Privacy Policy

LFG Bot is a Discord bot that recommends games for your group based on what everyone owns and what you're in the mood for. To do that it has to hold some data about you. This policy explains exactly what it collects, why, who it's shared with, how long it's kept, and the control you have over it — including how to have it deleted.

LFG Bot is operated by Vee Squared Ventures, a business based in Portland, Oregon, USA ("we", "us"), which is the data controller for the information described here. LFG Bot is not affiliated with Discord, Valve, or Steam. By adding the bot to a server or linking your Steam account, you agree to this policy and to the Terms of Service.

1. What we collect

We collect only what the bot needs to function:

• Your Steam ID and a cached copy of your Steam library. Pulled after you run /lfg-bot link (or link via /lfg-bot friend), so the bot can recommend games your group owns. We read your owned-games list — not your Steam password, payment details, or private messages.
• Your Discord identity. Your Discord user ID and display name, and the servers you share with the bot.
• Your activity in the bot. Your votes, RSVPs and roster membership, feedback ratings, MVP votes, per-session mood picks, your chats with the bot (in @mention and game-night sessions), and any lore or "canon" quotes that name you.
• Onboarding & funnel analytics. A small stream of events recording how people move through setup (e.g. linked, activated), which includes your Discord user ID. This is used in aggregate to understand where onboarding gets stuck. See Retention for how long it lives.
• Aggregate cost-accounting. Per-session, per-server records of AI-model usage cost, kept for billing and abuse prevention. These carry no user identifier — there is no per-user row.

We do not collect your Steam password, your Discord password, your email address, your IP address for tracking, or any payment information. The bot is free.

2. Why we collect it (lawful basis)

Under the GDPR we rely on two lawful bases:

• Performance of the service / legitimate interest. The bot cannot recommend games your group owns without reading libraries and identifying who's in a session. This processing is what you asked the bot to do.
• Consent. Linking your Steam account is a voluntary action you take. Your library only feeds a given server after you activate it there — a separate one-tap consent step per server. You can withdraw at any time (see Your rights).

3. Who we share it with (subprocessors)

We do not sell your data and we do not share it with advertisers. To run the service we use the following subprocessors, each acting on our behalf:

Some of these providers are based in the United States, so your data may be processed there. We rely on the providers' own data-transfer safeguards.

4. How long we keep it

• Most data is kept while you use the bot — your link, library, session history, and lore persist until you delete them (see Your rights) or until the bot is removed from the server.
• Onboarding & funnel analytics auto-expire. These events live in an append-only stream (Cloudflare Analytics Engine) that cannot be edited after the fact. Each event is automatically purged after the provider's retention window — three months. For this one stream we rely on that time-bounded expiry rather than on-demand deletion.

5. Your rights & how to exercise them

You can see, export, or delete your data. Today some of these are handled by request to the operator; self-service tools are on the way.

• Unlink (do it yourself, any time). /lfg-bot unlink removes your Steam link and cached library immediately. Note this stops the bot reading your library but does not remove your past activity — for that, request full erasure.
• Erasure (right to be forgotten). Request deletion of everything the bot holds about you, across every server, by emailing privacy@lfg-bot.com. Erasure is irreversible. See what erasure removes below.
• Access & export. Request a copy of the data we hold about you by emailing the same address.
• Withdraw consent. Unlinking, or removing the bot from a server, withdraws your consent going forward.

We're building a self-service /lfg-bot command so you can export and delete your data without contacting anyone. Until it ships, email is the route.

6. What erasure deletes — and what it doesn't

We keep this precise on purpose: we don't claim to delete things we can't.

What erasure DELETES

Across every server the bot shares with you:

• Your Steam link and cached Steam library.
• Your per-server membership and activation record, and any UI-hint counters.
• Lore / "canon" quotes where you are the speaker or the subject — deleted outright, not anonymized-and-kept. Because a quote can contain your name or handle, the whole entry is removed (so the group loses those particular quotes when you erase).
• Your votes, RSVP / roster membership, feedback ratings, MVP votes, and per-session mood picks across every game-night session.
• Your @mention conversations with the bot (the whole log).
• Your MVP leaderboard records.

What erasure does NOT delete (and why)

Where a retained record still carries an identifier pointing at you, we say so — we don't call it anonymous when it isn't:

• Aggregate AI cost-accounting rows carry no user identifier, so there is no per-user row to delete.
• Onboarding / funnel analytics events do include your Discord user ID, but live in an append-only stream that can't be edited or deleted on request. They auto-expire (see Retention).
• A few integrity audit records (e.g. who removed a different user's lore entry) are kept, but with your identifier replaced by an anonymous marker — they no longer point at you.
• Shared session transcripts. Game-night sessions keep a turn-by-turn transcript of the group's chat with the bot. Turns that mention you by handle are redacted, but because turns aren't attributed to an author, a message you wrote that doesn't name you can't always be singled out from the group's conversation. The lore the bot extracted from those conversations is deleted outright (above).

7. Departed servers

When the bot is removed from a server, that server's data is cleaned up. A few per-session records may persist briefly until they age out automatically. A specific person's erasure request always reaches every session immediately.

8. Children

LFG Bot is not directed at children. You must meet Discord's minimum age (13, or older where local law requires) to use it.

9. Changes to this policy

We may update this policy as the bot evolves. Material changes will be reflected by the effective date at the top. Continued use after a change means you accept the updated policy.

10. Contact

Questions, or want to exercise any of the rights above? Email us at privacy@lfg-bot.com.