Skip to main content
Last updated: September 19, 2026. This policy explains how Firsty handles data when you use it on Discord.

​
In short

Only what's needed

We collect the minimum data required to make the Bot’s features work.

Never sold

We do not sell, rent, or trade your data to anyone.

Deleted on request

You can ask us to delete your data at any time.

​
Who we are

Firsty (“the Bot”) is a Discord bot developed and operated by colddev (“we”, “us”, “our”). We are the data controller for the data the Bot processes, as described in this policy. This policy applies together with our Terms of Service.

​
What data we collect

The Bot only sees what Discord makes available to it on the servers where it has been added, and only collects what its features actually need. Depending on the features a server uses, this may include:
Message content is processed only when it is required for a feature and is not kept longer than that feature needs. We do not read or store private conversations beyond what is required to reply to a command you sent.

​
What we don’t collect

We do not collect your email address, phone number, password, IP address, or any payment information. The Bot cannot access this information through Discord.

​
How we use your data

We use the data described above only to:
  • Provide, run, and personalize the Bot’s features on your server.
  • Save the configuration chosen by server administrators.
  • Prevent spam, abuse, and violations of our Terms of Service.
  • Diagnose errors and improve the Bot’s stability and performance.
  • Comply with our legal obligations and with Discord’s Developer Policy.
We do not use your data for advertising, and we do not build profiles of users. If you are in the European Economic Area, we process your data on the following legal bases under the GDPR:
  • Performance of a contract, to provide the Bot’s features you or your server administrators request.
  • Legitimate interests, to keep the Bot secure, prevent abuse, and fix errors.
  • Legal obligation, where we are required to process or keep data by law.

​
Sharing your data

We never sell your data. We share it only in these limited cases:
  • Discord, since the Bot runs on its platform. Discord’s handling of your data is governed by the Discord Privacy Policy.
  • Infrastructure providers that host and run the Bot on our behalf, only to the extent necessary and under appropriate confidentiality and data protection obligations.
  • Authorities, when we are legally required to do so or when it is necessary to protect the rights, safety, or property of our users or others.

​
Storage and security

Data is stored on secured servers operated by our hosting providers. We use reasonable technical and organizational measures to protect it, including access restrictions and encrypted connections. No system is completely secure, but we work to protect your data and to respond quickly to any incident. If data is transferred outside the European Economic Area, we make sure appropriate safeguards are in place, as required by the GDPR.

​
Data retention

We keep data only as long as it is needed:
When the Bot is removed from a server, that server’s configuration and related data are deleted within 30 days.
Data linked to your user ID is kept while it is needed for the features you use, and is deleted when it is no longer needed or when you ask us to delete it.
Technical and error logs are automatically deleted after a maximum of 30 days.
If a user or server is blacklisted, we keep the minimum information needed (such as the ID and the reason) for as long as the restriction applies, to prevent the abuse from continuing.

​
Your rights

Depending on where you live, and in particular under the GDPR, you have the right to:
  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your data (“right to be forgotten”).
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Lodge a complaint with a data protection authority. In Romania, this is the ANSPDCP.

​
How to request deletion or access

1

Contact us

Send a request in our support server or by email at [email protected].
2

Verify your identity

We may ask you to confirm that the Discord account belongs to you, for example by messaging us from that account.
3

We process your request

We will respond within 30 days at the latest.
Server owners can delete all of their server’s data by simply removing the Bot from the server. The data is then deleted automatically, as described in Data retention.

​
Children

The Bot is not intended for anyone under the minimum age required to use Discord in their country. We do not knowingly collect data from children below that age. If you believe this has happened, contact us and we will delete the data.

​
Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the Last updated date at the top of this page and, for significant changes, may also announce them in our support server.

​
Contact

Questions about your privacy? Reach out to us:

Support server

The fastest way to get help.

Email

[email protected]