Privacy Policy

Last updated: December 2026

1. Who we are

Wody is an independent Discord bot and its accompanying web dashboard, operated by an individual (the "Operator"). The Service allows Discord server owners and administrators to configure and manage the Wody bot. The Service is not affiliated with, endorsed by, or sponsored by Discord Inc.

2. What we do NOT do

  • We do not use Google Analytics, Meta Pixel, Hotjar, or any third-party analytics.
  • We do not use advertising, marketing, or profiling cookies.
  • We do not sell, rent, or share your personal data with third parties.
  • We do not fingerprint your device, browser, or network.
  • We do not send marketing emails or newsletters.
  • We do not create an account outside of Discord OAuth.

3. What we DO process

We only process the information strictly necessary to authenticate you and allow you to manage your own Discord servers.

  • Discord OAuth session, stored securely in a single HttpOnly cookie (nexus_session), signed with HMAC-SHA256.
  • Your Discord ID, username and avatar hash, used only to identify the logged-in user.
  • Your Discord servers, retrieved directly from Discord when you log in and not permanently stored by Wody.
  • Bot configuration (welcome messages, automod settings, reaction roles, tickets, etc.) that you explicitly save through the dashboard.

4. Legal basis (GDPR)

We rely on Art. 6(1)(b) GDPR (performance of a contract) to provide dashboard functionality and store bot configuration, and on Art. 6(1)(f) GDPR (legitimate interest) to maintain a secure authenticated session using the strictly necessary nexus_session cookie. Under the ePrivacy Directive, strictly necessary authentication cookies do not require prior consent.

5. Retention

  • The nexus_session cookie expires automatically after 7 days.
  • Bot configuration is retained while Wody remains in your server. You may request deletion at any time by contacting the developer.

6. Your rights

You may log out at any time, which ends your authenticated session. You may also request access to, correction of, or deletion of your personal data by contacting the developer. If you are located in the European Economic Area, you may lodge a complaint with your local Data Protection Authority.

7. Third-party services

  • Discord Inc. provides OAuth authentication and the Discord API used by Wody.
  • During Discord authentication, your browser may receive cookies from Discord or its infrastructure providers (such as Cloudflare), including __cf_bm. These cookies are created on Discord-owned domains for security and bot protection, are not accessible or controlled by Wody, and are governed by Discord's and Cloudflare's own privacy and cookie policies.
  • MongoDB Atlas provides secure database hosting for bot configuration.
  • Vercel (or an equivalent hosting provider) hosts this dashboard.

For more information about cookies used by Wody, please see our Cookie Policy.

8. Contact

Email: teamswody@gmail.com

For any privacy or legal question, contact the developer on the community server.