1. Controller and scope

This Privacy Policy explains how Entropy Ltd., a company registered in the Republic of Bulgaria under UIC 207769108 (“Entropy,” “we,” “us,” or “our”), processes personal data through the Entropy Discord bot, the website at bot.entpy.com, and related services.

For data we determine how and why to process, Entropy Ltd. is the data controller. Discord separately processes information under its own privacy policy. Server owners and administrators may also independently determine how logging and moderation records in their servers are used and retained.

Privacy inquiries and requests may be sent to [email protected].

2. Data Entropy processes

Discord identifiers and server information

We may process Discord user IDs, server IDs, channel IDs, role IDs, message IDs, usernames, display names, avatars, role membership, account or server timestamps, and permissions where needed to identify users, route commands, enforce configuration, provide moderation, or operate games.

Member events

Where enabled, Entropy processes member join, leave, update, nickname, role, timeout, ban, and similar server events to provide welcome, moderation, role-management, and logging features.

Presence and activity data

Entropy may process current Discord-provided presence information, including online status and Rich Presence activities such as a game a member is currently playing. This supports in-Discord features such as WhoPlays and Red-DiscordBot’s userinfo command. Entropy uses the current presence state available through its live Discord connection and does not maintain an off-platform history of members’ presence, games, activities, online status, or client platforms. Entropy can only process activity information Discord makes available to the bot under the user’s Discord privacy settings.

Message data

Where the relevant features are enabled and permissions allow it, Entropy may receive and process message content, embeds, attachments, links, components, reactions, author and channel information, edits, and deletion events. This enables automated moderation, scam and spam detection, command handling, and server-configured moderation logs.

Commands and configuration

We process command inputs, feature settings, permission rules, prefixes, enabled modules, logging-channel destinations, moderation cases, warnings, reminders, birthdays, and other configuration needed to provide the Service.

Game data

Minigames may store character profiles, experience, classes, inventory, virtual currency, achievements, cooldowns, adventure results, and other progression linked to Discord user and server identifiers.

Technical and security data

We may retain operational logs such as timestamps, command or event type, relevant Discord identifiers, error details, service health information, and limited network or request metadata when available. These records help secure, troubleshoot, and operate Entropy.

3. How we use data

We process data only as reasonably necessary to:

• respond to commands and provide requested bot features;
• perform server-configured moderation, anti-spam, anti-scam, filtering, and safety functions;
• post server events and moderation information to administrator-selected Discord logging channels;
• manage roles, welcomes, reminders, birthdays, automation, configuration, and permissions;
• show current game, status, or activity information inside Discord through features such as WhoPlays and userinfo;
• maintain game characters and progression;
• generate and deliver memes, images, and other requested visual output;
• prevent abuse, protect the Service, troubleshoot failures, and enforce our Terms;
• respond to support, privacy, legal, and security requests; and
• comply with applicable law and Discord platform requirements.

We do not sell personal data or Discord API data. We do not use it for targeted advertising, data brokerage, user profiling for eligibility decisions, or training machine-learning or artificial-intelligence models.

4. Message logging and retention

Entropy does not maintain a separate database archive of message content, deleted messages, or edited messages. When a server administrator enables logging, Entropy processes the relevant event and posts a log message to the Discord channel selected by that administrator. The resulting log message is stored within that Discord server by Discord, not in an Entropy message archive.

Server administrators control access to, retention of, and deletion of those Discord logging-channel messages. Users seeking deletion of a moderation-log message should ordinarily contact that server’s administrators. Discord may retain information under its own terms and privacy policy.

Message data processed for automated moderation is evaluated to perform the configured feature. Unless it is included in a server-directed Discord log message, Entropy does not retain the message content after that processing is completed.

5. Image processing

When you use an image or meme command, the command text, image, avatar, or other required input may be sent to dev.imgen.red, which is operated by Entropy Ltd., solely to generate the requested output. Inputs and generated files are processed transiently and discarded by us after the output is delivered to Discord.

The delivered output is then a Discord message or attachment. Discord and the relevant server or channel may retain it under their own settings and policies.

