Legal & Compliance

Privacy Policy

Last Updated & Effective Date: September 5, 2026

1. Overview & Data Controller

This Privacy Policy explains how Guess The User ("we", "our", or "the Game"), accessible at guesstheuser.com, collects, processes, and protects your information when you use our web application, interactive party modes, or our companion Discord Application / Bot.

2. Data We Collect & Process

Depending on how you use the game, we process the following categories of data:

• Manual File Imports (Local JSON Mode): When you drag-and-drop a Discord chat JSON export (or Discord account data package) into the browser, all file parsing occurs 100% locally on your own computer. These messages never travel over the network to our servers. They are cached solely in your browser's private IndexedDB storage.
• Companion Bot & Web Link Mode: When our verified Discord companion bot is invited to a server and a session link is generated via /play or /link, the bot fetches recent conversation snippets from public text channels to build game challenge rounds. This includes:
  • Public chat message content and timestamp
  • Author Discord user ID, username, server nickname, and avatar URL
  • Channel ID and Channel Name (sensitive channels like #admin, #staff, #moderator, or NSFW channels are strictly excluded)
• Gameplay Statistics: In-browser high scores, streaks, and guess history are stored locally in your browser's localStorage. Server-level aggregate stats (e.g., total guesses played) contain no personal message content.

3. Zero Plaintext Disk Storage & Encryption at Rest

In accordance with Discord Developer Policy Section 5.c.i (Encryption at Rest and Data Protection):

• Zero Plaintext Storage: We do not store unencrypted message logs on hard drives, SSDs, or persistent relational databases.
• Ephemeral In-Memory TTL: Discord chat messages processed via the companion bot are held exclusively in volatile server memory (RAM) with a rolling 2-hour Time-To-Live (TTL). Once this rolling window expires, the data is automatically deallocated and erased by the garbage collector.
• Encryption in Transit: All data transmitted between Discord, our companion bot server, and the web client is protected using modern industry-standard TLS 1.3 / HTTPS encryption.
• Strict Multi-Tenant Isolation: Chat quotes from one Discord server are cryptographically isolated by Guild ID and can never be accessed, seen, or queried by other servers.

4. Real-Time Message Deletions & User Opt-Out Rights

In full compliance with Discord Developer Policy Section 5.b, GDPR (General Data Protection Regulation), and CCPA (California Consumer Privacy Act):

• Real-Time Gateway Deletions: Our Discord bot listens to live messageDelete and messageDeleteBulk gateway events. When a message is deleted on Discord, it is immediately purged from active memory caches and active multiplayer game rounds.
• Self-Service User Erasure (/forget-me): Any user can run /forget-me inside their Discord server. This immediately and permanently purges all quotes and messages authored by that user from the active in-memory cache and game quote pool.
• Administrator Cache Flush (/clearcache): Server administrators (with Manage Server or Administrator permissions) can run /clearcache at any time to immediately flush all cached quotes for their guild.
• Client-Side Erasure: In the web game, you can click "Delete Server" or clear site data to permanently delete all IndexedDB data stored in your browser.

5. Endpoint Authorization & Anti-Harvesting

To prevent unauthorized third-party harvesting or message scraping, our dataset API endpoint strictly requires a valid, active 6-character link code (e.g. CAB-482) generated inside the Discord guild via /play or /link. Public, unauthenticated requests to retrieve server datasets are rejected with HTTP 401 Unauthorized.

6. Advertising & Cookies

We display third-party advertisements served by Google AdSense to support server hosting costs:

• Google and third-party vendors use cookies to serve ads based on prior visits to this website or other websites.
• You may opt out of personalized advertising by visiting Google Ad Settings or aboutads.info.
• Supporters who unlock Ad-Free mode have all advertising scripts and cookies disabled.

7. Children's Privacy (COPPA)

Guess The User does not knowingly collect or solicit personal information from anyone under the age of 13. If you are under 13, please do not attempt to register or use our services, in accordance with Discord's Terms of Service.

8. DMCA, Inquiries & Contact

If you have any questions regarding this Privacy Policy, wish to report a privacy concern, or wish to submit a DMCA takedown or data erasure request, please contact us via our official repository:

• GitHub Issues: github.com/kevnevv/GuessTheUser/issues