Privacy Policy | Rezaletbot

1. Who is responsible

Rezaletbot is run by an independent developer in Türkiye. Your data is kept on our servers in Türkiye. This policy was written with Turkish data protection law (KVKK, Law No. 6698) and, where it applies, the EU General Data Protection Regulation (GDPR) in mind.

For problems, questions and requests, join our Discord support server through the link at the bottom of the site and write to us there.

2. What data the bot processes

The bot only processes information Discord gives it and what is needed for features to work. Server admins decide which features are on; a feature that is off keeps no data.

Account details: Your Discord user ID, username, display name in the server and profile picture address; your language and notification preferences.
Music: Songs you play (listening history), songs you save and your playlists, your autoplay preference.
Message content: The bot can read messages but doesn't store them by default. Messages are processed on the fly for chat protection (profanity, invite, link and spam checks). If server logs are on, the content of deleted and edited messages is written to that server's logs; when a support ticket is opened, the messages and attachments inside it are stored so the ticket can also be viewed in the web panel.
Moderation and protection: Warnings, violations, punishments (timeouts, kicks, bans) and their reasons, the staff member who gave them, and actions taken by the protection system.
In-server activity: For levels, your message count and voice/music time (not message content), your economy balance and transactions, achievements, giveaway entries, poll votes, whose invite you joined with and temporary voice channel ownership.
What you enter: Your birthday (year optional), your reminders, and the in-game player name you link for game exchange.
Votes: When you vote for the bot on top.gg, your user ID and the vote time (for vote rewards).

The bot doesn't record or listen to conversations in voice channels; voice information is only used to play music and manage temporary channels. We don't collect your email address.

3. Servers are kept separate

Records from a server are only used in that server; they are not shared between servers or used to make decisions about other servers. The trust score in the protection system only looks at the account's records in that server (earlier protection actions, moderator punishments, violations, activity), the account's age and whether it has a profile picture. A bot block given in a server also only applies in that server.

A block from the whole bot is only given by hand, by the bot's admin, to people who abuse the bot or the site. If you think it's wrong, write to us on our support server.

4. Website and cookies

Sign in with Discord: We only ask for the "identify" and "guilds" permissions: your ID, username, profile picture and which servers you are in (to show the servers you can manage). We never see your Discord password. The access token Discord gives us is not written to the database; it stays in an encrypted session cookie for at most 7 days. Your sign-in times and sign-in count are recorded.
Essential cookies: The session cookie (__Host-rg_oturum) and a 10-minute verification cookie for safe sign-in. Preferences such as language, your cookie choice and panel layout are kept only in your browser (local storage).
Analytics cookies: Google Analytics is loaded only if you allow it in the cookie banner, and uses _ga cookies for visit statistics. You can withdraw consent at any time through the "Cookie preferences" link at the bottom of the site; these cookies are then deleted.
Performance measurement: To monitor page speed we collect anonymous measurements (values like load time, the page path and device type); they are not linked to you.
Server logs: To track errors and abuse, the site writes sign-ins, admin actions and failed requests (with the IP address where needed) to log files.

5. Why data is processed

To provide the service you ask for: playing music, keeping your lists, applying server settings and running the web panel.
To protect servers and users: preventing spam, raids and abuse, and keeping moderation records.
To run and improve the service: finding bugs and monitoring performance and overall usage statistics.

The legal basis is that processing is necessary to provide the service, our legitimate interest in protecting the service and its users, and your consent for analytics cookies.

6. Who it is shared with

We don't sell your data. Only what is needed for the service to work goes to these services:

Discord: The bot and sign-in run on Discord.
Music and lyrics sources: Only the song name, artist or link is sent to YouTube, Spotify and lyrics services (lrclib.net, YouTube Music); your identity is not.
Anthropic (Claude): If autoplay recommendations are on, only the song name and artist are sent to suggest the next song; your identity is not.
Cloudflare: The site is served through Cloudflare. If you use web verification, your IP address is sent to Cloudflare for the human check (Turnstile).
Google Analytics: Only if you allow it.
Streaming and feed platforms: Twitch, Kick, YouTube, Reddit, Bluesky and game servers are only queried for channel and server addresses entered by admins; for game exchange, the player name you link goes to that game server.
top.gg: When you vote, top.gg tells us your user ID.

Server admins can see the logs, punishments and statistics of their own servers through the bot and the web panel. Data may be shared with authorities when legally required.

7. How long it is kept

Server logs (including deleted and edited messages): 30 days
Warnings and protection actions: 90 days
Integration request logs (including IP address): 14 days
Site log files and performance measurements: 30 days
Member join and leave statistics: 400 days
Temporary blocks: deleted when they expire
Listening history: 1 year
Site sign-in record: deleted 1 year after your last visit
A server's data when the bot is removed from it: deleted after 30 days, bot settings (language, prefix, DJ role, volume and player look) included; not deleted if the bot is added back within that time. Your own data (songs you saved, playlists in your library and your reminders) is not deleted: only its link to that server is removed, and reminders then come by DM

Level and economy data, moderation records and support tickets are kept while the bot stays in the server, or until you or server admins delete them; you can ask for deletion at any time. Songs you save, your playlists and your reminders stay until you delete them.

8. Your rights and deleting your data

You have the right to access the data about you, ask for it to be corrected or deleted, object to processing and withdraw consent you gave. You can delete your saved songs, playlists, birthday, reminders and game link yourself.

For other data, write to us on our support server with your Discord account; we verify your identity through Discord and answer within 30 days. Records needed to keep other users safe (for example an open abuse review) may be kept for as long as the law allows.

If you live in Türkiye you can complain to the Personal Data Protection Authority (KVKK); if you live in the EU, to your country's data protection authority.

9. Security

The site runs only over HTTPS, the session cookie is encrypted, stored secret keys are encrypted and admin actions are logged. No system is completely secure, but we take reasonable measures to protect your data.

10. Children

The service is not meant for children under the minimum age required to use Discord (13 in most countries), and we don't knowingly collect data from them.

11. Changes

We update this policy as the service changes. The current text is always on this page and the date at the top changes; important changes are also announced in the update notes.

Privacy Policy.