Skip to main content

Privacy Policy

Effective Date: December 2025

Echo of Dreams ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services, including our web application and Discord bot integration.

1. Information We Collect​

Discord Account Information​

When you authenticate with Discord, we receive and store:

  • Your Discord user ID (unique identifier)
  • Your Discord username and display name
  • Your Discord avatar URL
  • Your email address (if authorized)
  • List of Discord servers (guilds) you share with our bot

User-Generated Content​

We store content you create or send through our services:

  • Chat messages sent to our AI assistant (via Discord or web interface)
  • Conversation history for context continuity
  • Custom prompts and configurations you create

User Settings and Preferences​

We store settings you configure, including:

  • AI model preferences
  • Custom API keys (stored with encryption when server encryption is enabled)
  • Server-specific and channel-specific configurations
  • User interface preferences

Technical Information​

We automatically collect certain technical data:

  • Access timestamps and session information
  • Error logs for debugging and service improvement
  • Browser type and device information (non-identifying)

Usage Statistics​

We collect aggregated usage statistics to understand how our service is used:

  • Feature usage patterns (which features are accessed and how often)
  • Message counts and conversation metrics (aggregated, not content)
  • Performance metrics (response times, error rates)
  • AI model usage statistics (which models are selected)

Local Storage and Cookies​

We use browser local storage to maintain your session and preferences:

  • Authentication tokens (to keep you logged in)
  • User preferences and UI settings
  • Session state information
  • Form drafts (unsaved form data, stored locally until submitted or cleared)
  • Cookie consent preferences (your choices are remembered)

Analytics Cookies​

If you consent to analytics cookies, we use Google Analytics 4 to understand how our service is used. This helps us improve the user experience. Google Analytics may collect:

  • Pages visited and navigation patterns
  • Time spent on pages
  • Device and browser information
  • Approximate geographic location (country/city level)

We use Google Consent Mode v2, which means analytics data is only collected if you explicitly accept analytics cookies through our consent banner. You can change your cookie preferences at any time by clearing your browser's local storage for this site.

2. How We Use Your Information​

We use your information to:

  • Provide our services: Enable AI conversations, maintain conversation context, and deliver personalized responses
  • Authenticate you: Verify your identity through Discord OAuth and maintain your session
  • Respect your preferences: Apply your chosen AI models, API keys, and configuration settings
  • Improve our services: Analyze usage patterns and statistics (in aggregate) to enhance functionality, optimize performance, and fix issues
  • Monitor service health: Track performance metrics, error rates, and usage statistics to ensure reliable operation
  • Communicate with you: Respond to support requests and provide service-related notifications

3. What We Don't Do With Your Data​

Our Commitment to You

We believe in transparency and respect for your data. Here's what we will never do:

  • We do NOT train AI models on your data. Your conversations, messages, and content are never used to train, fine-tune, or improve any AI models. Your data stays yours.
  • We do NOT sell your data. Your personal information, conversation history, and usage data are never sold to third parties under any circumstances.
  • We do NOT share your data for advertising or marketing. We don't provide your information to advertisers, data brokers, or marketing companies.
  • We do NOT read your messages without cause. We don't manually review your conversations except when required for critical technical debugging (with your consent) or legal compliance.
  • We do NOT contact you outside of Discord. We will never email, message, or contact you through any platform other than Discord without your explicit permission.
  • We do NOT mine or scrape Discord data. In unbound Discord channels (where no character is bound), messages are fetched fresh for each interaction and are not stored. Message retention only occurs in channels where a server administrator has explicitly used the /character bind command to enable persistent conversations.
  • We do NOT retain Discord data indefinitely. Discord messages in bound channels are subject to automated retention policies (see Data Retention section). When you delete your account or request data deletion, we remove your data from our systems. Note: Web chat conversations are retained until you request deletion.
  • We do NOT circumvent Discord's Terms of Service. We operate in full compliance with Discord's Developer Terms of Service, API Terms of Service, and Community Guidelines.

4. Third-Party Services​

Discord​

We integrate with Discord for authentication and bot functionality. When you use our Discord bot or log in with Discord, your data is also subject to Discord's Privacy Policy. We only access Discord data that you authorize through the OAuth consent screen.

