Legal

Privacy Policy

Last updated 3 November 2026

This policy explains what Shieldbug (the Discord bot and this dashboard) collects, why, and what you can do about it. We collect as little as we can to make the service work.

What we collect when you log in

You log in with Discord. We ask Discord only for the identify and guilds permissions, which give us:

• your Discord user ID, username and avatar;
• the list of servers you are in, so we can show the ones you can manage;
• a Discord access token, which we encrypt before saving.

We never see your Discord password, email address or messages.

What we store about servers

• the server ID and Shieldbug settings, such as the log channel;
• if you connect ER:LC: the server API key encrypted with AES-256-GCM, its last 4 characters, the ER:LC server name, when it was connected and the Discord ID of who connected it.

What the bot logs

Logs are off by default. When a server’s staff turn a log on in the dashboard, the bot records those events on that server and posts them to the server’s log channel:

• members joining and leaving, with account age and the invite they used;
• edited and deleted messages, including their text and attachment names. The bot reads message content only for this;
• role, channel, nickname and username changes;
• bans, kicks and timeouts, with the moderator and reason from the server’s audit log;
• invites created and deleted.

Each log is saved with the user’s ID and name so staff can search it in the dashboard. Only people who can manage that server can see its logs. Messages from other bots are not logged.

Why we use it

• to log you in and keep you logged in;
• to check that you have the Manage Server permission before you change settings;
• to run the features you turn on, such as posting logs or reading your ER:LC server.

We do not sell your data, show ads or use analytics or tracking.

Who else is involved

• Discord, for logging in and running the bot.
• Police Roleplay Community (ER:LC API), which receives your server key when Shieldbug checks it and reads your server.
• Google Fonts, which serves the fonts on this site. Your browser requests them from Google, so Google sees your IP address.
• Our hosting provider, which stores the database and runs the site and bot.

How long we keep it

• Login sessions last 7 days and are deleted when you log out or when they expire.
• The cached list of your servers is refreshed every few minutes while you use the dashboard.
• Server settings and ER:LC keys are kept until you disconnect them or ask us to delete them.
• Server logs are kept until the server asks us to delete them.

Your choices

• Disconnect an ER:LC key at any time in the dashboard. It is deleted straight away.
• Log out to delete your session.
• Remove the bot from your server and contact us to delete all of that server’s data.
• Ask us what we hold about you, or to delete it, through our support server.

Age

Shieldbug follows Discord’s rules: you must be old enough to use Discord in your country.

Changes

If we change this policy, we will update the date at the top. Big changes will be announced on our support server.