> Privacy Policy
Last updated: February 2026
# Overview
This policy covers both the NinjaBot Discord bot and the NinjaBot web dashboard. Together, they help you manage your Discord server with World of Warcraft integrations. We collect only the minimum data necessary to provide our services and do not sell or share your data with third parties.
# Data We Collect
- - Discord account info: Your Discord user ID, username, and avatar when you log in or interact with the bot
- - Server info: Discord server ID, name, and icon for servers where the bot is installed or you have admin permissions
- - Bot settings: Configuration you set up (greetings, WoW guild links, realm watches, word filters, poll settings, etc.)
- - WoW character and guild data: Characters you link to your Discord account, guild associations, and guild roster data synced from the Blizzard API (member names, levels, ranks, item levels, Mythic+ scores)
- - Bot usage data: Character search history (for autocomplete), poll votes, away status messages, and command usage logs
- - Moderation data: Warnings issued to users and moderation actions taken by server admins
# How We Process Your Data
- - Message scanning: If a server enables the word filter, the bot reads messages in real time to check against the server's banned word list. Message content is not stored — only checked and discarded.
- - Away detection: When a user sets an away status, the bot scans messages for mentions of that user. Message content is not stored.
- - Guild roster syncing: The bot periodically fetches guild roster data from the Blizzard API to keep member info up to date.
- - Log monitoring: If configured, the bot checks WarcraftLogs for new raid logs and posts them to your Discord channel.
# Cookies (Web Dashboard Only)
The web dashboard uses only essential cookies required for it to function. We do not use tracking, analytics, or advertising cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| NinjaBot.Auth | Keeps you logged in after Discord authentication | 7 days |
| Session | Maintains your session state while browsing | 30 minutes |
| NinjaBot.Antiforgery | Protects against cross-site request forgery attacks | Session |
# Third-Party Services
We send the minimum data needed to each service (character names, realm names, region). We do not send your Discord user ID or username to any game API.
- - Discord: Authentication and bot functionality
- - Blizzard API: WoW character data, guild rosters, realm status, and game data lookups
- - Raider.IO: Mythic+ scores and raid progress data
- - WarcraftLogs: Raid log lookups and automatic log monitoring
# Data Retention & Deletion
Your data is retained while you use our services. When the bot is removed from a server, server-specific settings may be retained temporarily in case you re-add the bot.
If you want your data deleted, contact us on Discord and we'll remove your information from our systems. This includes your Discord account data, character associations, search history, moderation records, and any other data linked to your account.
# Contact
Questions about this policy? Reach out on our Discord server.