AI Service Providers (LLM Services)​

To provide AI-powered conversations, we transmit your messages to third-party AI service providers. We support multiple providers, and the active provider can be configured per user or per server:

  • OpenRouter (default) - Routes requests to various AI models (Claude, GPT-4, Gemini, etc.)
  • Anthropic - Direct access to Claude models
  • OpenAI - Direct access to GPT models
  • Custom provider - User-configured endpoints for self-hosted or alternative AI services

When you send messages to our AI assistant:

  • Your messages are transmitted only to your selected AI provider
  • If you or your server administrator provides a custom API key, requests are made using that key according to the provider's terms
  • We share this data with AI providers as service providers necessary for application functionality, in accordance with Discord's Developer Policy

Each AI provider has their own data handling policies. Please review the privacy policies of your selected provider:

Google Analytics​

With your consent, we use Google Analytics 4 to collect anonymized usage statistics. Google Analytics helps us understand how visitors interact with our website so we can improve the user experience. Google may transfer your data to servers in the United States. For more information, see Google's Privacy Policy.

5. Data Storage and Security​

Where Your Data Is Stored​

Your data is stored in a SQLite database on our server infrastructure. SQLite is a local, file-based database that keeps all data on the same server where the application runs. This means:

  • Single location: Your data resides on our application server, not distributed across multiple cloud services
  • No third-party database services: We do not use external database providers that would have independent access to your data
  • Server location: Our hosting provider and server location may change as our service evolves. By using Echo of Dreams, you consent to your data being stored and processed where our services operate

Security Measures​

We implement reasonable security measures to protect your information:

  • Encryption: Sensitive data such as API keys can be encrypted at rest when server-side encryption is configured
  • Secure transmission: All data is transmitted over HTTPS/TLS
  • Access controls: Database access is restricted to authorized services and personnel
  • Token security: Authentication tokens are securely generated and validated

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Data Breach Notification​

In the event of a data breach that affects your personal information, we will make reasonable efforts to notify affected users through the contact information we have on file (such as your Discord account or email if provided). We will also take appropriate steps to investigate and remediate the breach.

6. Data Retention​

We retain your data as follows:

  • Account data: Retained while your account is active
  • Conversation history: Subject to automated retention processing (see below); you may also request manual deletion
  • Settings: Retained until you modify or delete them
  • Logs: Technical logs are retained for a limited period for debugging purposes

Automated Message Retention​

In accordance with Discord's Developer Policy, we do not retain data longer than necessary for the operation of our application. We run scheduled maintenance to automatically process and delete messages that exceed the retention period:

  • Retention period: Up to 90 days by default, with a minimum of 30 days. This period is necessary to provide conversation continuity and context for AI responses
  • Summarization before deletion: Before messages are deleted, they are processed by AI to create summaries that capture essential conversation context
  • Mandatory deletion: After the retention period expires and summarization completes, original message content is permanently removed from our databases. We do not retain message content beyond what is necessary
  • Memories: Only summaries are retained long-term as "memories" to maintain conversation continuity without storing individual messages

Customizing Retention Settings​

Retention periods can be configured at multiple levels:

  • Server (guild) level: Discord server administrators can set a retention period for all channels in their server
  • Channel level: Individual channel retention can be configured to override server settings
  • User level (DMs): For direct message conversations, you can set your preferred retention period in your user settings. This applies to your DM conversations with our bot

If no custom setting is configured, the default 90-day retention period applies. Contact a server administrator to request changes to server-level retention settings.

7. Your Rights​

You have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your personal data and account
  • Portability: Request your data in a portable format
  • Withdraw consent: Revoke Discord OAuth authorization at any time through Discord's settings

To exercise these rights, please contact us using the information provided below.

8. Age Requirement​

Echo of Dreams is intended for users 18 years of age or older. While the service is not explicitly adult-oriented, AI-generated content may include mature themes. We do not knowingly collect personal information from anyone under 18.

Our service requires Discord authentication, and our Discord application is age-gated for 18+. Users must also comply with Discord's Terms of Service. If we learn that we have collected personal information from someone under 18, we will take steps to delete that information.

9. Changes to This Policy​

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Effective Date" at the top. We encourage you to review this policy periodically.

10. Contact Us​

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us on Discord: @shailleen

By using Echo of Dreams, you acknowledge that you have read and understood this Privacy Policy.