Malcolm! is a Discord bot run by Body Doubling LLC ("we"). This page explains what he sees, what he keeps, and what you can do about it.
The short version
- Malcolm! doesn't read your messages.
- Nobody gets join alerts about you unless you say yes first, in a private message.
- Saying no is invisible, and you can stop an alert at any time.
- We don't sell anything about you, show ads or use analytics.
What Malcolm! sees
- His own commands. When you use a Malcolm! command, he sees the command and what you typed into it, such as a room name or the person you picked.
- Who you are on the server. Your Discord user ID, display name and roles. He uses your roles to work out which perks you have.
- Voice channel joins and leaves. He uses these in the moment, to send a join alert someone agreed to and to notice that a room is being used. He doesn't keep a history of when you joined or left.
- Buttons you press on messages he sends you, such as Yes, No or Stop.
Malcolm! does not have Discord's message content permission, so he can't read messages in your server, and he never hears voice audio.
What Malcolm! keeps
- Server setup: the server's ID, the category where rooms go, and which roles unlock which perks.
- Private rooms: the server, the owner's user ID, the room's channel and name, when it was created and last used, any reminder or grace period, and when and why it closed. For guests, their user ID and when they were added. Removing a guest deletes their entry.
- Join alerts: the server and room, the user ID and display name of the person the alert is about and of the person who asked, whether it is waiting, on or off, and when it was asked for, answered, last checked in on and ended, and who ended it.
He doesn't keep your messages, your email address, your IP address, payment details, or a log of your voice activity.
Who is told what
A join alert goes only to the person who asked for it, and only says that you joined that one room. If you say no, don't answer, or stop an alert later, all of those look exactly the same to them. The same person can't ask you about the same room again for 30 days.
How long we keep it
- Server setup is kept until the server asks us to remove it. If the server stops subscribing, it is kept so everything works again if they come back.
- Room records are kept after a room closes. The room's Discord channel itself is deleted when it closes.
- Join alert records are kept permanently. They are closed, never deleted. This record is the proof that you were asked, what you agreed to, and that a stop was respected, so it protects you as much as anyone.
If you'd like information about you removed, contact us. For join alerts that have ended, we remove your name from the record and keep only your Discord user ID, which is still enough to show that you were asked and that your choice was respected. Alerts that are still on need to be stopped first, which you can do yourself with /alerts-about-me. For anything else, we'll remove what we can and tell you plainly what we have to keep and why.
Where it's stored
Malcolm!'s records are stored with Supabase, in the eastern United States. The bot runs on Render, in Oregon, United States. Both providers only store and run things for us. They don't use the data for themselves.
Malcolm! shares a database with Silas!, the Body Doubling community's pomodoro bot, so that one command can show you join alerts from both bots. Each bot only acts on its own records.
Discord's own privacy policy covers everything Discord itself does.
Who we share it with
Nobody, except the two providers above and anyone the law requires us to share it with. We don't sell it, rent it, or use it for advertising.
What you can do
- Say no to any join alert request. Nothing is watched unless you press Yes.
- See and stop alerts about you with
/alerts-about-me. It covers Malcolm! and Silas!, on every server. The message where you said yes also keeps a Stop button.
- Every 3 months Malcolm! asks whether an alert about you is still OK.
- Ask us for a copy of what we keep about you, to correct it, or to remove it, through the feedback page.
- Server admins can remove Malcolm! from their server at any time.
Children
Discord requires users to be at least 13, or older in some countries. Malcolm! is meant for people who meet Discord's age requirement.
Changes
If we change this policy, we'll update the date at the top. If a change affects what Malcolm! keeps about you, we'll say so in the servers that use him.
Contact
Questions or requests: bodydoubling.com/feedback.