6. Legal bases for processing

Where the General Data Protection Regulation (“GDPR”) applies, we rely on one or more of the following legal bases:

• Performance of a contract: to respond to a user’s command or provide requested features under our Terms;
• Legitimate interests: to operate and secure the Service, prevent abuse, troubleshoot errors, maintain server-requested moderation and automation, and improve reliability, balanced against users’ rights;
• Consent: where consent is required and specifically requested; and
• Legal obligation: where processing is necessary to comply with applicable law.

Server administrators are responsible for ensuring they have an appropriate basis for enabling and using moderation or logging features in their communities.

7. Retention

Backups, where present, may retain deleted structured data for a limited recovery cycle before automatic expiry. We may preserve limited information longer where reasonably necessary to establish, exercise, or defend legal claims, investigate abuse, or comply with law.

8. Sharing and recipients

We disclose data only as necessary to operate Entropy:

• Discord: to receive events, perform actions, and deliver bot responses, logs, and generated output;
• Server administrators and authorized members: through channels, responses, moderation records, and features configured inside their Discord server;
• Infrastructure providers: hosting and technical infrastructure located in France, acting under appropriate confidentiality and data-protection obligations;
• Professional advisers or authorities: when reasonably necessary to comply with law, protect rights and safety, or address legal claims; and
• A successor organization: in connection with a merger, reorganization, or transfer of the Service, subject to applicable law.

We do not permit infrastructure providers to use Discord data for their own advertising or unrelated purposes. At present, no other third-party service is used to store Entropy user data.

9. International processing

Entropy’s primary hosting is located in France, within the European Economic Area. Discord may process information in other countries as described in Discord’s own privacy documentation. If we introduce an international transfer of personal data that requires safeguards, we will use an appropriate lawful transfer mechanism.

10. Security

We apply reasonable technical and organizational safeguards appropriate to the Service, including access restriction, least-privilege permissions, credential protection, security updates, network controls, logging, backup and recovery practices, and investigation of suspected abuse. No internet service is completely secure, and we cannot guarantee absolute security.

If we discover unauthorized access to Discord API data, we will investigate and provide notifications to Discord, affected users, or authorities when required.

11. Your choices, self-service controls, and rights

You may stop interacting with Entropy, ask a server administrator to remove server-side Discord log messages, or ask a server administrator to disable or remove the bot. Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, receive portable data, and withdraw consent where processing is based on consent.

Red-DiscordBot self-service data tools

Users can request deletion of supported user data directly inside Discord by running !!mydata forgetme. Users can review the data statements supplied by installed third-party extensions by running !!mydata 3rdparty. Third-party extensions can participate in Red-DiscordBot’s deletion process when their authors have implemented the applicable data-deletion interface; Red informs the user when an installed extension does not support automatic deletion.

The self-service process does not necessarily remove operational records that must remain associated with an event, such as a record that a Discord account was the subject of a moderation action. Such records may be retained where necessary for server safety, abuse prevention, legal compliance, or the establishment, exercise, or defence of legal claims.

Operator-assisted requests

If a user cannot use the self-service command, they may send a request to [email protected] with their Discord user ID and enough information for us to locate the relevant data. We may need to verify that the requester controls the relevant account. We will not ask for a Discord password or token. After verification, an authorized Entropy operator can process the equivalent deletion through Red-DiscordBot’s owner-management tools and address data held by supported extensions.

Some requests concerning messages stored only inside a Discord server must be addressed to that server’s administrators or to Discord. We may retain limited data where required by law or necessary for security, fraud prevention, or legal claims.

If you are in the EEA, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection or your local supervisory authority. We encourage you to contact us first so we can address the concern.

12. Children

Entropy is not directed to anyone below Discord’s minimum permitted age or a higher age required in their country. We do not knowingly seek to collect data from children who are not permitted to use Discord. If you believe such data has been processed, contact us so we can investigate and take appropriate action.

13. Automated moderation

Entropy may automatically identify suspected spam, scams, prohibited links, or rule violations and may take actions configured by server administrators. Such actions are performed on behalf of the relevant server and may not be legally significant automated decisions within the meaning of the GDPR. Users should direct moderation appeals to that server’s moderators or administrators, who control the rules and final moderation decisions.

14. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, or platform requirements. The current version will be published at bot.entpy.com/privacy with its effective date. We will provide additional notice of material changes where appropriate.

15. Contact