Privacy · 隐私

Privacy Policy

This policy explains what the NoFlake Discord bot (“NoFlake”, “we”) processes, why the data is needed, and the choices available to Discord users and server administrators.

Effective date: August 29, 2026 · 生效日期：2026 年 8 月 29 日

Short version: NoFlake reacts only to explicit mentions and its own cards. It does not send ordinary channel conversation, direct messages, or channel history to the AI planner.

1. Scope

This policy applies to NoFlake’s Discord bot, its activity workflows, and this website. Discord separately controls the Discord platform and processes data under Discord’s own terms and privacy policy.

2. Data we process

Category	Examples and purpose
Discord context	Server, channel, thread, message and user identifiers; server/channel names; display names and avatar URLs. Used to keep every activity and action inside the correct Discord scope.
Activity records	Activity title, content, start/end time, timezone, capacity, RSVP and check-in status, reminder jobs and lifecycle events. Used to organize the activity and restore scheduled work after a restart.
Court and recap records	Attendance facts, a user’s submitted defense, defense category, eligible ballots, deterministic verdict and recap. Used only inside the relevant activity.
Explicit AI input	Text in a server message that explicitly mentions NoFlake, plus the minimum trusted activity context required to interpret it. Defense text and factual case context may also be sent to generate bounded court copy.
Operational telemetry	Timing, success/error counters, model request outcomes, bounded action/status labels, prompt length and language class. Metrics do not use Discord user, server, channel, message, session or case identifiers as labels. Raw prompts are not written to operational logs.

3. Data we do not intentionally collect

Ordinary messages that do not explicitly mention NoFlake.
Direct-message workflows or private message history.
Channel-history scans, voice content, presence history, passwords or Discord tokens.
Cross-server profiles, advertising profiles, financial penalties or long-term reputation scores.

4. How we use data

We use the data only to interpret an explicit NoFlake request, authorize the caller, create and update activity cards, deliver reminders, record RSVP/check-in facts, run the activity’s attendance review, produce a recap, prevent abuse, diagnose failures, and keep the service reliable.

We do not sell Discord API data, use it for targeted advertising, or use Discord message content to train machine-learning models.

5. Service providers and transfers

Discord provides the platform events, identities, messages and interactions required to operate the Bot.
DeepSeek API currently provides model inference for explicit planner requests and bounded narrative generation. The relevant input is transmitted to DeepSeek for that request; NoFlake does not authorize the provider to train a model on behalf of NoFlake.
Infrastructure providers host the Bot, encrypted transport endpoints, database files, backups and operational monitoring.

These providers may process data in countries different from the user’s country. We limit transmitted data to what is needed for the requested feature.

6. Storage, retention and security

NoFlake stores activity state in a server-side SQLite database so reminders and workflow state survive a restart. Database and backup access is restricted to the service operator. Transport to Discord, the AI provider and this website uses TLS where supported.

Active activity data is retained while the workflow is needed. Completed, cancelled and expired activity data is retained only while needed for service recovery, support, safety and the activity recap, and is deleted or anonymized when it is no longer needed or after a valid deletion request. Backups age out separately and deleted data may remain in a protected backup until that backup expires.

7. User and server choices

Do not explicitly mention NoFlake if you do not want a natural-language message processed.
Use the card’s RSVP/check-in controls only when you want that state recorded.
A server administrator may remove NoFlake or ask for the server’s stored data to be deleted.
A Discord user may request access, correction, or deletion of data associated with their Discord user ID. We may need to verify the requester and the relevant server before acting.

8. Privacy requests

Submit privacy and deletion requests through NoFlake’s official support server linked from the Bot’s Discord application profile or listing. Until that support link is live, requests may be sent to [email protected]. Include the request type and the relevant Discord User ID and Server ID; never send a password or token.

9. Children

NoFlake is not directed to children under 13 or below the minimum age required to use Discord in their jurisdiction. Users must meet Discord’s age requirements.

10. Changes

We may update this policy when the service, providers, or legal requirements change. The effective date at the top will be updated for material revisions.

中文摘要

NoFlake 只处理明确 @NoFlake 的服务器消息和用户主动点击的卡片操作，不扫描普通聊天、频道历史或私信。Bot 会保存活动、报名签到、申辩、投票和必要的 Discord 标识，用于活动流程、提醒、恢复与安全校验。明确 @Bot 的文本及受约束的案件事实可能发送至 DeepSeek API 推理。我们不出售 Discord 数据、不用于定向广告，也不使用 Discord 消息训练模型。

用户可通过 NoFlake 官方支持服务器申请访问、更正或删除个人数据；支持服务器上线前可联系 [email protected]。请只提供 Discord User ID、Server ID 和请求类型，不要提供密码或 Token。