Privacy Policy

From Discord

• Your Discord user ID, username and avatar when you use a command or button.
• Messages you send to the bot in DMs (so the operator can read and answer them), and reports you send with /report.
• Server ID and channel IDs if a server sets the bot up with /setup.

From VRChat (only if you `/login`)

• Your VRChat user ID and username.
• A login session token, so you don't need to log in every time. Your password is used once to log in and is never stored. 2FA codes are never stored.

From using the bot

• Upload history (which avatars you uploaded, when, and with which account).
• Access requests and their approval status.
• Settings such as new-avatar notifications and update-DM opt-outs.
• Votes (/vote) and blacklist entries (/blacklist: VRChat user IDs and, optionally, display names).

Donations

Payments are handled entirely by Stripe and Buy Me a Coffee. We never see your card details. We may see the donor name, amount and message you choose to share, and may post a public thank-you showing that name and amount.

• To run the service: log you in, upload avatars to your account, run the queue and show your history.
• To manage access, prevent abuse and answer support requests.
• To send messages you opted into (new-avatar notifications, update announcements - you can turn these off with the button in any of those DMs).

We don't sell your data, use it for advertising, or share it with anyone except as needed to run the service (Discord, VRChat, and the payment providers above).

Data is stored on the operator's computer and backup server in the EU. Access is limited to the operator and a small team of approvers, who can only see access requests and their decisions.

• VRChat sessions: until you remove them. Note that /logout keeps the login so you can switch back without a password - use /accounts → Forget to delete it for good.
• Upload history, access records and DMs: as long as the service runs, or until you ask for deletion.
• Blacklist entries: until the account holder or operator removes them.

You can ask to see, correct or delete your data, or object to how it's used. Message 4jhm on Discord or use /report. We'll answer within 30 days. If you're in the EU, you can also complain to your local data protection authority (in Slovakia: the Office for Personal Data Protection).

The service is not meant for anyone under the minimum age required by Discord and VRChat in their country.

This policy may change. The "Last updated" date shows the latest version.

Discord: 4jhm · or /report in the bot.