Privacy Policy

1. Overview

This Privacy Policy explains what data ExcelProtocol collects, how it is used, and your rights regarding that data. We are committed to being transparent and only collecting what is necessary to operate the service.

ExcelProtocol is hosted on Fly.io (Frankfurt, EU region). Data is stored in a SQLite database on persistent Fly.io storage volumes.

2. What Data We Collect

Discord Data — When you add ExcelProtocol to a Discord server, we collect and store:

• Discord Server (Guild) ID — to associate settings with your server
• Discord Channel IDs — to know which channels to send notifications to
• Discord Role IDs — for reaction roles and ping role features
• Discord User IDs — for birthday tracking and command usage
• Discord Message IDs — to track sent notification messages for auto-deletion

We do not store Discord message content, usernames, profile pictures, or any personal user data beyond what is listed above.

Twitch Data — To provide stream notifications, we store:

• Twitch usernames (login names) of streamers added to a server
• Twitch user IDs — used internally to register EventSub webhooks with Twitch
• Broadcaster OAuth tokens — only if you connect your Twitch account for Channel Rewards; stored and used solely to manage channel point rewards on your behalf

Stream data (titles, categories, thumbnails, viewer counts) is fetched from Twitch's API in real time and is not permanently stored.

Dashboard Authentication — When you log in via Discord OAuth2, we receive a temporary access token to verify your identity and server permissions. This is stored as a short-lived session cookie and not persisted in our database.

Notification Logs — We maintain a log of when stream notifications were sent (streamer name, guild ID, timestamp, status). This is used for debugging and is automatically trimmed to the most recent 30 days.

Tips and Donations — ExcelProtocol does not directly process payments. If you tip via the /tip command, you are redirected to a third-party platform. We do not receive or store your payment information.

3. How We Use Your Data

Data collected by ExcelProtocol is used exclusively to:

• Deliver stream notifications to the correct Discord channels
• Manage reaction roles and server configuration
• Display server statistics in stat channels
• Process Twitch channel point reward triggers for connected streamers
• Track and send birthday notifications where enabled
• Debug delivery failures and monitor service health

We do not sell, rent, or share your data with third parties for commercial purposes.

4. Data Sharing

We share data with the following third parties only as required to operate the service:

• Discord Inc. — to send messages, manage roles, and authenticate users
• Twitch Interactive, Inc. — to register EventSub webhooks and fetch stream data
• Fly.io — our hosting provider, which stores the database on its infrastructure

We do not share your data with advertisers, analytics platforms, or any other third parties.

5. Data Retention

• Server settings, streamer lists, and role configurations are retained until you remove the bot or request deletion
• Notification message IDs are removed automatically when streamers go offline
• Notification logs are trimmed automatically after 30 days
• Broadcaster OAuth tokens are retained until you disconnect your Twitch account or remove the bot

When you remove ExcelProtocol from your Discord server, all data associated with that server is automatically deleted from our database.

6. Your Rights

You have the right to:

• Request a copy of the data we hold about your server
• Request deletion — remove the bot to trigger automatic deletion, or contact us directly
• Correct inaccurate data — use the dashboard or slash commands at any time

To exercise any of these rights, contact us via Discord: stayexcellent

7. Security

We take reasonable technical measures to protect your data, including:

• HTTPS-only access to the dashboard and webhook endpoints
• HMAC-SHA256 signature verification on all incoming Twitch EventSub webhook requests
• Session-based authentication with short-lived tokens for the dashboard

No system is completely secure. We are not liable for unauthorised access resulting from factors outside our control.

8. Children's Privacy

ExcelProtocol is not intended for use by anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has used ExcelProtocol, please contact us and we will delete the relevant data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of ExcelProtocol after changes constitutes acceptance of the revised policy.

10. Contact

For any privacy-related questions or data requests, contact us via Discord: stayexcellent