Privacy Policy

Last updated: November 2, 2026

Vaporzr ("the Bot") is a Discord music bot. This Privacy Policy explains what data the Bot processes, how it is used, and your rights.

Data We Process

• Discord identifiers — User IDs and guild (server) IDs are used to manage permissions, queues, and per-server settings.
• Voice channel membership — The Bot reads voice state events to join/leave channels when instructed.
• Spotify credentials — If you link a Spotify account via the Bot's web panel, an OAuth access token and refresh token are stored locally on the host machine to enable playback. These tokens are never shared with third parties.
• Queue data — Track names, artists, and playback state are stored locally per guild to survive restarts.
• Server registry — When the bot joins a server, the operator keeps one small record of it: server id and name, owner id, member count, the date it was added and, if it is later removed, the date it left. This exists solely so the operator can see which servers use the bot and who to contact. It is the only server-level metadata retained and it is deleted on request.

How We Use Data

• All data is processed solely to provide the Bot's music playback and visualizer features.
• No data is sold, shared with third parties, or used for advertising or analytics.
• No personal data is transmitted outside of Discord's APIs and the user-authorized Spotify API.

Data Storage

• All persistent data (queues, settings, Spotify tokens) is stored as local files on the machine running the Bot.
• No data is sent to external databases, cloud storage, or analytics services.
• Server operators are responsible for the security and lifecycle of data on their host machine.

Third-Party Services

• Discord — The Bot operates through Discord's official API and is subject to Discord's Privacy Policy.
• Spotify — If linked, the Bot communicates with Spotify's API for playback. Subject to Spotify's Privacy Policy.
• YouTube — Track metadata and streams may be resolved via YouTube. Subject to Google's Privacy Policy.

Data Retention

Queue data is retained until the queue is cleared or the Bot's data directory is manually deleted. Spotify tokens are retained until unlinked. No data is retained indefinitely by design.

Removing the Bot / Your Data

Removing the bot from a server stops all processing for it. To have that server's stored record and files deleted, ask the operator — the server id is all that is needed to find them. Anyone can check what is stored with /privacy; the operator lists every server that has added the bot with V@servers.

Children's Privacy

The Bot is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL. Continued use of the Bot after changes constitutes acceptance of the updated policy.

Contact

For questions about this Privacy Policy, open an issue at our GitHub repository.