Back to home

Privacy Policy

Last updated: 24 October 2026

This translation is provided for informational purposes only. In case of discrepancy, the Spanish version prevails.

This Privacy Policy describes how FireFighter ("the Bot"), developed by FireBotDevs© ("we", "us"), collects, uses, stores and protects users' information ("you", "your") when they interact with the Bot on Discord. Your privacy matters to us and we are committed to protecting it in accordance with applicable laws and Discord's policies.

1. Information we collect

The Bot collects and stores only the minimum information needed for it to work. Below is what data is collected and why:

Data Purpose Storage
Server ID (Guild ID) Identify the server to apply settings While the Bot is on the server
User ID Economy system, profile, blacklist, warnings, interactions While the Bot is in use or until a deletion request
Server settings Anti-raid, autoroles, verification, prefix, log channel While the Bot is on the server
Virtual economy data Balance, transactions, economy system cooldowns While the Bot is in use or until a deletion request
Profile data Tagline, banner, marital status (provided voluntarily by the user) Until a deletion request
Moderation records Warns, blacklist, anti-raid history According to the server's moderation needs
Minigame statistics Record of matches and scores While the Bot is in use
Recent messages (deleted and edited message log) If the server has message logging enabled, the Bot temporarily keeps recent messages (author, channel, text, attachment links and stickers) so it can post the content of deleted or edited messages in the server's log channel In memory only, temporarily: discarded when the Bot restarts or when the message is no longer recent. Whatever is posted in the log channel is under the server's control
Trap channel activity (Honeypot) If the server sets up a trap channel, the ID of the user who writes in it, the channel, the message content, the action applied and the date are recorded to protect the server against malicious accounts The message text is deleted automatically after 90 days. The rest of the record is kept as a moderation record while the Bot is in the server
Backups and templates (/backup, /template) Server structure (roles, channels and permissions, which may include the IDs of members with special permissions in a channel), so it can be restored, for example after a raid Until the person who created it deletes it, even if the Bot leaves the server: backups with /backup delete and templates by asking on the support server
Translations (/idioma command) Texts sent by the Bot and their translation, stored so the same text is not translated twice Size-limited cache: the oldest entries are deleted automatically
Dashboard login data Identifying you on the web dashboard and showing the servers you can manage (see section 9) 7-day session in a cookie in your browser; your user ID and the authorisation date are kept for statistics
Website support chat The messages you send to the team, the page you write from, the dates and the status of the request. When end-to-end encryption is available, messages are stored encrypted and only you and the team can read them; otherwise they are stored unencrypted Until you request its deletion
Website security logs When a request to the website or its API looks like an attack (scans, injections, unauthorised access or request abuse): the IP address, event type, path, browser (user agent), a fragment of the request and, if you were logged in, your user ID. They are used to detect and block attacks 90 days. Blocked IPs only for as long as the block lasts (usually one hour)
Anonymous website statistics How many visits each page gets, what kind of site they come from (for example, a search engine or Discord) and how many times the Invite, Plans, Patreon and «Upgrade plan» buttons are clicked. Only daily totals are stored: no cookies, no IP address and no identifier of yours Deleted automatically after 400 days

Information we DO NOT collect

  • Message content, except in the cases described in the table above: commands addressed to the Bot, the deleted and edited message log when the server enables it, and messages sent to a trap channel (Honeypot). The Bot does not analyse your messages for any other purpose
  • User passwords or access tokens
  • Personal information such as real name, email, address or phone number
  • Payment data (donations are processed through external platforms such as Patreon and Cafecito)
  • Data from children under 13, knowingly

2. How we use the information

The information collected is used exclusively to:

  • Provide and maintain the Bot's features (anti-raid, moderation, economy, minigames, profiles, interactions)
  • Apply settings specific to each server
  • Manage the local and global blacklist for the community's safety
  • Logging deleted and edited messages, and trap channel activity, in the server's log channel when administrators enable these features
  • Translating the Bot's messages into the language chosen by each server
  • Providing access to the web dashboard to configure your servers
  • Answering the requests you send us through the support chat
  • Detecting and blocking attacks against the website and its API
  • Knowing, through anonymous totals, which pages and buttons of the website are used, in order to improve it
  • Improve the Bot's performance and features

We do not use the information to:

  • Build user profiles for commercial purposes
  • Targeted advertising or marketing
  • Sell, rent or share data with third parties
  • Train artificial intelligence or machine learning models
  • Discriminate against users based on protected characteristics

3. Data sharing

We do not share, sell or transfer your data to third parties, except in the following cases:

  • Legal requirement: If we are required to by law, court order or a valid government request.
  • Protection: If it is necessary to protect the rights, property or safety of FireBotDevs, our users or the public.
  • Automatic translation: If a server chooses a language other than Spanish with /idioma, the texts sent by the Bot are sent to Google's translation service to be translated (see section 8).

