Privacy Policy
Effective August 14, 2026
This policy explains how the operator of Zap collects, uses, stores, and shares information when you use the bot, zapbot.lol, and the dashboard.
1. Information Zap receives
- Discord identifiers and profile data: user, server, channel, role, and message IDs; usernames, display names, avatars, server names, and related Discord metadata needed for commands and the dashboard.
- Player and economy data: balances, transactions, XP, rank, prestige, quests, achievements, seasons, items, cosmetics, market activity, game outcomes, cooldowns, vote and rewarded-ad rewards, and activity counters.
- Server and safety data: server settings, configured channels and roles, moderation actions, warnings and reasons, AutoMod and verification settings, appeals, feedback, and operational or security alerts.
- Message information: Zap processes message content when needed for commands, XP eligibility, AutoMod, moderation, feedback, or appeals. Ordinary messages are not stored as a general archive. Content deliberately submitted in warning reasons, appeals, feedback, or similar records may be retained with that record.
- Dashboard, ad, and technical data: Discord OAuth identity and managed-server information, essential session and OAuth-state cookies, submitted settings, normalized page paths, signed-in user IDs for aggregate visitor counts, rewarded-ad availability and completion signals, timestamps, errors, health data, and limited operational logs. When you choose to watch a rewarded ad, the advertising provider may process browser, device, consent, fraud-prevention, and ad-measurement data. Zap does not collect dashboard IP addresses, query strings, or browser fingerprints for its own analytics.
2. How information is used
Information is used to provide requested features; maintain economy and progression; process games, trades, vote rewards, moderation, verification, appeals, and feedback; configure servers; prevent abuse and fraud; diagnose failures; maintain backups; enforce the Terms; and comply with legal obligations.
3. Legal bases
Where applicable law requires a legal basis, Zap processes information to perform the service you request, pursue legitimate interests in operating and securing Zap, comply with legal obligations, and, where appropriate, with consent. Server administrators configure some processing for their communities and may have separate legal responsibilities.
4. Sharing and service providers
Zap does not sell personal data or Discord API data. Information may be processed by Discord; hosting, storage, backup, and infrastructure providers; DiscordBotList and Top.gg when receiving listing votes or reporting supported listing data; Google Ad Manager and its advertising partners only when you opt in to a rewarded ad; and authorities or advisers when reasonably necessary for law, safety, abuse prevention, or operation. Providers receive only what is needed for their function.
5. Retention
Data is kept only as long as reasonably needed for its feature, security, dispute resolution, legal compliance, or backup recovery. Dashboard sessions normally expire after seven days. Non-administrative economy-ledger entries are normally eligible for deletion after 180 days. Profiles, configuration, inventories, moderation records, appeals, feedback, and market records may remain while Zap provides those features or until deletion is appropriate or requested. Rotating backups may temporarily retain deleted information until they expire.
6. Cookies
The dashboard uses essential signed cookies for Discord OAuth state and login sessions. Zap does not currently use advertising cookies or sell cookie-derived data.
7. Security
Zap uses measures intended to protect data, including restricted secrets, HTTPS, access controls, transactional data handling, and verified backups. No online service can guarantee absolute security.
8. Your choices and rights
You may stop using Zap, log out, remove Zap from a server you control, or ask server administrators about their moderation records. You may request access, correction, or deletion of your Zap data, or object to or restrict processing where applicable. Submit requests through the official support server using /support. Include your Discord user ID, but never your password or token. Identity may be verified. Some information may be retained for security, fraud prevention, legal obligations, or legal claims.
9. Children
Zap is not directed to children under 13 or anyone below the minimum age required to use Discord in their country. Contact support if you believe an ineligible child has provided data.
10. International processing and changes
Zap and its providers may process information in countries other than yours, subject to applicable safeguards. This policy may change as Zap or its legal obligations change. Material updates will receive a new effective date.
11. Contact
Privacy questions and data requests may be submitted through Zap's official support server with /support. The public service home is zapbot.lol.