Privacy Policy

1. Data Controller

The data controller for Mallard is Anatinae Ltd, a company registered in England and Wales (company number 17329546), registered office at 128 City Road, London, United Kingdom, EC1V 2NX.

2. Information Collected

Mallard may process the following data when you use the bot or dashboard:

• Discord user ID, username, avatar, and email when provided by Discord OAuth
• Guild/server identifiers and names
• Guild settings configured in the dashboard
• Moderation records created by authorized server staff
• Access tokens and session cookies required for login and authenticated use
• Operational logs, error traces, and background job metadata
• Network and request metadata (including IP address, user-agent, and request details), processed by our security infrastructure to protect the website and dashboard against abuse. This applies to all visitors, including those who do not log in.

3. How Data Is Used

• Authenticate users and maintain login sessions
• Determine whether a user can access a guild dashboard
• Store and display server configuration
• Perform moderation actions and keep audit records
• Maintain service reliability, debugging, and security monitoring
• Measure aggregate site performance using privacy-first, cookie-less web analytics
• Detect, prevent, and report illegal content, including automated scanning for Child Sexual Abuse Material (CSAM)

Where UK or EU data protection law applies, this processing is carried out on the basis of our legitimate interests in operating, maintaining, and securing the service.

4. Data Sharing

Mallard does not sell personal data. Data may be processed by infrastructure providers that are necessary to operate the service, such as hosting, database, queue, or monitoring providers.

Where required or permitted by law, data may also be disclosed to law enforcement, regulatory bodies, or child protection organizations (such as the National Center for Missing & Exploited Children - NCMEC) in connection with investigations or the detection of illegal content.

5. Cookies and Sessions

The dashboard uses a server-side authentication session stored in an HttpOnly cookie to keep you logged in. This cookie is required for the dashboard to function.

Our anti-abuse protection may also set a short-lived cookie to record that your browser has passed an automated security check. This cookie is strictly necessary to access the site and is not used for tracking or advertising.

6. Retention

Data may be retained for as long as necessary to operate the service, support moderation history, maintain audit trails, meet legal obligations, or protect against abuse. The operator may delete or modify data at any time and is not responsible for maintaining indefinite backups or archives.

7. Security

Reasonable technical and organizational measures may be used to protect the service, but no system is perfectly secure. You should not submit secrets or sensitive personal data unless necessary for the service to function.

These measures include a web application firewall, automated bot-mitigation challenges (which may require your browser to complete a short verification step), and IP-reputation filtering. As a result, automated or suspicious traffic may be challenged or blocked automatically and without notice, and legitimate requests may occasionally be affected.

8. Your Choices

• Server owners may remove Mallard from a Discord guild at any time.
• Users may revoke Discord OAuth access from their Discord account settings.
• Dashboard access can be removed by changing guild permissions or configured roles.

9. Children

Mallard is not intended for use by children where such use is restricted by applicable law. If you believe data has been collected inappropriately, contact the operator.

10. Third-Party Services

Mallard relies on Discord and other third-party services. Their privacy practices are governed by their own policies, not this one.

11. Changes

This Privacy Policy may be updated at any time. Continued use of the bot or dashboard after changes means you accept the updated policy.

12. Contact

For privacy concerns or data deletion requests, contact the data controller, Anatinae Ltd (company number 17329546, registered office 128 City Road, London, United Kingdom, EC1V 2NX), through the Mallard support channels or the associated Discord server, if available.