Lustra – Privacy Policy

Last updated: 28 September 2025

Overview

Lustra is a Discord bot that responds to slash commands by retrieving images/GIFs from third-party APIs and posting them as embeds. We aim to collect the minimum data necessary to operate (cooldowns, NSFW enforcement, reliability).

Data we process

• Identifiers: Discord user IDs, server (guild) IDs, channel IDs, and interaction IDs to process commands, apply rate limits, and determine NSFW eligibility.
• Usage metadata: Timestamps, command names and options (e.g., type/count), success/failure and latency metrics for reliability and abuse prevention.
• No message content: The Bot is designed for slash commands and does not read ordinary message content. If message content processing is ever required in future, we will update this policy and obtain any necessary permissions.
• Third-party APIs: Requests to services like waifu.pics / waifu.im include parameters necessary to fetch content. Their privacy practices apply to that traffic.

How we use data

• Operate core features, enforce cooldowns, and respect NSFW channel gating;
• Monitor performance and reliability (e.g., latency, error rates);
• Prevent abuse and comply with platform rules and law.

Retention

Operational logs and metrics are kept only as long as necessary for the purposes above, then aggregated or deleted. If you need specific retention windows for your deployment, contact us.

Sharing

We do not sell user data. We share data only with service providers necessary to run the Bot (e.g., hosting, logging), third-party content APIs, or if required by law or to address abuse.

Security

We apply reasonable technical and organisational measures appropriate to the risk (token secrecy, least-privilege permissions, and limited logging). No method is 100% secure.

Children

The Bot is not directed to children under the minimum age permitted by Discord and local law. Servers must properly age-gate NSFW channels; we will not respond with NSFW content outside marked channels.

Your choices

• Server admins can remove the Bot at any time or limit its channel permissions.
• Data requests: contact us via the repository to request deletion of identifiable logs where feasible.

Changes

We may update this policy. Continued use after updates indicates acceptance.

Contact

Open an issue on the repository or contact the maintainers listed there.