser type and device category (derived from User-Agent header)
• Country of origin (derived from IP address via GeoIP lookup)
• Referral source (the website URL that directed you to a listing page)
• Page view and invite click events with timestamps

2.5. We do not use any AI-based tracking tools. The Forge AI assistant operates client-side and does not collect or transmit personal data.

We process your data based on the following legal grounds (Art. 6 GDPR):

• Contract performance — to provide our services (account, bot listing, voting)
• Legitimate interest — to improve our platform, prevent abuse, provide analytics to listing owners, and ensure security
• Consent — for optional analytics cookies and marketing communications
• Legal obligation — where required by applicable law

Your personal data is processed for the following purposes:

• User authentication and account management
• Managing the bot, server, and template directories
• Operating the voting system and preventing abuse
• Processing payments for Premium and Forge Boost subscriptions
• Communicating with you about your account or submissions
• Platform-wide analytics and improvement (Google Analytics)
• Providing aggregated, non-personally-identifiable performance analytics to bot and server listing owners (e.g., traffic sources, geographic distribution, conversion rates)
• Ensuring platform security and preventing fraud

5.1. Your data may be shared with the following third parties:

• Discord Inc. — for OAuth2 authentication
• Stripe — for payment processing
• Google LLC — for analytics (Google Analytics 4)
• ip-api.com — for GeoIP country lookups (IP address only, used in non-commercial capacity)
• Hosting and infrastructure providers

5.2. Aggregated, non-personally-identifiable analytics data (such as country distribution, traffic source domains, device categories, and conversion rates) is made visible to bot and server listing owners through the Premium Analytics dashboard. This data cannot be used to identify individual visitors.

5.3. We never sell your personal data to third parties.

5.4. Data may be transferred outside the EEA only with appropriate safeguards (e.g., Standard Contractual Clauses).

5.5. Images embedded in project descriptions are proxied, cached, and optimized through wsrv.nl to ensure performance and security. By submitting image URLs, they will be processed by this service.

6.1. We use cookies for:

• Essential cookies — user sessions and authentication (required)
• Analytics cookies — Google Analytics for traffic analysis (optional)
• Preference cookies — theme and language preferences (functional)

6.2. You can disable non-essential cookies at any time through your browser settings.

6.3. Disabling essential cookies may prevent you from using certain features.

7.1. Account data is retained as long as your account is active.

7.2. When you delete your account, personal data is removed within 30 days.

7.3. Bot and server listing data (public information) may be retained for platform integrity purposes.

7.4. Google Analytics data is retained according to Google Analytics default settings (14 months).

7.5. Internal analytics data (page views, clicks, votes) is retained for up to 14 months, after which it may be automatically purged.

7.6. Payment records are retained as required by law (typically 5 years for tax purposes).

Under GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data — right to be forgotten (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (Art. 7)

To exercise any of these rights, contact us at: contact@discordforge.org

You also have the right to lodge a complaint with the Polish supervisory authority (UODO — Urząd Ochrony Danych Osobowych).

9.1. We implement appropriate technical and organizational measures to protect your data.

9.2. Data is transmitted using HTTPS encryption.

9.3. IP addresses stored in our internal analytics system are anonymized via one-way hashing before storage.

9.4. Access to personal data is restricted to authorized personnel only.

9.5. We regularly review our security practices to ensure appropriate protection.

10.1. DiscordForge is not intended for users under the age of 13, in accordance with Discord's Terms of Service.

10.2. We do not knowingly collect data from children under 13. If we become aware of such data, we will delete it promptly.

11.1. We may update this Privacy Policy from time to time.

11.2. Significant changes will be communicated through platform notifications or email.

11.3. Continued use of DiscordForge after changes constitutes acceptance of the updated policy.

For any questions regarding your data or this Privacy Policy:

Email: contact@discordforge.org