Privacy Policy

1. Overview & Commitment to Privacy

At Fire Bank ("we", "us", or "our"), founded and developed by Mohamed Waleed, we believe user privacy is a fundamental right. We are strictly committed to transparency, data minimization, and compliance with the Discord Developer Policy and the European Union General Data Protection Regulation (GDPR).

This Privacy Policy explains what information we collect when you interact with Fire Bank on Discord, why we collect it, how it is handled, and how you can exercise full control over your data, including permanent deletion.

2. Information We Collect

In accordance with the principle of data minimization, Fire Bank collects only the absolute minimum data required to deliver core virtual banking and game functionality:

• Discord User IDs (Snowflake IDs): A 17-19 digit public identifier generated by Discord. This ID is used strictly as a database key to link your virtual wallet balance, bank deposits, owned stocks, and inventory.
• Discord Guild (Server) & Channel IDs: Public identifiers for servers and channels where the bot is installed. Used to remember server configuration settings, such as whitelisted banking channels (/abb-channel).
• Virtual Economy Records: Fictitious numbers representing your virtual coin balance, bank savings, owned company stocks, active protection shield expiry timestamps, and daily claim streaks.
• Command Cooldown Timestamps: Unix timestamps of your latest command invocations (e.g. salary, wheel, robbery) to calculate remaining cooldown periods and prevent command flooding.
• In-Memory Message Triggers: When an incoming message matches a registered bot keyword or mention, it is parsed ephemerally in RAM to execute the requested command. Message contents are never saved to permanent storage or database chat logs.

3. Information We Do NOT Collect

• NO Passwords or Tokens: We never have access to your Discord password, two-factor authentication tokens, or account credentials.
• NO Private Chat Surveillance: We do not log, read, or store user chat logs, private messages, voice calls, or direct messages.
• NO Real Financial Information: We do not ask for or collect credit card numbers, PayPal accounts, cryptocurrency private keys, or real bank accounts.
• NO Real-Life PII: We do not collect your legal name, physical address, phone number, email address, or government identification, unless you voluntarily email developer support.
• NO Tracking Cookies or Device Fingerprints: We do not use intrusive browser trackers or analytics cookies across our web pages.

4. How We Use Collected Data

We process the limited data outlined above solely for the following legitimate purposes:

• To calculate and persist your virtual coin balance, bank interest, and stock portfolio across Discord sessions.
• To enforce fair play cooldown intervals and prevent command abuse, spam macros, or bot exploitation.
• To aggregate and display server-wide Top 10 Wealthiest Tycoons leaderboards (/top).
• To allow server administrators to restrict bot commands to designated banking channels.
• To provide contextual AI responses when an authorized user specifically mentions the bot in a whitelisted channel.

5. Data Sharing & Third Parties

We NEVER sell, rent, monetize, or trade user data with any third party, marketing firm, or data broker under any circumstances.

Data is shared strictly with essential service infrastructure providers to maintain bot hosting:

• Discord, Inc.: Data is received through the official Discord Gateway API under Discord’s developer terms.
• Hosting Infrastructure (Dokploy / Vercel): Our bot runs on secure Linux container environments with isolated network namespaces.
• OpenRouter API: When a user mentions the bot for AI conversation, an anonymous prompt with non-sensitive game context is processed through OpenRouter to generate the conversational reply. No personally identifying user tokens are passed.

6. Data Retention & Security Measures

Retention Period: We retain user economy profiles and guild configurations only as long as necessary to maintain active gameplay. If a server removes the bot, or if a user ceases to interact with Fire Bank, inactive records may be purged during periodic maintenance routines.

Security Architecture:

• All web communication with our servers is encrypted using modern Transport Layer Security (HTTPS / SSL).
• Database files and state stores are housed on secured servers with strict firewall access rules.
• Direct access to server files is restricted exclusively to the primary developer, Mohamed Waleed.

7. Your Rights & Data Deletion (Right to be Forgotten)

Under GDPR and Discord Developer Guidelines, every user has the complete right to access, inspect, and permanently delete all personal data associated with their Discord account.

8. Children's Online Privacy (COPPA Compliance)

Fire Bank does not knowingly collect or solicit personal information from anyone under the age of 13, or below the applicable age of digital consent in your jurisdiction.

In accordance with Discord’s Terms of Service, all users must be at least 13 years old. If we become aware that we have collected information from a child under 13 without verified parental consent, we will promptly purge that information from our records.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our bot architecture, legal requirements, or Discord API policies. When updates are published, the "Last Updated" date at the top of this document will be revised accordingly.

We encourage you to review this page periodically to stay informed about how we safeguard your information.

10. Contact Information & Data Protection Officer

If you have any questions, concerns, feedback, or data privacy requests, you can contact the developer and data controller directly: