Legal Document

Privacy Policy

Last updated: January 9, 2026

In summary

We take your privacy seriously. Your Discord tokens are encrypted with AES-256, we only collect data essential to the service, and we never sell your data.

1 Introduction

This Privacy Policy describes how KataBump ("we", "our" or "the Service") collects, uses and protects your personal information when you connect your Discord token to our pre-built and hosted bot code.

2 Data collected

2.1 Discord authentication data

When you log in via Discord OAuth, we collect:

  • ID utilisateur Discord - Unique identifier of your account
  • Username - Your Discord username
  • Avatar - Your Discord profile picture

2.2 Configuration data

For each Discord token you connect to our code, we store:

  • Token Discord - Encrypted with AES-256 before storage
  • Client ID - Your Discord bot identifier
  • Prefix - Command prefix you configure

2.3 Technical data

  • Cookies de session - To maintain your authentication
  • Logs serveur - For debugging and security

3 Data usage

We use your data only for:

  • Provide the service - Connect your token to our hosted bot code
  • Authentication - Verify your identity via Discord OAuth
  • Configuration management - Apply your settings
  • Security - Detect and prevent abuse

We NEVER sell your data to third parties.

4 Data security

AES-256 Encryption

All your Discord tokens are encrypted with the AES-256 (Advanced Encryption Standard) algorithm before being stored. This is the same level of encryption used by banks and governments.

  • HTTPS - All communications are encrypted in transit
  • OAuth - No password is stored on our servers
  • Sessions sécurisées - HttpOnly cookies to prevent XSS attacks

5 Your rights (GDPR)

Under GDPR, you have the right to:

Access

Request a copy of your data

Rectification

Correct inaccurate data

Deletion

Request deletion of your data

Portability

Receive your data in a structured format

6 Data retention

  • Account data - Kept as long as your account is active
  • Bot data - Kept as long as you host bots
  • Logs serveur - Kept for 30 days maximum
  • Inactive accounts - Deleted after 90 days of inactivity

7 Contact

For any questions regarding this Privacy Policy or to exercise your rights, contact us via our support system on Discord.

Join support