Privacy policy
This page explains which data the YATB website and the YATB Discord bot process, why, and for how long.
1. Who is responsible
Contact details of the operator will be added here.
2. This website
- The information pages use no cookies, no tracking, no analytics and no external fonts or scripts.
- To deliver the pages, your browser's IP address and request are processed briefly by the web server. The web server does not keep access logs.
- The website runs on a server of Oracle Cloud in Frankfurt (Germany). HTTPS certificates come from Let's Encrypt; no visitor data is shared for this.
- Links to other sites (Discord, Ko-fi, providers) are normal links - their privacy policies apply there.
Dashboard (login with Discord)
- At
/appyou can log in with Discord. YATB only receives your Discord user ID and name (scopeidentify). Discord's access token is revoked right after login and never stored. - A session cookie (
yatb_session, valid 7 days) keeps you logged in; during login a second cookie protects against forged logins for at most 10 minutes. Both are technically necessary and are not used for anything else. - Stored on our server: a hash of the session token, your Discord ID, display name, language and the expiry date - deleted when you log out or after 7 days.
- Whether you may manage a server is checked by the bot directly with Discord on every request. Changes you make are reported in that server's log channel with your name.
3. The Discord bot
YATB only processes messages in channels that the admins of a server linked to a bridge.
| Data | Purpose | Kept for |
|---|---|---|
| Message text and display name | Translation; sent to the translation services of the server (see 4). AI providers also get up to 4 previous messages of the conversation as context. | Not stored. Held in memory only while translating; the context of recent messages is lost on every restart. |
| Message IDs and a checksum of the text | Mirroring replies, edits and deletes to the translations | 7 days |
| Your user ID and your privacy choice | Respecting /yatb-user privacy on every server | Until you ask for deletion |
| Usage statistics: server, service, languages, number of characters, duration, result - no text, no user IDs | Limits, costs, reliability of the services | 90 days, after that only daily totals per server |
| Server settings: bridges, log channel, encrypted API keys, ID of the admin who added a key | Running the bot on the server | Until removed, /yatb reset or /yatb uninstall |
| Encrypted backups of the data above (never message texts) | Recovery after errors | 14 days on the server, 30 days in Oracle Object Storage (Frankfurt) |
4. Translation services
The admins of each server decide which services translate their messages. Messages of members with Local only are only translated by LibreTranslate on our own server. On servers run by the operator, the operator's own paid accounts are used.
| Service | What the provider says |
|---|---|
| Google Gemini | Only keys with billing enabled - the free tier may not be used for users in the EEA, the UK or Switzerland. Paid tier: Google does not use the content to improve its products; prompts are logged for a limited time to detect abuse. Processed by Google worldwide. Provider's privacy information |
| Mistral | Mistral AI (France). No training on your content - except where a product setting allows it: in the Mistral console under Privacy, switch off the use of API data for improvement. The free plan may use data for training unless you opt out. A DPA is available, zero data retention on request. Provider's privacy information |
| Groq | By default Groq does not keep inference data; logs for troubleshooting or abuse are kept up to 30 days. Zero data retention can be switched on for everyone under Data Controls. Data is stored in the USA. Provider's privacy information |
| Novita | According to its terms: zero data retention and no training on your content by default. Usage metadata is kept up to 2 years; data may be processed in the USA (SCC). A DPA only for enterprise customers. Governed by the law of Delaware, USA. Provider's privacy information |
| Google Translate | The text is only held in memory for the translation and is not used to train or improve Google's translation. Processed by Google worldwide. Provider's privacy information |
| Azure Translator | Text translation does not store the text ("no trace"). YATB uses the global endpoint, so requests may be processed in any Microsoft data center, usually the nearest one. Provider's privacy information |
| LibreTranslate | Runs on our own server in Frankfurt (Germany). Nothing is sent to third parties. |
5. Discord
Messages are written and shown on Discord. Discord processes them under its own privacy policy.
6. Legal basis
Art. 6(1)(f) GDPR - our legitimate interest, and the interest of the server communities, in multilingual communication and in a secure, reliable service. Your choice of Local only limits the processing to our own server.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object, and you can complain to a data protection supervisory authority. To exercise your rights, contact the operator (section 1). In Discord, /yatb-user privacy lets you choose Local only at any time.
Last updated: 2026-10-20
This text is available in several languages. If the versions differ, the German version applies.