Privacy Policy
🔐 Zero-Knowledge Architecture: This bot implements client-side encryption and zero-knowledge storage. We cannot see, access, or decrypt your PIVX addresses.
1. Information We Collect
The PIVX Discord Tip Bot collects and stores minimal information necessary for its operation:
1.1 Data Stored
| Data Type | What We Store | How It's Protected |
|---|---|---|
| Discord User ID | Hashed identifier | HMAC-SHA256 hashed, cannot be reversed |
| Discord Username | Encrypted username | AES-256-CBC encrypted client-side |
| PIVX Address | Encrypted address | AES-256-CBC encrypted client-side |
| Timestamps | Creation/update times | Stored in plaintext for record keeping |
1.2 Data We DO NOT Collect
- Private keys or seed phrases
- Transaction amounts or history
- IP addresses
- Email addresses
- Personal identification information
- Discord messages or chat history
- Browsing behavior or analytics
2. How We Use Information
The collected information is used solely for:
- Address Association: Linking encrypted PIVX addresses to hashed Discord user identifiers
- Service Functionality: Displaying addresses when users request tips
- Data Management: Allowing users to update or delete their information
3. Zero-Knowledge Storage
Our zero-knowledge architecture ensures maximum privacy:
3.1 Client-Side Encryption
- All sensitive data is encrypted in the Discord bot before transmission
- Encryption uses AES-256-CBC with a secure key
- The server receives only encrypted data
- Decryption occurs only in the Discord bot client
3.2 User ID Hashing
- Discord User IDs are hashed using HMAC-SHA256
- The hash is deterministic but cannot be reversed
- Even if the database is compromised, user identities remain protected
Important: We have no ability to decrypt or view your actual PIVX addresses. If you lose access to your Discord account, we cannot recover your associated address.
4. Data Storage and Security
4.1 Storage Location
- Data is stored in a SQLite database on the server
- The database contains only encrypted and hashed information
- No plaintext sensitive information is ever stored
4.2 Security Measures
- Industry-standard encryption (AES-256-CBC)
- Secure key derivation using SHA-256
- Regular security updates and patches
- Limited server access controls
5. Data Sharing and Disclosure
We do not sell, trade, or share your information with third parties.
Encrypted data may only be disclosed in the following circumstances:
- When required by law or valid legal process
- To protect against illegal activities or suspected fraud
- To protect the safety of the service or its users
Note: Even in these cases, we can only provide encrypted data as we have no means to decrypt it.
6. Your Rights and Controls
6.1 Access Your Data
You can view your stored address at any time using the /tipaddress command in Discord.
6.2 Update Your Data
You can update your PIVX address at any time using the /tipaddress command and selecting "Update Address".
6.3 Delete Your Data
You can permanently delete all your stored information using the /tipaddress command and selecting "Delete Address".
6.4 Data Portability
Your PIVX address remains under your control. You can retrieve it at any time before deletion.
7. Data Retention
- Data is retained as long as you actively use the service
- You can delete your data at any time
- If the service is discontinued, users will be notified to retrieve their addresses
- No automatic data expiration is implemented
8. Children's Privacy
This service is not intended for users under the age of 13. We do not knowingly collect information from children under 13. Users must also comply with Discord's age requirements.
9. International Data
The service may be accessed from various countries. By using the service, you consent to the processing of encrypted data regardless of your location.
10. Third-Party Services
The bot integrates with:
- Discord: Subject to Discord's Privacy Policy
- MyPIVXWallet: Optional integration for funding tips (no data shared)
11. Cookies and Tracking
This service:
- Does not use cookies
- Does not track user behavior
- Does not use analytics services
- Does not collect usage statistics
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the updated policy.
13. Contact Information
For privacy-related questions or concerns about this policy, please contact the bot administrators through the Discord server where the bot is deployed.
14. Data Breach Notification
In the unlikely event of a data breach:
- Affected users will be notified through Discord if possible
- Due to encryption, actual PIVX addresses would remain secure
- We will provide guidance on any recommended actions
Last Updated: 2025-10-13
Effective Date: 2025-10-13
This privacy policy explains how the PIVX Discord Tip Bot handles your information with a focus on privacy and security.