This policy explains what data Diana collects, why, and how it is handled. Diana is an open-source project - everything described here can be verified in the source code at github.com/louissullivan4/diana.
Discord data. When Diana is added to a server or a command is used, it stores the server (guild) ID, the channel ID configured for notifications, and the Discord user ID of whoever added a tracked player. Diana does not store message content, usernames, avatars, or direct messages.
Game data. For each tracked player, Diana stores public game account identifiers and statistics fetched from the games' official APIs: Riot ID (game name and tag line), PUUID, region, rank/tier/LP history, and match details and timelines for League of Legends; and the equivalent public player and match data for Apex Legends. This is the same information publicly visible on sites like op.gg or in the game clients.
Dashboard accounts. The web dashboard uses username-and-password accounts created by the operator. Passwords are stored only as bcrypt hashes, never in plain text.
Data is used only to provide the bot's features: posting match summaries and rank updates to the configured Discord channel, and showing tracked-player statistics in the dashboard. Data is never sold, shared with third parties, or used for advertising.
Diana sends game account identifiers to the Riot Games API and Apex Legends data APIs in order to fetch public game data, and interacts with the Discord API to operate as a bot. Those services have their own privacy policies: Discord, Riot Games, Electronic Arts.
Data is kept while a player is tracked or a server uses the bot. Removing a tracked player deletes their associated match, timeline, and rank history (database records are removed via cascading deletes). To request removal of any data - for example, a game account you own that someone else added - open an issue on the GitHub repository and it will be deleted.
Data is stored in a private database and is not publicly accessible. Dashboard access is protected by authentication with hashed passwords and rate limiting. No system is perfectly secure, but only the minimum data needed to run the Service is kept.
The Service is not directed at children under 13 (or the minimum age required by Discord in your country), and Diana does not knowingly collect data from them.
This policy may be updated from time to time; the current version will always be published at this page.
For privacy questions or deletion requests, open an issue on the GitHub repository.