Privacy Policy

1. Introduction

This Privacy Policy describes how BuiltByTerra collects, uses, and stores information when you use quoteit. We are committed to handling your data responsibly and transparently.

2. Data We Collect

We collect only the data necessary to operate quoteit:

• Guild (Server) ID, to remember which server a quote channel belongs to.
• Quote channel ID, the single channel your server has chosen for quote cards to be posted to.
• Card preferences, if you set one with /quoteit preference: your Discord user id and two numbers, the color pack and typeface used when someone quotes you. Nothing else is attached to it, and setting both back to "No preference" removes the record.
• Posted quote cards, for each card quoteit posts: the card's own message and channel id, the server it is in, the id of the message it quotes, the quoted member's id, and which color pack and typeface the card is currently drawn in. This is what lets the Color and Font dropdowns re-render an existing card instead of posting a new one, and it survives a restart. It is deleted with the rest of a server's data 7 days after quoteit is removed.
• Error diagnostics, if something fails, a short technical record of the error, which may include the server and user id involved, is written to an internal log and automatically deleted after 30 days.
• Operational analytics, the id and name of each server quoteit is in, that server's member count, and the dates quoteit was added to or removed from it, plus hourly totals of how many times each command was used. Command totals are counts only: they record that a command ran forty times in an hour, never who ran it, what they typed, or which server they ran it in.
• Product announcements, when we post an update about quoteit in your server we record which server received it, when, and the id of the message itself, so that the same update is never posted twice and can be moved if you later choose a different channel for it. Replying to one is entirely optional and only possible for someone with the Manage Server permission; if they do, we store what they wrote along with their Discord user id and handle, and the channel it was written from so that we can answer there. Any answer we send is posted publicly in that channel, never what they wrote to us. Choosing which channel updates should go to records that channel id and who chose it; turning announcements off records the server id and who turned them off, and nothing else. Both are reversible from the same buttons at any time.

quoteit does not store quoted messages. The text of a quoted message is read only for as long as it takes to draw the card, then discarded. It is never written to our database. The posted card itself is a normal Discord message living in your own server, under your control, and can be deleted like any other. quoteit requests the Message Content privileged intent because Discord will not otherwise hand over the text of the message you asked it to quote; that text is read for the specific message you explicitly chose, and nothing else. Author display names and avatars are fetched from Discord at the moment a card is drawn and are not stored.

3. How We Use Data

Collected data is used solely to:

• Post quote cards: the stored channel id is the destination a rendered card is sent to.
• Render a card in your chosen colors and typeface when you are the one being quoted.
• Report configuration: /quoteit status reads back the channel currently set.
• Diagnose faults: error records are used only to find and fix bugs, and are never used to build a profile of anyone.
• Tell the servers that installed quoteit about changes to it, and read what they choose to write back.

We do not sell, share, or disclose your data to third parties for marketing or advertising purposes.

4. Data Storage and Security

Data is stored in a PostgreSQL database with encrypted connections (SSL/TLS). We take reasonable technical measures to protect stored data from unauthorized access. However, no system is completely secure, and we cannot guarantee absolute security.

Operational analytics are kept in a database separate from quoteit's feature data. The analytics themselves carry no user identifiers of any kind, no user ids, no message content, and no per-member activity. That same separate database also holds the delivery record for product announcements, anything a server admin chooses to write back to us, and the records of our ambassador program. Those three do include the Discord user id and handle of the person who wrote in, because a message someone sends us has to come from someone; none of them is ever populated without a deliberate action by that person. It is readable only by the developer, through a private dashboard that requires both a randomly generated access token and a time-based one-time code from an authenticator app. That dashboard is excluded from search engines and returns an ordinary "page not found" to anyone who is not signed in. Its database credential can read the analytics and write only the announcement and ambassador records; it cannot reach quoteit's feature data at all. None of this is ever sold, shared, or used for advertising.

5. Data Retention

Your quoteit data is a single row per server holding the quote channel you selected. It is retained while quoteit remains in your server. If quoteit is removed, that server's data is automatically and permanently deleted 7 days after removal; re-adding quoteit within those 7 days cancels the scheduled deletion. A card preference belongs to you rather than to any server, so it is kept until you clear it by setting both options back to "No preference". You may also request immediate deletion at any time (see Section 8).

This applies to operational analytics with no exception. When quoteitis removed from a server, that server's analytics record, its id, name, member count, and install and removal dates, is permanently deleted on the same 7-day schedule as everything else, from the analytics database as well as the application's own. Announcement records go with it: which updates that server received, whether it turned announcements off, and anything it wrote back to us. Re-adding quoteit within those 7 days cancels the deletion. Nothing about a server that removed quoteit is retained beyond that window.

6. Third-Party Services

quoteit operates within the Discord platform and is subject to Discord's Privacy Policy. We do not integrate with other third-party data processors beyond the database provider used to store operational data.

7. Children's Privacy

quoteit is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided data, please contact us so we can remove it.

8. Your Rights and Data Requests

You may request access to, correction of, or deletion of your data at any time. For server administrators, this includes all data associated with your guild ID.

To submit a data request, join our Discord community and open a support ticket with your Discord server ID or user ID.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of quoteit after changes constitutes your acceptance of the revised policy.

10. Contact

For questions, concerns, or data requests, join our Discord community.