Foreword

The following document was created as required by the European Union General Data Protection Regulation (EU GDPR). You can find more information about that regulation on gdpr.eu.

This document details what and why data is collected by The Quilt Project through the "Cozy (Stats)" Discord bot running Metricity, how it is used and how to use your rights related to your data.

The Quilt Project ("Us", "We", "Our") is the data controller for the data collected through the Cozy Discord bots.

Data Collected

Messages

We collect the following information about messages sent on the server:

• Message ID
• Author ID
• Channel ID and Thread ID
• Creation date
• Whether the message is deleted or not

The message content is not collected. Message data is kept after deletion from Discord, for erasure please see Contact.

Users

We collect the following information about users who are on one of our Guilds:

• User ID
• Username
• Avatar image hash
• Guild avatar image hash
• Creation date
• Join date
• Public Discord flags
• Whether the user is in the Guild
• Whether the user is considered as "pending" by Discord

User data is kept after leaving the Guild, for erasure please see Contact.

Data usage

The data is collected to provide statistics and identify bad actors. We do not make use of any automated decision making based on this data.

No statistics containing private information will be provided publicly. We may use statistics containing private information internally.

Data Retention

Data is retained indefinitely. We do not delete any data unless you request it.

Data Governance

Database access is limited to the minimum of The Quilt Project benevolent workers required to operate the service. We do not share any data with third parties. We do not sell any data. Your data isn't shared with any contracted sub-processors.

Data is stored in a country part of the European Economic Area (EEA). Data is encrypted at rest and in transit.

Access, rectification, erasure, restriction, portability, and objection

Every user is entitled to the following:

The right to access – You have the right to request Us for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that We correct any information you believe is inaccurate. You also have the right to request Us to complete the information you believe is incomplete.

The right to erasure – You have the right to request that We erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that We restrict the processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that We transfer the data that we have collected to another organization, or directly to you, under certain conditions.

The right to object to processing – You have the right to object to Our processing of your personal data, under certain conditions.

If you would like to exercise those rights, contact us at [email protected]. We may ask you to verify your identity before processing your request, using a service such as Aperture. We will respond to your request within 30 days as required by law.

Changes to the Privacy Policy

We keep this privacy policy under regular review and places any updates on this web page. If we do this, we will post the changes on this page and update the "Edited" date at the top of this page.

Contact

If you have any questions about this privacy policy, please contact us at [email protected].

Edit this page on GitHub