Your community, handled with care.
Operator information required
This page describes the implemented data flows. Before a public launch, the operator must provide their legal identity, contact address, jurisdiction, retention periods, subprocessors, and an applicable rights-request process. This is not a completed operator privacy notice.
Discord sign-in
JACB requests identify and guilds scopes to read your Discord profile and server list. It does not request your email, password, or message content. Access and refresh tokens are encrypted on the server. Browser sessions use opaque cookies and expire after eight hours.
Economy records
The database stores server configuration, member wallets, administrative changes, purchases, reward ownership, and transaction history. Financial-style ledger entries are immutable and use virtual currency only.
Files and Discord delivery
Uploaded images are validated and re-encoded before being stored in operator-controlled object storage. The bot calls Discord to check membership and roles and deliver purchased role rewards.
Access and deletion requests
Server administrators can view their economy’s records. Platform operators must establish an access and deletion policy that preserves required audit history while minimizing personal data. Contact details and retention periods must be supplied before launch.