# Privacy Policy

**Effective Date:** March 11, 2026

This Privacy Policy describes how Reactor collects, uses, and stores information when used within a Valour server.

---

## 1. Information Collected

Reactor collects only the minimum data required to function.

### Information Stored (Persisted to Disk)

- Planet IDs
- Channel IDs
- Message IDs of reaction role messages
- Emoji-to-role mappings
- Confirmation message delete delay settings

### Information Not Stored

- Message content (beyond the initial reaction message text provided by the administrator)
- User IDs (beyond what is transiently used to assign or remove roles during a reaction event)
- Direct Messages (DMs)
- User credentials
- Email addresses
- Passwords
- IP addresses
- Analytics or tracking data

---

## 2. Purpose of Data Collection

Stored information is used exclusively to:

1. Track which messages are configured as reaction role messages
2. Map emoji reactions to planet roles
3. Assign or remove roles from members when they react or unreact to a tracked message
4. Automatically clean up stale data when messages are deleted

Data is not used for marketing, advertising, profiling, or analytics.

---

## 3. Data Storage and Security

All data is stored in a local SQLite database file (`reactor.db`) on the hosting server.

The operator of the self-hosted instance is responsible for securing the hosting environment and the database file.

Stale or deleted reaction messages are automatically removed from the database on bot startup.

---

## 4. Third-Party Processing

Reactor does not transmit any data to external services beyond the Valour.gg API, which is required for core bot functionality such as assigning roles and sending messages.

Reactor does not use any external AI providers, analytics services, or cloud storage.

---

## 5. Data Retention

Reaction role message data is retained in the SQLite database until:

- The reaction message is deleted from Valour (automatic cleanup on bot startup)
- An administrator runs the `r.delete` command
- The database file is manually deleted by the host operator

---

## 6. Self-Hosted Responsibility

Reactor is designed for self-hosting.

The hosting operator is responsible for:

- Server security
- Network configuration
- Bot token protection
- Database file security
- Compliance with applicable laws

---

## 7. Changes to This Policy

If data collection practices change in future versions, this Privacy Policy will be updated prior to implementation.

Continued use of the Bot after updates constitutes acceptance of the revised policy.

---

## 8. Contact Information

For privacy-related inquiries:

Email: contact@skyjoshua.xyz