Privacy policy

This describes exactly what Orpheus stores, why, and how to have it removed. It is short because the bot stores very little: enough to remember your settings, your queue and your playlists, and nothing else.

Who is responsible

7th Circle operates Orpheus and is the data controller for the information described here. We are established in Ireland. You can reach us at support@orpheusbot.app about anything on this page.

What is stored

• Server settings. Your server’s Discord ID, and the settings you choose: whether 24/7 is on, the default volume, which role is the DJ role, which sponsor segments to skip, and whether autoplay is on.
• What is playing. While music is playing, the voice and text channel IDs, the current track and its position. This exists so a restart does not lose your queue, and it is deleted when playback ends.
• Station memory. For servers using radio: the pool of candidate tracks, recently played tracks, and the likes and blocks the server has recorded.
• Playlists and liked tracks. Your Discord user ID, the names you gave your playlists, and the tracks in them. These belong to you rather than to a server, which is how they follow you between servers.

Discord IDs are numbers. They identify an account rather than a person, but because they can be linked back to one we treat them as personal data throughout.

What is not stored

• Message content. Orpheus does not request Discord’s message content intent and is not able to read your conversations.
• Voice audio. Nothing said in a voice channel is recorded or retained.
• Email addresses, real names, IP addresses or payment details.
• Anything at all about servers that have never used the bot.

Why we are allowed to store it

Our lawful basis is legitimate interests under Article 6(1)(f) of the GDPR: running a music bot that behaves the way a server has configured it, and keeping the playlists a person deliberately saved. The interest is narrow, the data is minimal, and none of it is used for anything other than making the feature you used work. Where you have chosen to save something — a playlist, a liked track — that choice is also the point at which you asked us to keep it.

We do not use this data for advertising, we do not profile you, we do not sell it, and there is no automated decision-making with legal or similarly significant effects.

Who else sees it

Nobody. The data sits on servers rented by 7th Circle in the European Union and is not shared with, sold to, or made available to third parties. There are no analytics or advertising trackers on this website.

To play audio, Orpheus requests it from the source you asked for — YouTube, SoundCloud and so on — which necessarily tells that source what is being requested, exactly as any music player does. Your Discord identity is never sent to them.

Where it is kept

Within the European Economic Area. If that ever changes we will say so here before it does, and any transfer would be made under the European Commission’s standard contractual clauses.

How long it is kept

• Playing state: deleted when playback stops.
• Server settings and station memory: kept while the bot is in your server. Removing the bot ends its access immediately; the rows are deleted on request, and otherwise cleared when a server has been inactive for twelve months.
• Playlists and liked tracks: kept until you delete them, or you ask us to.

Your rights

Under the GDPR you can ask us to give you a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, to hand it over in a portable form, and to object to us holding it at all. Where we rely on legitimate interests, you can object and we will stop unless we have a compelling reason not to — for a music bot, we will not.

Email support@orpheusbot.app from any address, telling us your Discord user ID or the server ID concerned. There is no form. We will answer within one month, and in practice much sooner. We do not charge for this.

You can delete most of it yourself and immediately: /playlist delete removes a playlist, and removing Orpheus from a server ends its access to that server at once.

Complaints

If you think we have handled your data badly, please tell us first — it is usually quicker. You also have the right to complain to a supervisory authority. Ours is the Data Protection Commission in Ireland (dataprotection.ie), and you may instead complain to the authority where you live.

Security

Access to the database is restricted to the accounts that run the service, traffic to it is encrypted, and backups are encrypted and kept on the same basis. No system is perfect; if a breach ever affects your data we will report it to the supervisory authority as required and tell you directly where the risk to you is high.

Children

Orpheus is not directed at children. Discord requires its users to be at least 13, and older in some countries, and the same applies here. If we learn we are holding data about someone below that age we will delete it.

Changes

If this document changes in a way that affects what is stored or why, the date at the top changes with it and the change is described here. There is no mailing list to be removed from.