Privacy Policy
Last updated: 10 August 2026
This privacy notice applies to the marketing site tcd-community.de (TCD Bot) and, where linked, the dashboard and bot services. Controller details match andredingfelder.de.
1. Controller
Andre Dingfelder
Enheim 104
97340 Martinsheim, Bayern, Deutschland
Phone: +49 163 6873224
Email: kontakt@andredingfelder.de
Website: https://www.andredingfelder.de
2. Purpose
TCD Bot provides Discord server tools (tickets, moderation, automod, welcome, leveling, billing, etc.). We process data needed for authentication, authorization, bot features, and subscriptions.
3. Discord OAuth login
Sign-in uses Discord OAuth2 only. We never store Discord passwords.
Legal bases: Art. 6(1)(b) and (f) GDPR.
- Discord user ID
- Username / display name
- Avatar URL (if provided)
- Guild membership / management list
- Session cookie (strictly necessary)
4. Discord bot data
When TCD Bot is invited to a guild, it processes server-side data required for enabled modules and Discord permissions.
- Guild / channel / role IDs and names
- Message content where needed (tickets, automod, logging, commands)
- Member IDs and display names
- Moderation / ticket metadata
- Per-guild configuration
5. Payments (Stripe)
Paid plans use Stripe Checkout. Stripe processes payment data independently.
We store Stripe customer/subscription IDs, plan, status, trial/grace/period data, and related Discord user IDs.
See https://stripe.com/privacy
6. Hosting, logs, storage
Services are hosted in the EU. Server logs may include IP, timestamp, URL, user agent, and errors.
Application data is primarily stored in SQLite; optional analytics may use Postgres when configured.
7. Cookies
We use strictly necessary session cookies for login, locale, and host separation. No marketing cookies without consent on the dashboard.
8. Recipients
- Discord Inc. — https://discord.com/privacy
- Stripe — https://stripe.com/privacy
- EU hosting/infrastructure providers
- Guild staff with dashboard permissions (their guild context only)
9. International transfers
Discord and Stripe may process data in the US or other countries under their respective safeguards (e.g. SCCs).
10. Retention
Sessions end on expiry or logout. Bot/config data is kept while the service is used for a guild or until deleted by authorized users.
Billing records are retained for the contract term and statutory retention periods.
11. Your rights
You have GDPR rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority (typically BayLDA in Bavaria).
Contact: kontakt@andredingfelder.de
12. Changes
We may update this policy when law or features change. The version published at the time of your visit applies.