Privacy Policy

Overview

ForgeFeed (“ForgeFeed,” “we,” “us”) is a Discord bot that streams GitHub activity into Discord as embeds. This policy explains what we collect, why, and the choices you have. We collect only what is needed to deliver the service, and we design for least privilege.

Information we collect

To operate trackers and route updates to the right place, we store:

• Discord identifiers: server (guild), channel, role, and user IDs involved in your configuration (for example, the channel a tracker posts to or the user who submitted an issue).
• GitHub App installation data: the installation IDs you link, the repositories you grant access to, and public repository metadata (commits, pull requests, issues, workflow runs, releases, stars) needed to build embeds.
• Configuration you set: which trackers are enabled, thresholds, allowed roles, and board contents you create.

What we do not collect

• Discord message content. The bot runs with minimal permissions and does not read your messages.
• GitHub passwords or personal access tokens.Linking uses GitHub's official GitHub App flow; credentials are never requested or stored.

How we use information

• To authenticate to GitHub as a GitHub App and fetch the activity you track.
• To post and update embeds in the Discord channels you choose.
• To enforce plan limits and send the alerts you configure.
• To keep the service reliable by pausing failing trackers and reconciling missed webhook deliveries.

Data storage & security

Configuration and the minimal identifiers above are stored in our database. GitHub webhook payloads are cryptographically verified before processing, embed content is sanitized against injection, and web endpoints are rate-limited. Per-installation GitHub tokens are minted on demand and cached only as needed. All data is scoped per server, so one server can never see or affect another's data.

Data sharing

We do not sell your data. Information is exchanged only with the platforms required to provide the service: Discord (to post messages) and GitHub (to read the activity you track), under their respective terms.

Data retention & deletion

You control your data. Remove individual trackers with the matching /remove… commands, run /unlinkgithub to remove all GitHub links from a server, or remove the bot entirely. GitHub access can also be revoked at any time from your GitHub settings. When you unlink or remove ForgeFeed, the associated configuration is deleted.

Children's privacy

ForgeFeed is intended for users who meet Discord's minimum age requirement. It is not directed at children under that age.

Changes to this policy

We may update this policy as the service evolves. Material changes will be reflected by the “last updated” date above.

Contact

Questions about privacy? Reach us in the support server.