Privacy Policy

Account data: your email address and a hash of your password. We never store the password itself. If you used a referral link, we also store who referred you, and referrers see a partly hidden version of your email and whether you bought a pack.

Content you create: the descriptions and chat messages you write, the source code that is generated, and the output of the automatic checks. If you use our hosting, you also give us your bot token and the other environment variables of your bot. We store them encrypted, use them only to run your bot and never show or log them. We never ask for your bot token for anything else and do not want it in a description.

Billing data: the packs you bought, amounts, order status and dates. Card details are handled by our payment processor and never reach our servers.

Technical data: a session cookie that keeps you signed in, and standard server logs such as time, requested page and IP address, used to run and secure the service.

We use your data to provide the service: sign you in, generate and check bots, keep your credits and orders, show your projects and prevent abuse. We do not sell your data and we do not use your bots to train models ourselves.

Where the law asks for a legal basis, we rely on performance of our contract with you (providing the service), our legitimate interest in keeping the service secure and working, and legal obligations such as bookkeeping.

AI provider. To write a bot, the text of your request and, for edits, the current code of your bot are sent to an AI model provider through its API. Do not put passwords, secrets or personal data of other people into your descriptions.

Email delivery. The confirmation email is sent through an email service provider, which receives your email address and the message.

Payment processor. Purchases are handled by Shoppex. They receive your email and the order amount.

Hosting. The service runs on infrastructure of our hosting provider, which stores the data described above.

If we add analytics, we will use a privacy-friendly tool and list it here. By default the site sets no advertising or tracking cookies.

We use one essential cookie, bs_session, to keep you signed in. It is sent only to our site, is not used for tracking and expires after 30 days or when you sign out.

If you arrive through a referral link, a second cookie, bs_ref, remembers the code for 30 days so that the referrer can be credited when you sign up and buy. It contains only that code.

Your account and bots are kept until you delete them or your account. Deleting a bot removes its code and history from our storage. Deleting your account removes your profile and all your bots.

Order records are kept as long as accounting and tax rules require. When you delete your account they are separated from your email address.

Server logs are kept for a short period for security and debugging.

You can delete any bot from the dashboard and delete your account on the Credits page. Depending on where you live, you may also have the right to access, correct or export your data, to object to some processing and to complain to your data protection authority.

Passwords are stored as salted hashes, sessions are signed and the connection to the site uses HTTPS. Generated code is scanned, and the automatic checks run in an isolated folder with a fake token and no access to your Discord account. No system is perfectly secure, so keep your password private and use a unique one.

The service is not meant for children under 13, and where local law sets a higher age for consent, for people under that age. If you believe a child has given us data, contact us and we will delete it.

Our providers may process data in other countries. Where required, we rely on appropriate safeguards offered by those providers.

If we change this policy in a meaningful way, we will update the date above and, for important changes, tell you in the service. See also our Terms of Service.