Cusca Bot
Log in with Discord

Privacy Policy

This English version is provided for convenience only. In the event of any discrepancy, the French version is the sole legally binding one.

Data controller

Sébastien Blanc (Sole trader, France), reachable at hello.cuscabot@sebastien-blanc.fr, is the controller for the personal data processing described below, in accordance with the General Data Protection Regulation (GDPR).

Data collected

  • Discord ID, username and avatar (via Discord OAuth2 login)
  • List of Discord servers where you have the "Manage Server" permission
  • Configuration of servers the bot is installed on (channels, roles, settings)
  • XP, level and economy data tied to your activity on servers using the bot
  • Moderation action log (warnings, kicks, bans) carried out via the bot
  • A technical session cookie (see our Cookie Policy)

Purposes and legal basis

This data is processed to enable authentication to the web panel, the operation of the bot (moderation, logs, leveling, premium) and the customization of settings per server. The legal basis is the performance of the service requested by the server administrator (GDPR Article 6.1.b) and, for moderation logs, the legitimate interest of server security (Article 6.1.f).

Retention period

When the bot is removed from a server, that server's data is not automatically deleted: it is kept, in case the bot is reinstalled, until a deletion is requested (see "Your rights" below) or decided by the publisher. No message content is ever retained in this database: moderation logs only contain a short excerpt for evidentiary purposes, never the full message stored durably.

Data recipients

Data is hosted at OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. The bot relies on the API and infrastructure of Discord Inc. (United States), subject to its own data transfer clauses outside the European Union.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict and object to the processing of your data, as well as a right to data portability. To exercise these rights, contact hello.cuscabot@sebastien-blanc.fr. You may also file a complaint with the French data protection authority, the CNIL (www.cnil.fr).

Security

No password is ever stored: authentication relies exclusively on Discord's OAuth2 protocol. The panel session relies on a technical httpOnly cookie (not accessible from JavaScript, which reduces the risk of session theft via malicious scripts). Transport encryption (HTTPS) is currently being rolled out.