Privacy Policy

This policy describes what the Cicada Discord bot and this dashboard, operated by Arseniy Seliverstov, store about you and why. It is written against what the bot’s database actually contains, not a generic template.

What is stored

• Your Discord user ID — the numeric snowflake, which is how every record below is keyed. No usernames, avatars, or email addresses are stored; they are read live from Discord when something needs to be displayed.
• Activity totals — accumulated experience and level from messages and voice time, plus the timestamp of your most recent counted message. Counts only; not what you said, and not which channel.
• Reputation entries — the giver’s ID, the receiver’s ID, the direction (up or down), and the time, kept so cooldowns and anti-abuse limits can be enforced.
• Invite attribution — for a server that has Cicada, a record that a member joined, which invite (and inviter) it was attributed to when that could be determined unambiguously, and when they left.
• Linked FACEIT accounts — the FACEIT nickname and player ID you link with /link faceit, stored against your Discord ID so /faceit can look them up.
• Wallet balances — your coin balance and the transfers behind it, including the optional note attached to a transfer (which is delivered to the receiver and stored with the transfer).
• Webhook messages sent from this dashboard — when an administrator uses “Send & Save”, the message content and embed are stored so it can be edited or deleted later. Choosing “Send” instead posts the message without keeping a copy.
• Server-level settings — level-role ladders, voice hub channels, and premium grants, keyed by server ID.
• Premium purchases — if a server buys paid time, the server ID, the Discord ID of the member who started the purchase, the price, and the address and status of that one invoice. No card, bank detail, name, or postal address is involved: payment goes through a separate cryptocurrency payment service.

What is deliberately not stored

Message content is not stored. Cicada reads messages only to count activity — length and timing — and the text is discarded immediately; it is never written to the database and never logged. The one exception is the opposite direction: a message an administrator composes here and explicitly saves (above). Voice audio is never accessed at all.

There is no advertising, no third-party analytics, and no tracking on this dashboard: no Google Analytics, no pixels, no cookies beyond the session cookie Auth.js sets to keep you signed in. Nothing is sold or shared with anyone.

Signing in to this dashboard

Signing in uses Discord OAuth with the identify and guilds scopes. Your Discord access token is kept in an encrypted session cookie in your browser and is used to ask Discord which servers you administer. It is not stored in our database, and it stops working roughly a week after you sign in.

Third parties

• Discord — everything Cicada does happens through Discord’s API, under Discord’s own privacy policy.
• FACEIT — only if you link an account: the nickname you provide is sent to FACEIT’s public API to fetch your stats.

Retention and deletion

Records are kept while Cicada is in the relevant server, so levels and balances survive across sessions. Removing Cicada from a server stops all collection for it.

You do not have to ask us to act on your own data. /gdpr export sends you everything stored about your account, and /gdpr forget erases it: your activity and levels, your linked FACEIT account and any voice room you own are deleted outright, and your account row is anonymised — its Discord ID is replaced by a value no Discord account can ever have, so nothing left in the database still points at you. The command answers with a table of exactly what was deleted, what was anonymised, and what was kept.

Some rows are deliberately kept in that anonymised form, because each is also a record belonging to someone else and erasing it would rewrite their history: reputation you gave or received, invite attributions, an in-flight duel stake, a server’s premium grant or invoice, and announcements published to a channel. Your wallet row is kept for the same reason — coins in it were transferred there by other members, and its balance appears in their own transfer history. None of it identifies you once the account row is anonymised.

If you would rather it were done by hand, or you are a server administrator asking for a server’s own settings and saved webhook messages, email asel1x.work@icloud.com from an address you can be reached at, including your Discord user ID. Deletion is permanent and is normally completed within 30 days.

Changes

This policy may change; the date at the top is updated when it does. Questions go to the same address above.