Privacy Policy

Last updated: 21 September 2026

Ultimaattum is a Discord bot and web dashboard for managing roles, channels and self-service role panels on Discord servers. This policy describes exactly what data the service stores, why, and for how long.

1. Who is responsible

The operator of this bot is reachable on Discord as yenaix. Contact this account for any question about your data, including access and deletion requests.

2. What we store

2.1 When you sign in to the dashboard

Signing in uses Discord OAuth2 with the scopes identify, guilds and guilds.members.read. We keep the following in a server-side session: your Discord user ID, your username and your avatar reference.

The session is held in the server's memory only. It is lost whenever the service restarts, and the session cookie expires after 12 hours. We do not store your Discord password, email address or access token in any database.

2.2 Per-server configuration

One document is stored for each Discord server the bot has been added to:

the server's ID and name
the user ID of whoever added the bot, when it can be determined
user IDs on that server's kick list
role IDs and user IDs that have been granted dashboard access
role IDs that non-administrators are allowed to assign

2.3 Audit log

Every action performed through the dashboard is recorded, including failed attempts:

timestamp and server ID
the acting user's ID and username
the action performed, and the type, ID and name of its target
whether it succeeded, and the error message if it did not

2.4 Role panels

For each published role panel: the server, channel and message IDs, the role IDs and button labels it contains, and the user ID of its creator.

3. What we do not collect

Message content. The bot does not request Discord's MessageContent intent and therefore cannot read what people write.
Email addresses, payment details or any Discord credentials.
Direct messages or voice data.

Standard web server request logs are produced by the hosting platform. They are not used to build any profile of you.

4. Why we store it

All stored data exists to operate features that a server administrator has explicitly asked for: enforcing a kick list, controlling who may use the dashboard, publishing role panels, and keeping an accountable record of administrative actions. The audit log in particular exists so that server administrators can see who changed what.

5. Where it is stored

Data is stored in Google Cloud Firestore and the service runs on Firebase App Hosting, both in the europe-west4 region (Netherlands, European Union). Google acts as a processor on our behalf. Discord processes data according to its own privacy policy.

6. How long we keep it

Server configuration and audit log entries are kept indefinitely until deleted on request. Server configuration is deliberately retained even if the bot is removed from a server, so that settings are not lost if it is added back.

If you want data about a server or about yourself removed, contact the operator using the details in section 1.

7. Sharing

Data is not sold, rented or shared with third parties beyond the infrastructure providers named in section 5. It may be disclosed if required by law.

8. Your rights

Under the GDPR you may request access to your data, its correction or its erasure, and you may object to its processing. Requests go to the contact in section 1. You also have the right to lodge a complaint with your national data protection authority.

9. Children

Discord requires users to be at least 13 years old, or older where local law demands it. This service is not directed at anyone below that age.

10. Changes

Any change to this policy will be published on this page with an updated date. Continued use of the bot after a change means you accept the revised policy.