Privacy Policy
Last updated: July 24, 2026
1. Information We Collect
CoinForge collects and stores the following data to operate the Bot's economy, moderation-adjacent safety controls, support features, giveaways, and server configuration:
- Discord user IDs — To associate balances, bank values, XP, inventory, achievements, cooldowns, premium grants, reminders, votes, feedback, clan memberships, duel challenges, lottery tickets, market listings, quest progress, chat message bonuses, command usage, and transaction history with a Discord account.
- Discord guild/server IDs — To store server settings (prefix, currency name/symbol, daily/weekly amounts), custom shop items, marketplace listings, lottery state, command stats, maintenance settings, premium server grants, and admin configurations.
- Discord channel IDs — For reminder channel associations and feedback origin tracking.
- Command and interaction data — Command names, options, timestamps, cooldowns, transaction records, gameplay outcomes, button interactions, duel challenges, blackjack game state, and autocomplete queries needed to perform requested actions.
- User-provided text — Feedback, bug reports, feature requests, giveaway names, reminder text, clan names and descriptions, and similar content submitted through Bot commands.
- Message data — Message IDs and content (for deduplication purposes only — no message content is permanently stored or logged).
- Premium and grant records — Premium grant status, grant source (user/server), granting admin ID, and expiration timestamps.
We do not collect IP addresses, real names, email addresses, passwords, payment information, or any personally identifiable information beyond Discord IDs and user-provided text.
2. Website Data Collection
When you visit the CoinForge website at https://coinforge.fly.dev/, we may collect:
- Basic analytics — Page views and navigation patterns for service improvement (if enabled).
- Server logs — Standard HTTP request logs including request paths, timestamps, and response status codes. These are automatically rotated and deleted.
The website does not use cookies, tracking scripts, or third-party analytics services.
3. How We Use Your Information
Your data is used exclusively to:
- Provide Bot functionality and maintain the virtual economy system
- Prevent abuse, enforce cooldowns, and maintain economy integrity
- Operate leaderboards, ranks, and competitive features
- Process support workflows (feedback, bug reports, feature requests)
- Grant promotional premium access and manage premium servers
- Troubleshoot issues, fix bugs, and improve reliability
- Send reminder DMs at user-requested times
- Track command usage for performance monitoring
4. Data Storage and Security
The Bot is hosted on Fly.io at https://coinforge.fly.dev/. Economy and configuration data is stored in PostgreSQL via Neon. We implement the following security measures:
- Encrypted database connections (TLS)
- Environment-based secrets and credentials (never hardcoded)
- Restricted production access — only the bot owner has database access
- API authentication via secret key for sensitive endpoints
- Parameterized queries throughout to prevent SQL injection
- Timing-safe HMAC verification for webhooks
Despite these measures, no system is 100% secure. We cannot guarantee absolute security of your data.
5. Data Retention
We retain data for as long as needed to operate CoinForge, preserve economy integrity, handle abuse prevention, and provide support. Specific retention periods:
- Active user data — Retained indefinitely while the user interacts with the Bot.
- Transaction history — Retained for economy integrity; users can export their own data via
/exportdata.
- Feedback and reports — Retained for support and improvement purposes.
- Cooldowns — Automatically expire after the cooldown period ends.
- Reminders — Automatically deleted after firing.
- Message deduplication data — Automatically cleared after 30 minutes.
To request data deletion, contact us through our support server with your Discord user ID. We will process deletion requests within 30 days. Removing the Bot from a server stops further command-based collection for that server, but existing records may remain in backups until rotated.
6. Data Sharing
We do not sell, rent, or trade personal data. We may process data through service providers required to operate CoinForge:
- Discord — Platform on which the Bot operates. Data shared includes user IDs, guild IDs, and channel IDs necessary for Bot function.
- Fly.io — Cloud hosting provider for the Bot and website. Server logs may be accessible to Fly.io for infrastructure support.
- Neon (PostgreSQL) — Database provider for all economy, premium, support, and configuration data.
- top.gg — Optional voting integration. Your Discord user ID may be shared with top.gg for vote verification purposes if you use the voting feature.
Data may also be disclosed if required by law, to protect our rights or property, or to prevent harm to users, servers, or our infrastructure.
7. Your Rights (GDPR & CCPA)
Depending on your jurisdiction, you may have the following rights:
- Right to Access — You can request a copy of your data. Use
/exportdata in Discord to export your transaction history, or contact us for a full data report.
- Right to Rectification — You can correct inaccurate data by contacting support. Most data is automatically managed through Bot commands.
- Right to Deletion — You can request deletion of your data. Contact us through the support server with your Discord user ID.
- Right to Restrict Processing — You can request that we limit how your data is used.
- Right to Data Portability — You can export your data via
/exportdata.
- Right to Object — You can object to the processing of your data by ceasing use of the Bot.
We will respond to all legitimate requests within 30 days. To exercise these rights, join our support server.
8. International Data Transfers
CoinForge operates globally. Your data may be transferred to and processed in countries where our service providers operate (including the United States and the European Union). We ensure appropriate safeguards are in place for international data transfers.
9. Children's Privacy
CoinForge is not intended for children under 13 years of age. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with data, please contact us immediately so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be announced in our Discord support server. We encourage you to review this policy periodically.
11. Contact
For privacy inquiries, data requests, or questions about this policy: