Privacy Policy

1. Introduction

This Privacy Policy describes how BL Logs ("the Bot", "we", "our") collects, uses, stores, and protects information when you add the bot to a Discord server or use the dashboard at bldashboard.com.

By inviting the bot or using the dashboard, you agree to this policy. The bot is operated independently and is not affiliated with Discord Inc.

2. Data We Collect

Stored persistently:

• Server configuration: guild ID, log channel IDs, ignore lists, language preference, event filters
• Subscription records: Discord user ID, username, server ID, payment metadata (no card data)
• Web sessions: hashed Discord OAuth tokens, encrypted in MongoDB
• Tickets and admin notes (only if you submit a ticket)
• Page views on the dashboard (anonymized IP, page path, timestamp)

Processed in real-time only (NOT stored):

• Message content - read at delete/edit events to format the audit log, then immediately discarded
• Member presence (status, custom status, activity) - dispatched to log channels and discarded
• Voice state changes (join/leave/mute/deafen)
• Reaction events

3. Privileged Gateway Intents

The bot requests the following Discord Privileged Intents:

Server Members Intent

Used for member-add / member-leave / member-update logs and role-change tracking. We do not store any member data outside the active log dispatch.

Message Content Intent

Used to display the deleted/edited message content in audit log embeds. Message content is never written to our database.

Presence Intent

Used to log status transitions and activity changes (online ↔ idle ↔ dnd ↔ offline, custom status, game/streaming/listening). Presence data is never persisted - it is dispatched to the configured log channel and immediately discarded from memory.

4. How Server Admins Control Logging

• Logging features are opt-in per server. The bot does nothing until an administrator runs /setup-automatic or /setuplog-one|tow|three.
• Specific channels and categories can be excluded via /ignore-logs.
• Per-event toggles are available via the dashboard.
• Admins can wipe their server's data at any time using /delete-all.

5. Security

• All bot tokens are stored encrypted at rest in our database.
• Sessions use signed cookies with HttpOnly + Secure flags in production.
• Passwords are never collected (Discord OAuth only).
• HTTPS-only on the dashboard, with HSTS enforced.
• Rate-limiting and input sanitization on all API endpoints.

6. Sharing & Third Parties

We do not sell or rent your data. Limited data is shared with:

• Discord (for the bot to function)
• EdfaPay (only payment metadata for paid subscriptions)
• Top.gg (only for vote webhook authentication)

No analytics SDKs, no advertising trackers.

7. Data Retention & Deletion

• Server configuration is kept while the bot is in your server. If the bot is removed, configurations are kept for 30 days, then auto-deleted.
• Subscription records are kept for 1 year after expiry for audit and refund purposes.
• Page view logs are kept 90 days then aggregated and anonymized.
• Users can request data deletion by opening a ticket at bldashboard.com/tickets or contacting us in Discord.

8. Children

This bot is intended for users 13 years or older, in line with Discord's Terms of Service. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced on our support server.

10. Contact

• Support server: discord.gg/F8js9DagaD
• Tickets: bldashboard.com/tickets
• Owner: !! saad ☆#3222