BonkerBot Privacy Policy

Last updated: 2024-12-01

What Data We Collect

BonkerBot collects and processes the following data to provide anti-scam protection:

User Data

• Discord User ID — Used as a primary key to track trust scores globally. We do not store usernames or discriminators permanently.
• Trust Score — A numerical score (0.0–10.0) representing your trustworthiness across all servers using BonkerBot.
• Trust Score History — A record of score changes with timestamps and reasons.
• First Seen Date — When you were first observed by BonkerBot.

Message Data

• Reported Message Content — When a message is reported or flagged by automated detection, its content is stored for review.
• Message Attachments — Images in flagged messages may be processed via OCR (Optical Character Recognition) for scam detection. We store perceptual hashes of confirmed scam images, not the images themselves.
• Scam Fingerprints — Patterns extracted from confirmed scam messages (keywords, URLs, image hashes) used to detect future scams.

Server Data

• Guild ID — Used to store per-server configuration (mod channels, thresholds, allowlists).
• Guild Configuration — Channel IDs, detection thresholds, and enabled modules. No server names or member lists are stored.

Report Data

• Reports — When a message is reported, we store: reporter ID, reported user ID, guild ID, message content, detection method, confidence score, and status.

How We Use Data

• Scam Detection — Messages are analysed in real-time using text patterns, link analysis, and image OCR to detect potential scams.
• Trust Scoring — Users who are confirmed as scammers receive trust score penalties that follow them across all BonkerBot-protected servers.
• Pattern Learning — Confirmed scam patterns are extracted and used to improve future detection.
• Campaign Detection — Similar scam reports are clustered to identify coordinated scam campaigns.

Data Sharing

• We do not sell or share your data with third parties.
• Trust scores are global — a low trust score in one server will be visible to moderators in other servers using BonkerBot.
• Scam fingerprints are global — a confirmed scam pattern detected in one server protects all servers.

Data Retention

• Reports are retained indefinitely for pattern analysis unless you request deletion.
• Trust score history is retained indefinitely.
• Guild configuration is deleted when BonkerBot is removed from a server.
• Rate limit data is automatically pruned.

Your Rights

You can exercise the following rights at any time using the /privacy command:

• Data Export — Export all data associated with your Discord User ID as a JSON file.
• Data Deletion — Request deletion of all your data, including trust score, reports, and training samples.

Note: Data deletion resets your trust score to the default (5.0). If you were previously flagged as a scammer, deletion does not prevent future detection based on previously learned patterns (which are anonymised).

Data Security

• All data is stored in a PostgreSQL database on our own infrastructure (not cloud-hosted).
• API endpoints are authenticated and accessible only on localhost.
• No personally identifiable information (PII) beyond Discord User IDs is stored.

Changes to This Policy

We may update this policy from time to time. Significant changes will be announced in our support server.

Contact

If you have questions about this privacy policy, please open an issue on our GitHub repository or contact the bot owner via Discord.