Gelato Privacy Policy
隱私權政策
Last updated / 最後更新：2026-09-30
English
1. Who we are
Gelato is a Discord application operated by an individual for a private Discord community. It is not a commercial service. This policy explains what data Gelato stores, why, and how you can have it removed.
2. What we collect
Gelato stores the following, per member and per server:
| Data | Purpose |
|---|---|
| Discord user ID | Identifies your record |
| Discord server ID | Keeps records separate per server |
| Your username | Displayed on rank cards and leaderboards |
| Experience points and level | The leveling system itself |
| Message count | A running counter used for statistics on your rank card |
| Timestamp of your last counted message | Enforces the one-minute rate limit on earning experience |
| Timestamp of your last message | Identifies members who have been silent for a long time, for the check-in messages described in section 3 |
| Daily check-in streak and last check-in date | The #checkin feature |
| Whether and when Gelato sent you a check-in message, and whether you replied | So that nobody is messaged twice, and so that a reply stops further messages |
| The roles you held before they were changed | Lets a mistaken role change be undone |
| Record creation and update timestamps | Housekeeping |
Gelato also keeps a moderator action log containing the acting moderator's user ID, the action performed, the affected user's ID, a short description of the change, and a timestamp. This exists so that manual adjustments remain auditable.
Moderators can capture a record of every member's roles at a given moment, so that the server can be restored after an accident. The five most recent captures are kept.
3. What we do NOT collect
Gelato does not store:
- the content of your messages, or any attachments, embeds, or polls
- your presence, online status, or activity
- direct messages
- your email address, IP address, avatar, or any profile data beyond the username shown on leaderboards
- any data used for advertising, profiling, or analytics
How message content is used
Gelato reads message content in memory, for four purposes only:
- to detect its
#command prefix; - to exclude low-effort spam from earning experience;
- to detect suspicious links — scam and phishing sites, invitations to other servers, shortened URLs, and links to executable files. When a link matches, Gelato posts the link itself, your name and the channel to a private moderator channel. The rest of your message is not included, and no message is deleted automatically;
- to relay your reply when you answer a check-in message that Gelato sent you by direct message. The reply is posted to a private moderator channel so that a person can respond.
Content is discarded immediately after processing and is never written to the database, to log files, or to any external service. Items relayed to moderators remain in that channel as ordinary Discord messages. Logs record an action name, a reason and user IDs only — never message text or links.
Check-in messages
If you have not spoken in the server for more than six months, Gelato may send you one short direct message asking how you are, and a second one fourteen days later. Replying to it, or speaking anywhere in the server, stops these messages.
4. Where the data lives
The database is a local SQLite file, encrypted at rest, on a single privately operated machine. It is not exposed to the internet, and there is no public API over it.
A backup runs once per day and is pushed, still encrypted, to a private repository accessible only to the operator. Backups follow a tiered retention schedule: every day for the last 7 days, weekly for the last 8 weeks, monthly for the last year, and one snapshot per year for three years. Anything older is deleted automatically, and the repository's history is rebuilt once a year so that deleted backups do not linger in it.
5. Sharing
Your data is never sold, shared, or transmitted to any third party. It is used solely to operate features inside the same Discord server you earned it in.
6. Retention and deletion
Records persist for as long as you participate in the community, because a leveling system is cumulative by nature.
To have your data deleted, ask a server administrator to run #admin resetuser on your account, or contact the operator at Discord: .peipei. Deletion removes your experience, level, message count, check-in history, role records and check-in message status from the live database. Backup copies age out on the schedule described in section 4; the longest any copy is kept is three years.
7. Children
Gelato is used within Discord and is subject to Discord's own minimum age requirements. It is not directed at children below those requirements.
8. Changes
If this policy changes, the "Last updated" date at the top of this page will change with it. Material changes will be announced in the community server.
