Privacy Policy

Who operates Bread

Bread is an independently operated Discord bot and dashboard maintained by aleksh. For privacy requests, contact aleksh8 on Discord.

Data we process

• Discord OAuth data: user ID, username, display name, avatar, server list, server permissions, and OAuth tokens.
• Discord server, channel, role, and member identifiers needed for features and access control.
• Track, requester, queue, history, autoplay, and server music configuration data.
• Economy balances and cooldown timestamps associated with Discord user IDs.
• Uploaded audio files, original filenames, and technical metadata.
• Messages and attachments briefly fetched for live chat, plus Remote Control content sent to Discord.
• Direct messages sent to Bread, used only to return the automated help response.
• Request, error, and security logs that may include timestamps, routes, and IP addresses.

Website demo

The silent landing-page demo keeps its queue in the current browser tab and does not connect to your Discord account or server. When live search or lyrics are enabled, search terms and track metadata are sent through an isolated service to YouTube, SoundCloud or LRCLIB. Search results and artwork are cached in memory for up to five minutes; demo lyrics for up to one hour. Short-lived, hashed IP-based counters may be used for rate limiting. Closing the tab clears the demo queue. The demo does not stream audio or accept uploads.

Why we process it

We process data to authenticate users, enforce permissions, provide the requested bot and dashboard features, maintain security, diagnose failures, and prevent abuse. Processing is necessary to provide the service and for the legitimate interests of operating and securing Bread.

Storage and retention

• Dashboard sessions expire after 7 days and are removed on logout.
• Uploaded audio is deleted after approximately 24 hours without use.
• Detailed playback history is retained for up to 35 days, subject to per-server limits.
• Lyrics results are cached in memory for up to 6 hours.
• Live chat data is cached briefly in memory and is not stored as a permanent chat archive.
• Server settings, persistent queues, economy balances, and limited playback statistics remain until reset, deleted on request, or removed with the service data.
• Operational logs are kept only as long as reasonably needed for security and troubleshooting.

Third-party services

Bread communicates with Discord for authentication and bot functionality, LRCLIB for lyrics, Google Gemini for optional autoplay discovery and ranking, and configured providers such as YouTube, Spotify, SoundCloud, and Bandcamp for search and playback. For Gemini autoplay, Bread sends music metadata such as the title, artist and source context, not Discord IDs or usernames. These providers receive the requests and connection data needed to answer them and process data under their own privacy terms. Hosting and reverse-proxy providers may also process network and operational data.

Sharing and automated decisions

We do not sell personal data or use it for advertising. Data is shared only with providers needed to operate Bread, when an authorized server user invokes a feature, or when required by law. Gemini produces music suggestions and rankings only; it does not make decisions about users or access. Bread does not make decisions that produce legal or similarly significant effects.

Your choices and rights

You may log out to delete the current dashboard session and stop using the bot at any time. Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of your personal data, and object to processing based on legitimate interests. Contact aleksh8 on Discord with your user ID and the relevant server ID. You may also complain to your local data protection authority.

Security and changes

Bread uses permission checks, protected session cookies, OAuth state validation, request origin checks, and restricted local storage. No system is completely secure. This policy may change when features or data practices change; the date above identifies the current version.