Legal · Discord bot

Nefarious Widget Privacy Policy

Effective September 12, 2026 · Last updated September 12, 2026

This Policy explains what Nefarious Digital doing business as Nefarious stores when we run Nefarious Widget (Nefarious Discord Voice Widget). It is written from widget_server.py, not from a generic “we store nothing” template. The public application id is not in that source.

Voice-chat counter for streams. A small Discord bot sits in one configured voice channel, counts how many members are connected right now, and exposes that number as JSON so an HTML overlay can show “in voice right now” on a stream or site. It does not read chat, welcome members, or list who is online.

Discord Inc. operates Discord. Their privacy policy applies to that platform. This page covers what we keep on the widget host.

Questions or deletion requests: Business@nefarious.trading.

01Who we are

Controller: Nefarious Digital (Nefarious). Email: Business@nefarious.trading.

The wider site and Discord community are described in the site Privacy Policy. This Policy is only about the voice widget.

02What is stored

Always (operator configuration)

  • Discord bot token (secret) on the host.
  • One voice channel id (default 1492973945190748411) and an HTTP port.

In-memory snapshot (not written to disk by the bot)

After login and on each voice-state change, the process overwrites a RAM object served at GET /api/voice-count:

  • ready
  • count — integer occupant count, not user ids
  • channelId
  • channelName — Discord channel or guild name, not member names
  • guildName — Discord channel or guild name, not member names
  • updatedAt
  • error

len(channel.members) is computed and discarded except for that integer. The code does not append occupant user ids or usernames to a file.

03What we do not collect

  • Discord message content, commands, or DMs — there is no message reader.
  • A stored list of who is in voice (user ids, usernames, avatars).
  • Server member lists or role graphs (Server Members intent is off).
  • Presence or streaming status (Presence intent is off).
  • Voice audio — the bot does not join voice as a speaker and does not record.
  • Payment cards, government ids, or health data.
  • Advertising cookies or cross-site tracking tied to this bot.

Privileged intents: Message Content: not used; Server Members: not used; Presence: not used. Details: Terms, intents and /legal/intents.

04How we use this information

  • Show a live occupant count on a stream overlay or iframe.
  • Debug a missing channel or a down process.
  • Respond to deletion or takedown requests.

We do not use voice-state events to train a public machine-learning or AI model, and we do not sell them.

05Retention

  • Snapshot: overwritten in memory on every voice-state update; gone when the process exits.
  • Token and channel id: for as long as the widget is operated, then removed from the host when the stack is retired.
  • Overlay viewers: a browser that loads the HTML only sees the JSON count fields, not a member roster.

06Sharing and no sale

We do not sell voice counts, channel ids, or tokens, and we do not share them with data brokers or advertisers.

We disclose information only:

  • To Discord as needed to stay connected and receive voice-state events.
  • To operators and hosting providers that run the process.
  • Publicly as the numeric count (and channel/guild name) on the overlay you already see.
  • If required by law, or to defend a legal claim, or to stop abuse of the bot.

07Third parties

  • Discord. Discord Privacy Policy.
  • Overlay host / stream software (for example OBS loading the local or deployed HTML). They see the same public JSON the overlay fetches.

08Your rights and how to request deletion

This bot does not keep a profile of you. Leaving the watched voice channel removes you from the next count. If you still want action, email Business@nefarious.trading with:

  • Your Discord user id (and username).
  • Whether you want the widget process stopped, the overlay unpublished, or a host log reviewed.

We will delete what we control unless we must keep a record of the request or of unlawful content. We cannot erase stream VODs or screenshots other people already captured.

If you are in the EEA, UK, or a U.S. state with a comprehensive privacy law, you may also ask for access, correction, or a portable copy of any personal data we hold about you in this bot — which is typically none beyond operator secrets and a live integer. We will not discriminate against you for asking. You may complain to your local supervisory authority.

09Children

Discord requires users to meet its minimum age (generally 13+). Nefarious Widget is not directed at children under 13, and our community Terms require 18+ for trading education. If you believe we stored data about a child, contact Business@nefarious.trading and we will delete what we have.

10Changes

We will post updates at this URL and change the “Last updated” date. If we later store occupant ids, read messages, or turn on Server Members / Presence, this Policy will say so honestly.

Also see our Nefarious Widget Terms, Privileged intents, Discord intents matrix, Site Privacy Policy, and Site Terms of Service.