Privacy Policy

Effective 31 August 2026

Sandrone is a personal, hobby Discord bot. It has no database, no analytics, and no user accounts. It writes two kinds of file to its host, neither of them about you, and this policy explains the little that does happen.

What Sandrone stores about you

Nothing. There is no database, no log of who ran what, and no profile kept on any user. The bot writes cog_state.json, which records which command modules the owner has switched off, and it writes the temporary media files described below. Neither contains user data of any kind: nothing links a stored file to the person who requested it.

Hosted downloads (/yt-dlp)

/yt-dlp fetches a YouTube link as a file. When the result is small enough it is attached to the reply and nothing is kept. When it is too big to attach, the file is saved on the bot's host and the reply links to it instead.

• What is stored is the media file itself, the YouTube video or audio. It is not tagged with your name, your user ID, the server, or the time, and there is no index of who asked for what.
• Each file lives in its own directory with a random, unguessable name. Anyone who has the link can download it while it exists; it is not otherwise listed or searchable.
• A sweep deletes each file once it is older than the retention window, 24 hours by default. Asking for the same video again while its copy still exists hands back the same link and restarts that 24-hour timer, so a file in active use is not swept out from under it; fetching the link directly does the same.
• The bot refuses to keep any single file larger than a configured cap (2 GiB by default), so one large pull cannot fill the host's disk.

If you would rather a download not sit on the host at all, keep it under your server's attachment limit, or do not use the command.

What Discord sends when you run a command

When you use a slash command, Discord delivers your user ID, your username, and whatever text you typed into the command's options. Sandrone uses these in memory to build its reply and then discards them. They are not written down, not retained after the reply is sent, and not shared with anyone beyond the third parties listed below. The one thing that can outlast the reply is a hosted /yt-dlp file, covered above, and that is the media only, never your ID or the text you typed.

Third-party services

Some commands work by asking another service on your behalf. When you use one, the search term you typed is sent to that service, which has its own privacy policy and its own logs. Sandrone has no control over what they keep.

• GitHub, which receives the username or repository you name in /github and /repo.
• Codeberg, which receives the username you name in /codeberg.
• Wikipedia, which receives your search term from /wikipedia.
• Urban Dictionary, which receives your search term from /urban-dictionary.
• PluralKit, which is linked by /snippet's plurality explainer, and which /pksystem and /pkfront query directly. Those two send the Discord ID of whoever they're run on (you, or the user you name) to PluralKit's API, to look up that account's registered system.
• Pluralpedia, which is linked by /snippet's plurality explainer.
• girlcockx.com, which receives the post URL you give /tweet, to build the embed.
• cataas, which serves the animal commands a random image, and receives nothing about you.
• m.doughmination.gay, the CDN that serves images and GIFs, which your Discord client fetches the way it fetches any embedded image.

One thing worth being explicit about: /stats calls ip-api.com to report where the bot's own server is hosted. It never sends your IP address, and it cannot, because the bot does not have it.

Logs

When a command fails, the bot prints the command's name and the error text to its own console on the host machine. That output can include a search term you passed if the term is what caused the error. It is not stored long-term, not published, and not linked to your account. Nothing else is logged.

Age-restricted commands

A small number of commands are marked age-restricted. Discord itself decides who may run them and where, based on your account age setting and the channel's rating. Sandrone does not record who used them.

Your rights

Because nothing about you is stored, there is nothing to export, correct, or delete, so a deletion request would have no data to act on. If you would like to check that for yourself, the entire bot is open source and linked at the bottom of this page.

Your data on Discord itself is a separate matter, governed by Discord's Privacy Policy.

Changes

If this policy changes, the effective date above changes with it, and the edit will be visible in the site's commit history.

Contact

Questions go to the support Discord server, or as an issue on the bot's repository.