1. Information we process
Riffly may process your Discord user ID, username, avatar, guild membership and permissions needed to provide the dashboard. We may also store server configuration, playlists, liked songs, listening history, queue snapshots, and service analytics created through your use of Riffly.
2. Discord OAuth
When you sign in with Discord, Riffly uses Discord OAuth to authenticate you and determine which servers you can manage. Authentication sessions are maintained using server-side session data and HTTP-only cookies.
3. How information is used
- Authenticate users and enforce server permissions.
- Provide playback, playlists, history, recommendations, and dashboard features.
- Remember guild-specific music settings and preferences.
- Measure reliability and feature usage, diagnose errors, and protect the service from abuse.
4. Cookies and sessions
Riffly uses essential session cookies to keep you signed in and secure OAuth flows. These cookies are used for service functionality and security rather than advertising.
5. Third-party services
Riffly depends on services such as Discord, database and hosting infrastructure, Lavalink nodes, and music or metadata providers. Information necessary to perform a requested feature may be processed by those providers under their own policies.
6. Data retention
Data is retained for as long as reasonably necessary to operate Riffly, maintain user features, protect the service, and meet applicable obligations. Some user-generated library or server configuration data may remain until it is removed or no longer needed.
7. Security
We use reasonable technical measures such as authenticated APIs, restricted sessions, access checks, and secure transport in production. No online service can guarantee absolute security.
8. Your choices
You can stop using Riffly, remove the bot from a Discord server you control, revoke Discord authorization, and request assistance with eligible stored data through Riffly’s official support channels.
9. Children and unlawful use
Riffly is intended to be used consistently with Discord’s eligibility requirements and applicable law. Do not provide information through the service where you are not permitted to do so.
10. Changes and contact
This policy may be updated as Riffly’s features and providers change. Questions or privacy requests can be submitted through Riffly’s official support channels.