Privacy Policy

Effective October 18, 2026

This policy explains what data Llamacord (“we”, “us”) collects when you use the Llamacord Discord bot or the llamacord.com website, how we use and store it, how long we keep it, and how to ask us to delete it. We don’t sell your data, and we don’t use it for advertising. Use of Llamacord is also governed by our Terms of Service.

1. Data the bot processes

Llamacord only operates inside Discord servers it has been added to. It does not read or respond to direct messages. When someone mentions or replies to the bot, it processes:

  • The message that triggered it, along with your Discord user ID, username, and display name.
  • Nearby context: up to the last few messages in the channel (including other people’s messages and display names) and any message being replied to, so the bot can follow the conversation.
  • Linked web pages: if a message contains links, the bot may fetch the text of those pages.
  • Tool results: some features look things up on request, such as a web search or a search of a user’s recent messages in that server.
  • Server and channel IDs, and the settings admins configure (personas, model choice, blocked channels, per-user limits). Admin changes to personas are recorded in an audit log with the admin’s user ID.
  • Game data: if a server uses the storytelling/campaign features, we store characters, actions players write, and summaries of play, linked to the player’s Discord user ID.

The bot does not process images or file attachments.

2. Data the website collects

When you sign in to llamacord.com with Discord, we request the identify, email, and guilds scopes. We store:

  • Your Discord user ID, username, avatar, and email address.
  • The OAuth tokens Discord issues, so we can show the servers you manage. Your server list is fetched live and not stored.
  • For servers you link: the server ID, name, icon, and its subscription status.
  • A session record and session cookie that keeps you signed in.

We use Vercel Web Analytics and Speed Insights to measure page visits and performance. These collect aggregated, anonymized usage data and do not use tracking cookies.

3. How we use data

  • To generate the bot’s responses and run its features.
  • To apply server settings, rate limits, usage limits, and subscription status.
  • To monitor reliability, debug problems, measure usage and cost, and improve response quality and model routing.
  • To prevent abuse of the bot and the website.
  • To let you sign in and manage your servers on the website.

We do not use your messages to train AI models.

4. Third parties we share data with

We share only what’s needed to provide the service:

  • AI model providers: to generate replies, the conversation context described above is sent to a cloud language model provider (currently Groq, and occasionally other OpenAI-compatible providers). Some requests are handled by models we run on our own servers instead.
  • Search engines: web search queries go through our self-hosted search service, which forwards the query text (not your identity) to public search engines.
  • Websites you link: when the bot reads a link, that site sees a request from our server, not from you.
  • Discord, which provides the platform, sign-in, and server data.
  • Vercel, which hosts the website and its database.

We don’t sell data. We may disclose data if required by law.

5. How data is stored

Bot analytics, logs, and game data are stored in databases and files on servers we operate. Website data is stored in a managed Postgres database hosted by Vercel. Access is restricted to the Llamacord operators. No system is perfectly secure, but we take reasonable measures to protect your data.

6. Data retention

We keep data only as long as we need it:

DataKept for
Recent conversation context (in memory)Cleared after 5 minutes of channel inactivity, or on restart
Prompts, bot replies, tool results, and usage analytics90 days, then deleted
Server operational logs90 days, then deleted
Server settings, personas, model preferences, user limitsUntil an admin resets them or the bot is removed and deletion is requested
Game/campaign records (if enabled)For the life of the campaign, or until deletion is requested
Website account (Discord profile, email, OAuth tokens)Until you ask us to delete your account
Login sessionsUp to 30 days
Linked servers and subscription statusUntil you unlink the server from your dashboard

When you delete a message the bot replied to, the bot deletes its reply in Discord. Copies already recorded in our analytics are still deleted on the 90-day schedule, or sooner if you ask us.

7. Your choices and rights

  • Server admins can reset personas, model preferences, and user limits, block channels, and remove the bot at any time.
  • Website users can unlink a server from the dashboard, which deletes its record and subscription status.
  • Anyone can ask us to access or delete data tied to their Discord user ID or server, or to delete their website account. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA, and we’ll honor them.

To make a request, contact us in the Llamacord Discord server. We may need to confirm the request comes from the account owner.

8. Children

Llamacord is not directed at children under 13, and you must meet Discord’s minimum age requirements to use it. If you believe a child has provided us data, contact us and we’ll delete it.

9. Changes to this policy

We may update this policy as Llamacord changes. We’ll update the effective date above, and announce significant changes in our Discord server.

10. Contact

Questions about this policy? Reach us in the Llamacord Discord server.