Privacy Policy - BotForge

1. Overview & Data Protection Controller

BotForge ("We", "Us") takes the protection of your personal data very seriously. This Privacy Policy informs you about how We process personal data when you visit our website, register an account, or deploy Discord bots on our platform in compliance with the General Data Protection Regulation (GDPR - EU 2016/679).

2. Information We Collect

We collect and process the following categories of data:

Account Information: Email address, username, and password hash (encrypted using bcrypt).
Bot Configuration Data: Bot names, runtime types, RAM/storage allocations, start commands, and cryptographic SHA-256 hashes of Discord bot tokens.
Server Logs & Analytics: IP address, browser user agent, access timestamps, API endpoint requests, and operational server logs for security auditing and debugging.

3. Discord Bot Token Security

We handle Discord bot authentication tokens with maximum security standards. Discord tokens uploaded to BotForge are stored using industry-standard AES cryptographic hashing algorithms to prevent unauthorized token extraction.

4. Purpose of Processing & Legal Basis

We process your data based on Article 6(1)(b) of the GDPR (Performance of Contract) to provide bot hosting services, authentication, and platform statistics. Security logs are processed under Article 6(1)(f) GDPR (Legitimate Interest) to prevent fraud and DDoS attacks.

5. Cookies & Local Storage

We use essential local storage keys (`jwt_token`, `userSession`) to maintain your authenticated login session and security preferences across page visits. We do not sell your personal data to third parties.

6. Your Rights Under GDPR

Under the GDPR, European Union residents have the following legal rights:

Right to Access (Art. 15 GDPR)
Right to Rectification (Art. 16 GDPR)
Right to Erasure / Right to be Forgotten (Art. 17 GDPR)
Right to Data Portability (Art. 20 GDPR)