bloom
Commands Docs Support Add to Discord

Privacy Policy

This Privacy Policy explains how Bloom Bot ("we", "our", "the Bot") collects, uses, stores, and protects your information when you use our Discord bot and related services.

Who We Are

Bloom Bot is a Discord bot providing moderation, utility, entertainment, and community management features for Discord servers. By adding Bloom to your server or interacting with it, you acknowledge this policy.

Privileged Data Access

Bloom uses two Discord privileged gateway intents that grant access to sensitive data:

  • Message Content Intent: Allows the Bot to read the full content of messages in servers where it is present. This is required for prefix commands, automod, message highlight notifications, auto-forwarding, bump reminders, counting channels, and other message-based features. Without this intent, these features cannot function.
  • Server Members Intent: Allows the Bot to receive events about members joining, leaving, and being updated. Required for welcome messages, member tracking, birthday features, and moderation.

Message content is not stored persistently except where explicitly described below (e.g. moderation logs, snipe, auto-forward). The Bot processes message content in memory to execute commands and then discards it.

What Data We Collect

Automatically Collected Data

  • Discord Identifiers: User IDs, Server IDs, Channel IDs, Role IDs — used to associate data with the correct users and servers.
  • Message Activity Counts: Per-user and per-channel message counts and hourly activity timestamps for analytics features (analytics, leaderboard commands). Message content is not stored for this purpose — only the count and timestamp.
  • Member Count History: Server member count snapshots over time, stored per guild.
  • Deleted & Edited Messages (Snipe): When a message is deleted or edited, the Bot temporarily stores the text content and author in memory for up to 30 minutes to support the snipe and editsnipe commands. This data is never written to disk and is purged automatically.
  • Moderation Logs: Bans, kicks, mutes, warns, and related actions are stored persistently as part of audit trail features.
  • Server Configuration: Settings such as prefix, log channels, automod rules, welcome messages, and feature toggles.

Data You Provide

  • Profile Information: Last.fm username, birthday (month and day only, no year), timezone preference, and self-assigned prefix — stored only when you explicitly set them via a command.
  • Highlight Keywords: Words or phrases you register with the highlight system. The Bot scans message content in channels you can access to match these keywords and notify you via DM. Keywords are stored per-user and can be removed at any time.
  • Reminders: Text and time stored until the reminder fires, then deleted.
  • Custom Commands & Autoresponders: Server-specific triggers and responses set by server administrators.
  • Moderation Notes: Staff-added notes attached to user IDs for moderation purposes.
  • Tickets: Ticket content and transcripts may be stored if the ticket transcript feature is enabled by server administrators.

Auto-Forward Feature

When the auto-forward feature is configured, the Bot reads messages sent in a source channel and re-posts them in a target channel. Only the message content and author are accessed; no additional data is stored beyond what Discord already retains.

Third-Party API Requests

When you use commands that interact with external services, your query (e.g. a search term or username) is sent to that service. We do not store these queries. Services include:

  • Last.fm: Music listening history (linked by your Last.fm username)
  • Spotify: Music metadata search
  • YouTube Data API: Video search queries
  • Giphy: GIF search terms
  • OpenWeatherMap: Location strings for weather lookup
  • Wikipedia / Urban Dictionary / NASA / other public APIs: Search terms
  • Piston API: Code submitted to the run command is sent to the Piston sandboxed execution service

Each of these services has its own privacy policy. We are not responsible for their data handling.

How We Use Your Data

  • Service operation: Execute commands, enforce server settings, and deliver features.
  • Personalization: Remember your preferences (timezone, Last.fm username, etc.).
  • Moderation: Track infractions and provide server staff with audit history.
  • Analytics: Provide server administrators with aggregate activity statistics. Raw message content is never stored for analytics.
  • Notifications: Send highlight DMs, birthday announcements, reminders, and bump reminders.

We do not sell, share, or disclose your data to advertisers, data brokers, or any third parties beyond what is required to operate the features you use.

Data Retention

Temporary (in-memory only, never written to disk)

  • Snipe / Edit-Snipe data: Automatically purged 30 minutes after deletion/edit
  • API response cache: Up to 15 minutes
  • Rate-limit tracking: Cleared after the rate-limit window expires

Persistent (stored in database)

  • User preferences: Retained until you request deletion or the Bot is removed from all mutual servers
  • Server configuration: Retained until modified, deleted, or the Bot is removed
  • Moderation records: Retained until manually cleared by an authorized administrator
  • Message activity counts: Retained unless reset by an authorized administrator; raw message content is not stored
  • Member count history: Retained per guild until deletion is requested

Automatic Cleanup

  • Reminder data is deleted immediately after delivery
  • Temporary files (e.g. generated images) are deleted immediately after sending

Data Security

  • Access: Database access is restricted to the bot process running on the host machine
  • Transport: All communication with Discord and third-party APIs occurs over HTTPS/TLS

Your Rights & Choices

Data Access

You may request a summary of what data we hold for your user ID by opening a ticket in our support server.

Data Deletion

You may request deletion of all data associated with your user ID at any time by opening a ticket in our support server. Server administrators may also request deletion of all data for their server. We will process deletion requests within a reasonable time.

Highlight & Preference Removal

You can remove your highlight keywords, Last.fm link, birthday, timezone, and other preferences directly via Bot commands at any time.

Opting Out

Because the Bot collects some data passively (e.g. message counts) simply from being in a server, the most complete opt-out is to ask a server administrator to remove the Bot, or to leave servers where it is present. You may also contact us to have your user ID added to a block list, which will cause the Bot to ignore all your messages and commands.

Children's Privacy

The Bot follows Discord's minimum age requirements (13+ globally, 16+ in certain regions per GDPR). We do not knowingly collect data from users below these thresholds. If you believe a minor's data has been collected, contact us immediately and we will delete it promptly.

Third-Party Services

The Bot integrates with Last.fm, Spotify, YouTube, Giphy, OpenWeatherMap, Wikipedia, Urban Dictionary, NASA, and the Piston code execution API. Each service operates under its own terms and privacy policy. We are not responsible for their data practices.

Contact

Policy Updates

We may update this policy when features change. Material changes will be announced in our support server. Continued use of the Bot after changes constitutes acceptance of the updated policy.

Last updated: March 2026