Privacy Policy

Effective 3 July 2026

The short version: Honeybot cannot read your messages — it doesn't have Discord's Message Content permission at all. It stores only numeric Discord IDs, its own settings, and timestamps of trap catches. Nothing is sold, shared, or used for anything except running the bot.

Who we are

Honeybot ("we", "us") is a Discord moderation bot that catches channel-spamming bots using decoy channels. It is operated as a hosted service. You can reach the operator at [email protected].

What we collect — and what we can't

Honeybot runs on Discord's non-privileged GUILDS and GUILD_MESSAGES gateway intents only. It does not request the Message Content intent, so Discord withholds the text of members' messages from it — in trap channels and everywhere else. (Discord itself makes one exception: a message that directly @mentions the bot arrives with its text included. Honeybot never reads, logs, caches, or stores that text — its code only ever looks at who posted and where.) It receives no direct messages at all.

To do its job, it stores:

Server configuration — your server (guild) ID, the IDs of the trap channels it creates, your chosen log channel ID, exempt role IDs, dry-run mode, and channel-name rotation state.
The server owner's user ID — so the owner is never banned, even right after a restart.
Catch records — when the trap is sprung: the user ID of the account that posted, the server ID, the channel, and a timestamp. This powers /honeybot stats and the notices posted to your log channel. A catch record says that an account posted in a trap channel — never what it posted.
Short-lived dedupe entries — so a burst of spam from one account is handled exactly once.

That's the full list. No email addresses, no IP addresses, no profile data, no analytics or tracking of any kind.

This website

This site is a static page. It sets no cookies, runs no analytics, and collects nothing. It is served by Cloudflare, whose infrastructure may process standard request logs (such as IP addresses) to deliver the page — see Cloudflare's privacy policy.

How we use the data

Solely to operate the honeypot: detecting posts in trap channels, deciding who is exempt, softbanning caught accounts, posting catch notices to your log channel, and showing your server's own stats. We do not sell data, share it with third parties, or use it for advertising or profiling. Data lives in a private database on the infrastructure the bot runs on and is not accessible to other servers or users.

How long we keep it

Server configuration is kept while Honeybot is set up in your server.
Catch records are kept so long-term stats work. If you run /honeybot disable or remove the bot, no new data is collected for your server.
Dedupe entries are transient and expire on their own.

To have your server's stored data (or a specific user ID's records) deleted, email [email protected] from an account that can demonstrate it administers the server in question. We'll action requests within 30 days.

Your rights

Depending on where you live, you may have rights to access, correct, or erase personal data (a Discord user ID can count as personal data). Contact us at the address above and we'll help. You can also manage everything Discord itself holds via Discord's own privacy policy — Honeybot is an independent service and is not affiliated with Discord Inc.

Children

Honeybot is used inside Discord, which requires users to meet Discord's minimum age (13, or higher where local law says so). We do not knowingly collect data from anyone below that age.

Changes

If this policy changes materially, we'll update this page and the effective date above. Continued use of the bot after a change means you accept the updated policy.