4. Data storage and security

We implement technical and organizational security measures to protect your data:

  • Data is stored in databases with restricted access and strong passwords
  • Database connections are encrypted (TLS/SSL)
  • The Bot's and the database's credentials are stored as secure environment variables, never in the source code
  • Support chat messages are end-to-end encrypted in your browser when encryption is available, so our servers only store the encrypted message
  • Access to the systems is limited to the authorized development team

Despite our efforts, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data retention

  • Server data: It is deleted automatically 90 days after the Bot is kicked or removed from the server, both in the Bot and in the web dashboard, unless it is invited again before then. This period prevents the configuration from being lost if someone kicks the Bot maliciously, for example during a raid. Security records about who kicked the Bot and premium subscription data are kept.
  • User data (economy, profile, statistics): Kept until the user requests its deletion.
  • Moderation records: Kept according to legitimate moderation needs. Global blacklist records are kept for as long as necessary for the community's safety.
  • Recent messages for the message log: They are only kept in memory and temporarily; they are discarded when the Bot restarts or when the message is no longer recent.
  • Trap channel activity (Honeypot): The message text is deleted automatically after 90 days. The rest of the record (user, channel, action applied and date) is kept as a moderation record while the Bot is in the server.
  • Backups and templates: They are kept until the person who created them deletes them, even if the Bot leaves the server, so the server can be restored after a raid.
  • Translation cache: It has a limited size and the oldest entries are deleted automatically.
  • Dashboard session: It expires after 7 days or when you log out.
  • Support chat: Requests are kept until you request their deletion.
  • Website security logs: They are deleted automatically after 90 days. IP blocks expire on their own, usually after one hour.
  • Anonymous website statistics: These are daily totals with no personal data and are deleted automatically after 400 days.

6. Your rights

As a user, you have the right to:

  • Access: Request what data we have stored about you.
  • Rectification: Request the correction of inaccurate data.
  • Erasure: Request the deletion of your personal data.
  • Portability: Request a copy of your data in a structured format.
  • Objection: Object to the processing of your data.

To exercise any of these rights, contact us through our Discord support server. We will respond to your request within a reasonable time.

7. Minors

The Bot is not directed at children under 13 (or the minimum age required by the laws of your country). We do not knowingly collect information from children under that age. If we discover that we have collected data from a minor, we will delete it immediately.

8. Third-party services

The Bot operates within the Discord platform and is subject to the Discord Privacy Policy.

Automatic translation (Google Translate): When a server chooses a language other than Spanish with /idioma, the Bot sends the texts of its own messages, buttons and menus to Google's translation service. These texts may include usernames, sanction reasons or other data that appear in those messages. Google processes this information according to its Privacy Policy. If the server uses Spanish, nothing is sent to this service.

Infrastructure providers: To work, the Bot and the website use providers that store or process data on our behalf: MongoDB Atlas (database), Railway (website and dashboard server), Google's Firebase (support chat), Netlify and Cloudflare (website hosting and protection, which may log IP addresses as a normal part of their service) and Discord (internal security alerts for the team, which may include the IP of a suspicious request). We only entrust them with the data needed to provide each service.

We also link to third-party services for donations:

We do not control and are not responsible for the privacy practices of these third-party services.

9. Use of the dashboard

The web dashboard uses Discord OAuth2 for authentication, with the identify and guilds scopes. When you log in we obtain:

  • Your Discord ID, username and avatar
  • The list of your servers, to show those where you can manage the Bot

This information is used only to display and manage your servers' settings. The session is stored in a secure (HttpOnly) cookie in your browser, expires after 7 days and is deleted when you log out. The Discord access token needed to query your servers is stored only inside that cookie, not in our databases. The only thing we keep on our servers is your user ID and the date you authorised access, which we use for usage statistics.

10. Cookies and storage in your browser

We do not use advertising or analytics cookies. The first time you visit the website we ask what you want to allow, and you can change your choice at any time from the «Cookie preferences» link at the bottom of every page.

Cookie-free statistics: to know what works on the website we count visits and clicks anonymously, without cookies and without storing anything in your browser (see the table in section 1). If your browser sends the «Do Not Track» signal or Global Privacy Control, nothing is counted.

Item What it is for Type and duration
Dashboard session (cookie) Keeping you logged in to the dashboard Necessary. 7 days or until you log out
Website protection (Cloudflare) Telling real visitors apart from bots and stopping attacks Necessary. Cloudflare may set short-lived technical cookies
Support chat (local storage) Remembering your request and storing in your browser the key that encrypts your messages Necessary. Until the request is closed or you clear your browser data
Your cookie choice (local storage) Remembering what you have allowed Necessary. Until you change it or clear your browser data
Last server opened in the dashboard (session storage) Returning to the server you were configuring Necessary. Deleted when you close the tab
Language (local storage) Remembering the language you choose for your next visit Preferences. Only with your permission; without it, it is kept only during the visit
YouTube videos Watching the video tutorial inside the website, loaded from youtube-nocookie.com External content. Only with your permission or if you click «Load video»; YouTube applies its own policy
TrustedSite trust seal Show the website's security seal, loaded from TrustedSite's servers External content. Only with your permission; TrustedSite may use its own cookies and applies its own policy

Fonts: the website's typeface is served from our own domain, so loading it does not send any data to third parties.

Discord images: the server icons and avatars shown on the website and in the dashboard are loaded directly from Discord (cdn.discordapp.com). When they are displayed, your browser sends your IP address to Discord, which handles it according to its Privacy Policy.

11. Changes to this policy

We may update this Privacy Policy from time to time. Significant changes will be announced on our Discord support server and with a notice on the website. We recommend reviewing this page regularly.

12. Legal compliance

This Privacy Policy is designed to comply with:

13. Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us: