Nefarious Options Levels Privacy Policy

Controller: Nefarious Digital (Nefarious). Email: Business@nefarious.trading.

The wider site and Discord community are described in the site Privacy Policy. This Policy is only about Nefarious Options Levels.

Operator configuration

• Discord bot token (secret) on the host or in an operator env file.
• Auto-post channel id 1467266457246105843 and a hard-coded guild / role allow-list in the process.

Vendor session cache

The process may write a third-party levels-API session cache to disk so it does not re-login on every request. That file is an operator credential store, not a Discord user database.

In-memory rate limits

The process maps your Discord user ID to request timestamps and ticker counts to limit abuse. Requests count toward a 60-second window, but inactive entries are not automatically removed. The map is discarded when the process restarts. Discord.js also maintains runtime caches of received messages and associated Discord objects; the reviewed application does not set a custom expiry.

What a command may contain

A command is ticker symbols (for example QQQ, SPY, ES1!). The bot does not archive the raw message body. Discord keeps the public reply in the channel under Discord’s retention and the server’s history.

• The bot does not support direct-message commands. It receives accessible guild messages, checks for nl / nli prefixes and takes no action on nonmatching text. This is processing in memory, even when a message does not invoke a command.
• Presence, voice state, or who is online.
• A member roster — Server Members intent is off. Role checks use the message author’s member object.
• Payment cards, government ids, or health data.
• Advertising cookies or cross-site tracking tied to this bot.

Privileged intents: Message Content: used; Server Members: not used; Presence: not used. Details: Terms, intents and Nefarious Options Levels intents.

• Fetch and post the requested levels payload (or the nightly EOD set).
• Enforce the role allow-list and per-user rate limits.
• Keep the vendor session alive and debug failed fetches.
• Respond to deletion or takedown requests.

We do not use command text to train machine-learning or AI models, and we do not sell it.

• Token and vendor session cache: for as long as the bot is operated, then removed from the host when the process is retired.
• Rate-limit map: retained in RAM until restart. The one-minute limit is a calculation window, not a deletion deadline.
• Runtime caches and logs: Discord.js may cache messages and related objects in memory. The application writes operational and error logs rather than a deliberate chat archive. It does not enforce a fixed log or backup deletion period; host retention settings must be verified.
• Discord copies: until a moderator deletes them or Discord expires the channel history. We do not control every client cache or screenshot.

We do not sell tokens, tickers, or command text, and we do not share them with data brokers or advertisers.

We disclose information only:

• To Discord, as needed to read a command and post a reply.
• To the options-levels provider as ticker and snapshot requests. The reviewed request path does not include your Discord identity or the full command message.
• To operators and hosting providers that run the process.
• If required by law, or to defend a legal claim, or to stop abuse of the bot.

• Discord. Discord Privacy Policy.
• MenthorQ options-levels API. The provider receives ticker and snapshot requests under the operator’s account, together with normal network metadata. Provider processing is separate from Discord message processing.

Email Business@nefarious.trading with:

• The personal information or bot reply you want accessed, corrected or deleted.
• The Discord server, channel, and a message link if you have one.
• Your Discord user id if a rate-limit or permission reply named you.

We review requests, verify identity only as needed, and remove personal information we control unless applicable law requires retention. Bot replies can be removed where we still have access. Runtime entries may require an operator action or restart; there is no self-service deletion command. We cannot delete other members’ copies or control Discord’s own retention. Do not send passwords or tokens.

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, object to processing or complain to a privacy authority. Contact us to exercise those rights. We will respond within applicable legal deadlines.

Avoiding commands stops new command requests, but does not prevent the bot from receiving accessible channel messages. Server administrators can restrict its View Channel permission or remove it. The current bot has no per-user exclusion setting.

You must meet Discord’s minimum age for your country and any additional age requirements of the Nefarious community. This service is not directed at children below those requirements. ContactBusiness@nefarious.trading if you believe a child’s information has been processed inappropriately.

We may update this Policy by posting a new version at this URL. The “Last updated” date will change. Material changes will also be reflected on the Nefarious Options Levels Terms.