Catching Bot

Privacy Policy

Last updated: 2026-06-16

This policy covers both Catching Bot (the Discord application, in its Cats and Bunnies variants) and the web Shop. They run as a single service with shared accounts.

What we store

  • Your Discord user ID and the IDs of servers and channels you use the Bot in.
  • Per-variant gameplay state: catches, packs, inventory, prisms, battlepass progress, quest progress, achievements.
  • Custom design submissions: the image, name, and description you upload, until you remove it.
  • Purchases: Stripe checkout session IDs, SKUs, amounts, currency, and timestamps. Card data is held by Stripe, not us.
  • Prepaid credit: your current balance and a ledger of credit added or consumed (gift card redemptions, checkout consumes, refunds).
  • Gift cards: the minted code, amount, optional expiry, redemption status, and the Discord IDs of the admin who minted it and the user who redeemed it.
  • Web sessions: a random session ID stored server-side and a signed cookie in your browser, with your Discord username and avatar hash cached for display.

What we don't store

  • We do not log Discord message content beyond message counts used for spawn pacing and achievement triggers.
  • We do not store email addresses, phone numbers, or payment instruments.
  • We do not sell, share, or feed any data to third parties beyond what Stripe and Discord need to deliver the service.

How we use it

Data is used only to operate the Bot and the Shop: tracking your catches, fulfilling purchases, applying prepaid credit at checkout, delivering subscription perks, displaying leaderboards, and (for admins) moderating custom content and managing gift cards. We may use aggregated, non-identifying metrics to improve the service.

Cookies

We set only functional cookies, no third-party tracking and no analytics cookies:

  • oauth_state — a short-lived CSRF token during login.
  • oauth_return — a short-lived cookie that remembers which page to send you back to after login.
  • sid — a signed, httpOnly session cookie set after login.
  • gc_res — a random token that briefly reserves a gift-card code for your browser (about two minutes) so it can't be claimed out from under you while you sign in.

Your rights

You can delete your data at any time:

  • Click "Delete" next to any custom upload on your account page.
  • Email [email protected] to request full deletion across both variants and the Shop.

We will respond within 30 days. Some records (paid orders, gift card ledger entries) may be retained as long as required by tax and accounting law.

Subprocessors

  • Discord: the platform the Bot runs on (see Discord's Privacy Policy).
  • Stripe: payment processing and subscription billing (see Stripe's Privacy Policy).

Contact

Questions or requests: [email protected].