1. General Information
SCAMELEON is a Discord security and moderation bot. This Privacy Policy explains how the bot and its website process data. We aim to process only information needed for security, moderation and operation. The operator and contact information are available in our Impressum.
2. Website Data Processing
When visiting this website, technical connection data such as IP addresses, request times and browser information may be processed by the web server or hosting provider to deliver and secure the website. The website also offers Discord authentication for its dashboard; when used, account identifiers and session data are processed to authenticate users and manage authorized server settings. No claim is made here about optional analytics or cookie services that have not been verified.
3. Discord Bot Data Processing
SCAMELEON processes Discord server IDs, server names and server configuration settings. For security checks and moderation it may process user IDs, member join events, display names, roles, audit-log events and moderation reasons. The bot uses this information to apply server settings, detect suspicious accounts and support role-based exceptions.
4. Message Scanning & Moderation Logs
Automatic scam detection and word filtering are optional features controlled by server administrators. When enabled, SCAMELEON temporarily buffers new message content in memory to check for scam indicators, suspicious links or configured words. Message content is not permanently stored on SCAMELEON servers or in its database. If a message is flagged, the bot may delete it and post a copy in the server’s configured Discord moderation log channel. That copy is stored within Discord and managed by the server administrators.
5. Central Scam Database & Reports
To provide protection across participating communities, SCAMELEON processes and stores reported Discord user IDs, related server IDs, ban reasons and report values. Reports are assessed according to the bot’s security rules. A sufficient combined report value can result in an account being added to the centrally maintained scam list. This protection works across participating servers, but the underlying database records, including reported user IDs, reporting server IDs and ban reasons, are not made available to other participating servers or their administrators. The bot may notify a server about a relevant security match or moderation action without exposing the underlying reports or their sources. Reports may be reviewed if a user appeals a listing.
6. Privileged Discord Intents
The Server Members Intent supports join-related security checks, member moderation and role-based exceptions. The Message Content Intent supports automated scam detection and configured word filters without requiring users to invoke commands. Message content is processed for these security checks, not for advertising or training AI models.
7. Data Retention
Server configuration data is removed when SCAMELEON is removed from a server, as described in the bot’s published functionality. Previously recorded scam-related user IDs and associated report information may remain to maintain the central protection list and allow appeals. Message content is held only for the duration of the detection process. Discord moderation log messages remain subject to the server’s and Discord’s retention practices. Other operational records are retained only as needed for their respective purposes; exact periods depend on the record and applicable obligations.
8. Third-Party Services & Data Sharing
SCAMELEON does not sell personal data or disclose its stored user IDs, server IDs, ban reasons or underlying scam reports to other participating servers or their administrators. These records are processed internally to provide cross-server protection. SCAMELEON does not disclose personal data for advertising, marketing or unrelated commercial purposes. Data is processed only as necessary to provide and secure the service. This includes communication with Discord for bot functionality, authentication and messages posted to Discord channels, as well as technical processing by hosting providers where required to operate the website and bot. When enabled by server administrators, moderation logs may contain copies of flagged messages within their designated Discord channels. Discord processes data under its own privacy terms. Any additional disclosures required by applicable law remain possible.
9. Legal Basis
Where the GDPR applies, processing required for security, fraud prevention, abuse detection and reliable operation may rely on legitimate interests under Article 6(1)(f) GDPR, subject to the necessary balancing assessment. Additional legal bases may apply to specific operations. Server operators are responsible for configuring moderation functions lawfully on their communities.
10. Your Rights & Appeals
Subject to applicable law, you may request access, correction or deletion of personal data, restriction of processing, or object to processing. You may also complain to a competent data protection supervisory authority. If you believe a scam-list entry is incorrect, you may request a review. Contact information for privacy requests and appeals is available in our Impressum.
11. Changes
This Privacy Policy may be updated when the service, data processing or applicable requirements change. The date above indicates the latest revision.