Privacy Policy

Data Muse stores

• Server settings. Server ID, language, personality, announcement channel and the date the welcome message was sent.
• User preference. User ID and, if you set it, your preferred language.
• Crates. User ID and the tracks you saved: source, track ID, title, artist, links and date.
• Community curations and votes. Server ID, user ID, rating, review text, the track and date; and the user IDs that voted.
• Server counters. Aggregate counts of mood searches per server, with no user identity.
• Track metadata cache. Public track data from Spotify, kept for 7 days.

Data processed but not stored

• The text you type in /search, and the characters typed while autocomplete is open, are sent to Spotify to find tracks; search suggestions are cached for 30 seconds.

Data Muse does not collect

• The content of messages, direct messages, voice or attachments (Muse has no message intent).
• Spotify account data or listening history.

Why we use it

Only to provide the features described in the documentation: running commands, applying the moderation and curation settings a server chose, and keeping the service reliable. We do not sell data, we do not build advertising profiles and we do not use it to train models.

How long we keep it

Your data is kept until you remove it (a crate entry with its button) or you ask us to delete it. Track metadata expires after 7 days. Data is not removed automatically when the bot leaves a server, so that a temporary removal does not lose its configuration.

Who else receives data

• Discord. The platform the bot runs on. Discord receives what the bot posts and its own privacy policy governs your account data.
• Black Pillar. Our own observability service. It receives the name and duration of commands and error reports (error message, command, server ID); it never receives message content.
• Spotify. Search and track lookup through Spotify's Web API with application credentials. It receives the search text; its own policy applies to what it does with it.

Your control and your rights

You can ask us what we hold about you, to correct it or to delete it, by contacting us through the channels below. Server administrators decide how a server configures the bot, including who may use its commands.

You can remove saved tracks from your crate yourself. To delete your user data or a server's data, contact us.

Age

The bot is for people who meet Discord's minimum age. It is not directed at children and we do not knowingly process their data beyond what Discord itself provides.

Security

Data lives in a database on infrastructure we operate, reachable only by the bot and its maintainers; credentials are never stored in the code. No system is perfectly secure, and we will tell affected servers if a breach puts their data at risk.

Changes to this policy

When this policy changes we update the date at the top of the page. Significant changes are announced in the community Discord.

Contact

Questions, reports or data requests: join the community Discord or open an issue on GitHub.