Zorin stores very little about you: your Discord user ID, your profile and economy data, the gift codes you create or redeem and, if you use the dashboard, a sign-in token. This policy explains what we collect through the Zorin Discord bot, the website at zorin.app and the Zorin dashboard, why we collect it and what you can do about it.
Zorin is the controller of your personal data under Brazil's General Data Protection Law (LGPD, Law No. 13,709/2018). For any privacy request, contact hi@zorin.app.
1.Data we store
When you use a Zorin profile or economy feature, we create a record linked to your Discord user ID.
Swipe the table sideways to see all columns.
| Data | What it is | Why we keep it |
|---|---|---|
| Discord user ID | Your numeric Discord ID | To link your profile and economy data to you |
| Biography | The text you set with the biography command | To show it on your profile |
| Coins and reputation | Your coin balance and reputation points | To run the economy system |
| Daily and reputation timestamps | When you last claimed a daily reward and last gave reputation | To enforce cooldowns |
| Gift codes | The code, its value, the user ID that created it and the user ID that redeemed it | To make sure each code is redeemed once and to prevent abuse |
| Record dates | When your record was created and last updated | To maintain and troubleshoot the database |
We do not store who gave reputation to whom, your song history, your playback queue or logs of the commands you use.
2.Weekly rankings
To show the most played songs of the week on our website, we count how many times each track is played across Zorin. These counts are stored per track only and are not linked to you, your Discord ID or your server.
3.Data we use but do not store
- Commands only. Zorin only interacts with you when you use one of its commands. It does not read, monitor or store the messages you send.
- Discord server and member data. Zorin uses the Guild Members intent to receive information such as usernames, display names, avatars and roles. We use it while a command runs, for example to show a name on a profile, and do not save it.
- Voice and playback. To play music, Zorin joins your voice channel and keeps the current queue in memory. Zorin does not record, listen to or store anything said in voice channels. The queue is discarded when playback ends.
- Music searches. When you search for a song, the search text is sent to third-party audio providers to find the track. These requests come from our servers and do not include your Discord ID or other information about you.
4.Dashboard sign-in
When you sign in to the dashboard, Discord shares the following with us, based on the permissions you approve:
- identify: your user ID, username and avatar.
- email: the e-mail address on your Discord account.
- guilds: the list of servers you are in and your permissions there, so we can show which servers you can manage.
Sign-in is only used by the dashboard. The website at zorin.app does not ask you to sign in and does not set any cookies.
We use this data only to sign you in and show your servers. Your e-mail address is not stored in our database.
To keep you signed in without asking you to log in again, we store the refresh token that Discord gives us. We use it only to get a new access token for your session, and never to act on your Discord account in any other way. The token is deleted when you sign out. You can also revoke Zorin's access at any time in Discord, under User Settings → Authorized Apps, which stops the token from working.
The dashboard uses one essential cookie to keep you signed in. We do not use advertising or tracking cookies anywhere.
5.Website analytics
The website and dashboard use Vercel Web Analytics to count visits and see which pages are used. It does not use cookies and does not identify you. It records aggregated data such as the page visited, the referring site, your approximate location (country and region), browser, operating system and device type. Visitors are counted with an anonymous hash that is discarded after 24 hours.
6.Legal bases
Under the LGPD, and the GDPR where it applies, we process your data:
- To provide the Service you asked for (contract performance): profile, economy, gift codes and dashboard sign-in, including the refresh token.
- For our legitimate interests: aggregated website analytics and play counts, security and preventing abuse of the economy system.
- To meet legal obligations, when the law requires it.
We do not use your data for advertising, profiling or selling it to anyone.
7.What other users can see
Your biography, coin balance and reputation can be seen by other users through Zorin's profile commands. Do not put personal information in your biography that you do not want others to see.
9.International transfers
Our servers and database are located in the United States. When we transfer your data there, we do so under the safeguards allowed by the LGPD and choose providers with recognized security practices.
10.How long we keep data
- Profile and economy data: while you use Zorin, or until you ask us to delete it.
- Gift codes: while the code exists. If you ask us to delete your data, we remove your user ID from any gift code you created or redeemed.
- Dashboard refresh token: until you sign out of the dashboard.
- Play counts: aggregated per track and not linked to anyone.
- Analytics: aggregated only; the anonymous visitor hash is discarded after 24 hours.
Removing Zorin from a server does not delete your user data, because your profile works across every server. To delete it, follow section 11.
11.Your rights
Under the LGPD, you can ask us to:
- Confirm whether we process your data and give you a copy of it.
- Correct incomplete or wrong data.
- Delete your data, or anonymize or block it.
- Send your data to you in a portable format.
- Tell you who we share it with.
If you are in the European Economic Area or the United Kingdom, you have similar rights under the GDPR, including the right to object to processing based on legitimate interests.
To make a request, e-mail hi@zorin.app from any address and include your Discord user ID. We may ask you to confirm through Discord that the account is yours. We answer within 15 days. You can also file a complaint with Brazil's data protection authority (ANPD) or your local authority.
12.Children
Zorin is meant for people who meet Discord's minimum age in their country. We do not knowingly collect data from children under that age. If you think a child has used Zorin, contact us and we will delete their data.
13.Security
Access to our database and servers is restricted to the people who operate Zorin, and connections to the website and dashboard use HTTPS. No system is completely secure. If a breach could put you at risk, we will notify affected users and the ANPD as the law requires.
14.Changes to this policy
We may update this policy. When a change is significant, we will announce it on our support server and update the date at the top of this page.
15.Contact
Privacy questions and requests: hi@zorin.app.