Privacy Policy

1. Who operates this service

Baobab is an independently operated Discord server bot and website at baobabbot.com. This policy covers the coming-soon subscription website and Baobab's functionality in its private Discord server. It is not a Discord service and is not affiliated with Discord.

2. Information we collect

• Launch subscriptions: when you choose “Subscribe with Discord”, we use Discord OAuth2 with the identify scope to obtain your Discord user ID. We save that ID, your subscription date, notification status (pending, sent or blocked), and, where applicable, the status update time.
• Server analytics: Baobab records message activity metadata (Discord user ID, channel ID and timestamp), member joins and departures, and counts derived from those events. We do not store message text in the analytics database.
• Staff analytics: where available through Discord audit logs, we record relevant moderation actions, affected user IDs, moderator IDs, reasons, action types and timestamps.
• Appeals: if you submit an appeal through Baobab, we store the information entered in your appeal, associated Discord identifiers, status and any review details.
• Preferences and technical data: your dark/light theme preference is stored in your browser's local storage. A short-lived secure cookie holds an OAuth anti-forgery state while you authorize Discord (up to approximately 10 minutes). Hosting providers may process technical request logs for service operation and security.

3. How we use information

We use these records to operate the server bot, calculate server and staff analytics, process appeals, protect restricted staff views, and deliver the website-launch DM to subscribers. OAuth2 identity access is used for subscription and unsubscribe verification; it is not used to join servers on your behalf.

4. Notifications and consent

Subscribing is optional. If subscribed, Baobab may attempt to send a private Discord message announcing the website launch. Delivery depends on Discord settings and availability. You can withdraw your subscription using the unsubscribe link, which asks you to authenticate with Discord so we can remove the correct record. An unsuccessful or blocked DM may result in a stored status rather than a delivered notification.

5. Where data is processed

Subscription records are stored using Cloudflare Workers KV; the website and OAuth functions are hosted on Cloudflare Pages. Bot analytics and appeals are stored in a SQLite database on the bot's PebbleHost hosting service. Authentication relies on Discord. These providers process data subject to their respective terms and privacy practices, and processing may involve infrastructure outside your country.

6. Retention and deletion

Subscription records are kept until you unsubscribe or the operator deletes them. Notification status is updated when delivery is attempted. No fixed automatic retention period is currently configured for the bot's analytics, sanctions or appeal records. The operator should establish and publish a retention schedule before wider use. You may request review or deletion of personal information by contacting the server owner or authorized Baobab staff through the Discord community; some information may be retained where necessary to handle an active moderation dispute or comply with applicable obligations.

7. Security and access

Staff analytics are restricted to authorized moderators and administrators. API access for launch notifications is protected with a private key. Reasonable technical measures are used to limit unauthorized access, but no online system is risk-free.

8. Your choices and rights

You can unsubscribe from launch notifications at any time and change your visual theme locally. Depending on applicable law, you may request access to, correction of, deletion of, or restriction of processing of your personal data, or object to certain processing. Contact the Baobab server owner or authorized staff through Discord to make a request. If you are in the EU/EEA, you may also contact your local data protection authority.

9. Changes

We may update this policy to reflect changes in the service or the law. The revision date at the top of this page identifies the version currently published.