9. Contact
Discord: .peipei
中文
1. 我們是誰
Gelato 是由個人營運、服務於一個私人 Discord 社群的 Discord 應用程式，並非商業服務。本政策說明 Gelato 會儲存哪些資料、為什麼儲存，以及你如何要求刪除。
2. 我們儲存什麼
以「每位成員、每個伺服器」為單位儲存：
| 資料 | 用途 |
|---|---|
| Discord 使用者 ID | 識別你的紀錄 |
| Discord 伺服器 ID | 讓不同伺服器的紀錄分開 |
| 你的使用者名稱 | 顯示在名片與排行榜上 |
| 經驗值與等級 | 等級系統本身 |
| 訊息計數 | 名片上的統計數字 |
| 最後一次計入經驗的時間 | 執行「每人每分鐘一次」的限制 |
| 最後一次發言的時間 | 辨識長期沒有發言的成員，用於第 3 節說明的問候訊息 |
| 簽到連續天數與最後簽到日期 | #checkin 功能 |
| Gelato 是否、何時傳過問候訊息給你，以及你是否回覆 | 確保不會重複傳訊，並在你回覆後停止後續訊息 |
| 身分組被異動之前，你原本持有的身分組 | 讓誤判的身分組異動可以還原 |
| 紀錄建立與更新時間 | 系統維護 |
另外會保留管理員操作日誌：操作者的使用者 ID、動作名稱、被操作者的 ID、變更說明、時間戳記。用途是讓手動調整的行為可被追溯。
管理員可以記錄某一時刻所有成員持有的身分組，以便在意外發生後還原伺服器。只保留最近五份。
3. 我們不儲存什麼
Gelato 不會儲存：
- 你的訊息內容、附件、嵌入內容或投票
- 你的上線狀態或正在進行的活動
- 私人訊息
- 你的電子郵件、IP 位址、頭像，或排行榜顯示的使用者名稱以外的任何個人資料
- 任何用於廣告、剖析或行為分析的資料
訊息內容的用途
Gelato 只會在記憶體中讀取訊息內容，而且只用於以下四件事：
- 辨識
#指令前綴； - 把低成本洗版排除在經驗值累積之外；
- 偵測可疑連結——詐騙與釣魚網站、其他伺服器的邀請、短網址、指向可執行檔的連結。連結符合規則時，Gelato 會把連結本身、你的名稱與所在頻道貼到僅管理員可見的頻道。訊息的其餘內容不會被轉貼，也不會自動刪除任何訊息；
- 當你回覆 Gelato 以私訊傳給你的問候訊息時，把你的回覆轉達給管理員。回覆會貼到僅管理員可見的頻道，讓真人能夠回應。
內容在處理完的當下即丟棄，不會寫入資料庫、記錄檔或任何外部服務。轉達給管理員的內容會以一般 Discord 訊息的形式留在該頻道。記錄檔只包含動作名稱、理由與使用者 ID，不含任何訊息文字或連結。
問候訊息
如果你超過半年沒有在伺服器發言，Gelato 可能會傳一則簡短的私訊問候你，並在十四天後再傳一則。回覆該訊息，或在伺服器任何地方發言，後續訊息就會停止。
4. 資料存放在哪裡
資料庫是單一台私人機器上的本機 SQLite 檔案，以靜態加密保存，不對外開放，也沒有任何公開 API。
每日執行一次備份，以加密狀態推送到僅營運者可存取的私人倉庫。備份採分層保留：最近 7 天每日保留、最近 8 週每週保留、最近一年每月保留，另外每年保留一份、保留三年。更舊的自動刪除；倉庫的歷史紀錄每年重建一次，已刪除的備份不會殘留其中。
5. 資料分享
你的資料不會被販售、分享或傳送給任何第三方，僅用於你所在的那個 Discord 伺服器內的功能。
6. 保存與刪除
因為等級系統本質上是累積的，紀錄會在你參與社群期間持續保存。
若要刪除你的資料，可請伺服器管理員對你的帳號執行 #admin resetuser，或透過 Discord: .peipei 聯絡營運者。刪除會從正式資料庫移除你的經驗值、等級、訊息計數、簽到紀錄、身分組紀錄與問候訊息狀態。備份中的副本依第 4 節的排程自動淘汰，任何副本最長保留三年。
7. 兒童
Gelato 於 Discord 平台內使用，適用 Discord 自身的最低年齡規定，並非針對低於該年齡的使用者設計。
8. 政策變更
本政策若有變更，頁首的「最後更新」日期會一併更新。重大變更會在社群伺服器內公告。
9. 聯絡方式
Discord: .peipei