Privacy Policy

This notice covers the Animei Discord bot and bot.animei.me. It is the information notice under article 10 of Türkiye's Personal Data Protection Law No. 6698 (“KVKK”), and also gives people in the European Economic Area and the UK the information the GDPR requires.

1. Who is responsible

The bot is run by Eren Kaspar, an independent developer in Türkiye, who is the data controller for what this notice describes (“we”). For anything about your data, write to hello@animei.me. A postal address is available on request. The animei.me website has its own privacy policy.

Each server's admins decide which features run there, how much XP they give and what the paths are called. They are responsible for how they run their server.

2. What we process, why, and on what legal basis

XP and paths

If an admin turned on Pathways in a server and you are active there, we store your Discord user ID, that server's ID, your XP, your chosen path and when you last changed it. We use these to give you XP and rank roles, and to show your profile and the server's leaderboard.

To count activity, the bot learns that you sent a message, and which voice channel you are in and whether you are deafened. It doesn't ask Discord for the text of messages, and it ignores and doesn't store any text it receives, for example when a message mentions it. It doesn't listen to voice. Only the resulting XP is stored. The bot has no access to the full member list of a server.

Legal basis: legitimate interest in providing the community feature a server turned on (KVKK art. 5/2-f; GDPR art. 6/1-f).

Server settings

For each server: its ID, the features turned on, the IDs of the channels and roles chosen, the anime followed, and the names, descriptions, emoji, colours and XP amounts of its paths and ranks. We don't record which admin changed what.

Legal basis: performing the service the server's admins asked for (KVKK art. 5/2-c; GDPR art. 6/1-b).

Template files

A file an admin uploads is read from Discord, checked and held in memory for up to ten minutes for its preview. It is only stored if they press Install, and then as that server's paths. A downloaded file holds only paths, ranks and colours, with no members, XP or server details.

Profile cards

When you use /animei, the address you type goes to animei.me to find the card. If you mention a member or type nothing, the Discord ID goes to animei.me instead, which gives an address only if that member turned this on there. The bot stores none of this. The card is posted publicly in the channel.

Legal basis: legitimate interest in answering your command (KVKK art. 5/2-f; GDPR art. 6/1-f). The member's own setting is covered by animei.me's policy.

Short waits

To stop commands being repeated and XP being farmed, the bot remembers your ID for a moment, in memory only. It is gone when the wait ends or the bot restarts.

Technical logs

The bot logs errors on its server, with details such as the server ID and, when a card lookup fails, the address that was typed. Logs hold no message text and are overwritten by newer ones.

Legal basis: legitimate interest in keeping the service running and secure (KVKK art. 5/2-f; GDPR art. 6/1-f).

This website

bot.animei.me has no accounts, ads or visitor analytics. Our host, Vercel, keeps standard request logs, including IP addresses, for a short time to run and protect the site. The only cookie is one that can remember your language.

Emails to us

If you write to us, we use your message and address to answer, and keep them as long as that takes.

3. How we collect it

By automated means, from Discord while you use a server the bot is in, from what you and your server's admins enter in its commands and panels, and from animei.me as described above.

4. What others can see

/profile and /leaderboard answer publicly in the channel, so others in the server can see XP, place, path and rank, and can look up your profile. Rank roles show on your Discord profile, and a server can announce rank-ups in a channel. Admins can delete anyone's XP.

5. What we don't do

• We don't sell personal data, share it for advertising or show ads.
• We don't store your messages or anime lists, including anything from MyAnimeList.
• We don't send unsolicited DMs.
• Rank roles follow from XP automatically, under the rules of each server. We make no other automated decisions about you, and no marketing profiles.
• We don't ask for special categories of data such as health or beliefs.

6. Who receives data

• Other members of a server, as described in section 4.
• Service providers working for us: Hetzner Online GmbH (the bot's server and database, Germany), GitHub Inc. (encrypted backups and code, USA), Vercel Inc. (this website, USA) and Cloudflare Inc. (domain name service, USA).
• Discord is an independent service with its own privacy policy, and everything the bot does happens through it.
• animei.me receives what is described under Profile cards. AniList receives the anime searches admins type and the anime followed, with no member data.
• Public authorities, only where the law requires it and only as much as it requires.

7. Transfers abroad

The bot's database is in Germany, and encrypted backups are kept in the USA. Transfers from Türkiye rely on article 9 of the KVKK: on the standard contracts announced by the Personal Data Protection Authority where they are in place, otherwise on the other grounds that article allows. Transfers of data of people in the EEA and UK rely on the European Commission's Standard Contractual Clauses in the providers' data processing terms. You can ask which safeguard applies to which provider and request a copy.

8. How long we keep it

• XP and path: until you delete them, or within about a day of you leaving the server. If an admin deletes your XP, it becomes zero and your path stays.
• Everything about a server: until the bot leaves it, at which point it is deleted at once, or when the bot next starts if it was down.
• Uploaded files: up to ten minutes in memory, unless installed.
• Backups: deleted data can stay in backups for up to 14 days, on the server and in encrypted form off it.
• Logs: until newer logs overwrite them.

9. Your choices

Your own /profile has a Delete my data button, which asks you to confirm. It deletes your XP and path in that server and takes away your rank roles, even ones given by hand. This also works when the server has turned Pathways off.

If you stay active in a server with XP on, you start earning from zero again, because XP is how the feature works. If you don't want that, ask the server's admins or write to us.

10. Your rights

Under article 11 of the KVKK you can ask whether your data is processed and for information about it, learn the purpose and whether it is used accordingly, know who it is transferred to in Türkiye or abroad, have it corrected, have it deleted under article 7, have those recipients told about this, object to a result against you that arises only from automated analysis, and claim compensation for damage from unlawful processing.

In the EEA or UK you also have the rights of access, rectification, erasure, restriction, data portability and objection, including to processing based on legitimate interest, and you can complain to your local data protection authority.

How to apply. Write to hello@animei.me with your Discord ID and the server concerned. We may ask you to confirm it comes from you, for example through Discord. Under the Communiqué on application procedures you can also apply in writing, by registered email (KEP), or with a secure electronic or mobile signature. We answer within 30 days, free of charge.

Complaints. If your application is refused, the answer seems insufficient or none comes in 30 days, you can complain to the Personal Data Protection Board under article 14 of the KVKK, within 30 days of learning the answer and in any case within 60 days of applying.

11. Security

We keep as little as we can. The bot's server accepts connections only through key-protected SSH, the bot runs with limited rights, and off-site backups are encrypted. If a breach affects your data, we'll notify the authorities as the law requires (in Türkiye, the Board within 72 hours) and tell those affected as soon as we can.

12. Children

The bot is for people old enough to use Discord under its terms, and at least 13. If you think it holds data about a younger child, write to us and we'll delete it.

13. Changes

If this notice changes, we'll update the date at the top, and announce important changes on this site before they take effect.