In short —
- The bot stores your Discord user ID, your Steam ID, your saved presets and a record of what it did for you.
- Steam sign-in happens on Steam's own site. We receive your Steam ID and nothing else.
- This website sets no cookies and has no analytics, ads or trackers.
- We do not sell your data or use it for advertising.
- You can ask staff in our Discord server for a copy of your data, or to have it deleted.
Who we are
Herbie Army ("we", "us") is a community project. We run Herbie Battleground, a game server for The Isle Evrima; the Herbie Army Discord server; a Discord bot that saves and restores dinosaur presets; and this website, herbiearmy.com. Together these are "the services".
This policy covers the services. It does not cover Discord, Steam or The Isle themselves, which have their own privacy policies.
What we collect
When you use the bot in Discord
| Data | Where it comes from | Why we need it |
|---|---|---|
| Discord user ID and server ID | Discord sends them with every command you run and every button you press. | To know who is asking, and to find your account link and your presets. |
| Your roles in our Discord server | Discord sends them with each command. | To check whether you may use a command. They are checked at that moment and not stored. |
| Steam ID | Steam, when you sign in through the link the bot gives you; or a member of staff who links you by hand. | To match your Discord account to your character on the game server. |
| Account link details | Created by the bot when the link is made. | How the link was made, who made it, when, and when it was replaced. This lets us sort out a wrong or disputed link. |
| Presets | Read from the game server when you run /save. |
The species, growth, gender, mutations and prime status of your dinosaur, the time it was saved, and the Discord ID of whoever saved it. Earlier versions of a preset are kept as a history. |
| Activity record | Written by the bot as it works. | The time, your Discord ID, what was done (for example a link made, a preset saved, loaded or deleted, admin rights granted), the Steam ID or preset it was done to, and how it ended. This is how we investigate problems and misuse. |
| Restore operations and one-time tickets | Created by the bot when you load a preset, press a confirmation button or start a Steam sign-in. | To carry out the action once, for you only. Tickets stop working after a few minutes. |
With each command Discord also sends the bot your username, display name and avatar. The bot does not store them.
When you sign in with Steam
The bot sends you to Steam's own sign-in page. You sign in there, not with us, and we never see your Steam password. Steam then tells us one thing: your 17-digit Steam ID. We check that answer with Steam directly before believing it. We do not receive your Steam profile, friends, games or purchase history.
When you play on Herbie Battleground
The game server sees your Steam ID and in-game name, as every game server you join does. The game writes its own logs, which include joins and leaves, chat messages, kills and deaths, and the admin commands that were used. When you run a bot command, the bot also asks the game server for the list of players online and for the current state of your own dinosaur.
When you visit this website
The site is plain pages. It sets no cookies and loads no scripts, fonts or other files from anyone else. Cloudflare, which hosts it, handles your IP address and the usual request details (the page asked for, the time, your browser type) in order to deliver the page and to protect against abuse.
The bot's own address, bot.herbiearmy.com, keeps short-lived technical logs with Cloudflare: the time and path of each request, and any errors.
What we do not collect
- The bot does not read messages in the Discord server. Discord only sends it the commands and button presses that are meant for it.
- We do not ask for or receive your email address, real name, payment details or passwords.
- We do not build advertising profiles, and we do not buy data about you from anyone.
How we use it
- To provide what you ask for: linking your account, saving, listing, restoring and deleting your presets, and granting in-game admin rights where the community offers them.
- To make sure a preset is only restored onto the dinosaur of the player who owns it.
- To keep the game server and the Discord server fair: investigating misuse, enforcing the rules and settling disputes.
- To find and fix faults.
Where the law asks for a legal basis, ours is that the data is needed to provide the service you asked for, and our legitimate interest in keeping the community secure and fairly run. We do not make decisions about you by automated means that have legal or similarly significant effects.
Who else handles it
We do not sell your data or share it for advertising. It is handled by the following, each for the purpose stated:
| Who | What for |
|---|---|
| Cloudflare | Hosts this website, runs the bot and stores its database. |
| Discord | Delivers your commands to the bot and shows you its replies. |
| Valve (Steam) | Confirms your Steam ID when you sign in. |
| GameHostBros | Hosts the Herbie Battleground game server, including its logs. The bot sends the game server commands that contain your Steam ID. |
Herbie Army staff can see account links, presets and the activity record when they need to in order to run the community. We may also disclose data when the law requires it, or to protect someone's safety.
How long we keep it
- Account link. Kept while it is in use. When a link is replaced, the old one is marked as ended and kept, so that we can still tell which Steam account a preset was saved under.
- Presets. Kept until you delete them.
/preset deletetakes a preset out of use at once; its earlier versions stay in our database until you ask us to erase them. - Activity record and game server logs. Kept for as long as they are useful for running the community and settling disputes.
- One-time tickets. They stop working within minutes and cannot be used twice.
- Technical logs. Kept by Cloudflare for a short period that Cloudflare sets.
We have not yet set automatic deletion periods for the items above. When we do, they will be listed here. In the meantime you can ask us to erase your data at any time; see the next section.
Your choices and rights
- See your presets: run
/presets. - Delete a preset: run
/preset delete. - See or change your link: run
/link, or ask staff to remove it. - Get a copy of your data, correct it, or have it erased: ask staff in our Discord server. We will need to confirm the request comes from the Discord account concerned. We aim to answer within 30 days.
If we erase your data, your presets cannot be recovered. We may keep the minimum needed to enforce a ban or to meet a legal duty.
Depending on where you live, the law may give you further rights, such as objecting to or restricting how your data is used, or complaining to your data protection authority. We will honour those rights however you raise them with us.
Security
Every request from Discord is checked against Discord's signature before the bot acts on it. A Steam sign-in is only accepted after Steam confirms it to us directly. Sign-in links work once, for one member, and expire after ten minutes. The bot's credentials are stored as secrets, not in its code, and only staff who need the data can reach it.
No system is perfectly secure. If we learn of a breach that affects your data, we will tell the community in our Discord server.
Where it is processed
The bot and this website run on Cloudflare's network, which operates in many countries. The game server is hosted in the United States. If you use the services from elsewhere, your data will be processed outside your own country.
Children
The services are not directed at children under 13, or under the minimum age at which Discord may be used in your country if that is higher. We do not knowingly collect data from anyone below that age. If you believe we have, tell staff and we will delete it.
Changes
When we change this policy we will update the date at the top of the page, and announce any change that matters in our Discord server.
Contact
Message a member of staff in the Herbie Army Discord server. That is where privacy requests and questions about this policy are handled.