CatchCryptoBot Privacy Policy
Effective date: November 1, 2026
1. Summary
CatchCryptoBot collects only what it needs to run its features: Discord IDs, your alert and server settings, and wallet addresses you choose to link. We do not sell your data, show ads, or use analytics or tracking cookies. You can remove most of your data yourself with bot commands, and you can ask us to delete all of it at support@catchcryptobot.com. The Service is operated by Christopher A. Jones, an individual in Texas, USA.
2. What we collect and why
| What | Details | Why | How long we keep it |
|---|---|---|---|
| Price alerts | Your Discord user ID, the token, above or below, target price, status, and when it was created and fired | To send you the alert by DM | Until you remove it. Removed alerts are deleted right away, and fired alerts 30 days after they fire. |
| Watchlist | Your Discord user ID, the coins you added and when, and the hour and on or off setting for your daily DM | To show your watchlist and send the daily DM you asked for | Until you remove the coins or use /delete-my-data |
| Quiz scores | Your Discord user ID, the server, which posted quiz you answered, whether your first answer was right, and when | To keep the server's monthly quiz leaderboard and your streak | 90 days, then deleted |
| Linked wallets | Your Discord user ID, the Ethereum address you linked, and when | To recognize your donations and thank you | Until you remove it with /wallets or /unlink-wallet |
| Donations | The sending address, asset, amount, estimated US dollar value, transaction ID and block, and your Discord user ID if the address is linked | To thank donors and keep an accurate donation record | Kept 5 years as a financial record, then deleted. The transfer itself is permanently public on the Ethereum blockchain. |
| Donate requests | Your Discord user ID, the server where you ran /donate, and when | To thank you in the right server | Deleted after 7 days |
| Donor privacy choice | Your Discord user ID and whether you chose to be anonymous | To respect your choice | Until you ask us to delete it |
| Server settings | Server ID, which features are on, chosen channel and role IDs, last update time, which days a tip was posted, and the scheduled price posts, server price alerts and whale alerts admins set up (coin, channel, schedule, target or minimum size, and optional role) | To run the features admins turned on | Deleted as soon as the bot is removed from the server |
| Server activity log | For each server: the time and type of what the bot did there, such as a price post, a price alert or a removed scam link, with the channel, the coin and the blocked domain. It holds no user IDs and no message text. | To show server admins on the dashboard what the bot did in their server | 30 days, then deleted. Deleted right away if the bot is removed from the server. |
| Dashboard sign-in | Through Discord sign-in (scopes "identify" and "guilds"): your user ID, display name, avatar, and the name, ID and icon of servers you can manage | To let you manage your servers' settings | 7 days, or until you sign out. Your Discord access token is never stored. |
| Server logs | Error logs that may include Discord user and server IDs, and web server logs that include IP addresses and browser type | To keep the Service secure and fix problems | 30 days, then deleted |
| Backups | A daily copy of the database | To recover from failures | 14 days on the server, plus up to 30 days for offline copies |
3. Messages in your server
To catch scam links, Discord sends the bot the text of messages in channels it can see. The bot checks message text for links only in servers where an admin turned scam protection on. It does not store message text. When it removes a message, it posts a short notice in that channel that mentions the sender. If the admins set a log channel, it also posts the sender, channel and blocked domain there. Those posts live in your server on Discord. Our own activity log for that server keeps only the channel and the blocked domain for 30 days, never the sender or the message text.
Server admins can also turn on member safety tools. With the new-member link hold, the bot uses the time you joined the server to remove links you post in your first hours or days, and posts a short note that mentions you. With impersonator watch, the bot compares the names of members who join or rename against the names of the server's staff and the bot, and flags close matches to staff. With /report, the message you paste and the sender name you give are posted to the server's staff channel. Those posts live in your server on Discord. Our activity log keeps only that one of these happened, the channel, and for a report any blocked domain, for 30 days.
4. Public posts
If a server turned on donation thank-yous, a donation from a linked wallet can be announced in that server with your display name and the amount, and you may get the Supporter role. Choose /donor-privacy anonymous:true to be thanked without your name or the role. Named thank-yous include a link to the transaction on Etherscan, where anyone can see the sending address. Anonymous thank-yous do not include that link, but the transfer is still public on the blockchain.
If you answer a daily quiz, your server display name and your number of correct answers this month can appear on that server's quiz leaderboard, which members see with /quiz-scores and admins see on the dashboard. Answering is optional, and your scores are deleted after 90 days or when you use /delete-my-data.
5. Who we share data with
We do not sell, rent or trade your data, and we do not share it for advertising. Only the operator has access to the database and logs.
- Discord runs the platform the bot works on. Its Privacy Policy covers what Discord itself collects.
- Bluehost hosts our server and database in the United States.
- Market data providers (Coinbase, CoinGecko, DexScreener) receive the token name or contract address you look up, including the coins on your watchlist. They do not receive your Discord identity from us.
- Etherscan receives our donation address so we can see incoming donations, our requests for the current gas price, and the contract addresses you check with /rugcheck. It does not receive your linked wallets or your Discord identity from us.
- GitHub serves the MetaMask phishing list we download. No user data is sent.
- Other public sources (the alternative.me Fear and Greed index and public government scam alert feeds from the FTC and IC3) are downloaded by the bot. No user data is sent.
- Link destinations. Buttons that open Coinbase, CoinGecko, DexScreener, Etherscan or Bubblemaps take you to their sites, where their own privacy policies apply.
- Legal reasons. We may disclose data if the law requires it, or to protect users, the Service or others from harm or fraud.
6. Cookies
The dashboard uses one cookie, ccb.sid, to keep you signed in. It is strictly necessary and expires after 7 days. We use no analytics, advertising or tracking cookies.
7. Your choices and rights
- See or remove linked wallets: /wallets or /unlink-wallet
- Remove an active alert: /alert remove
- Remove watchlist coins or turn off the daily DM: /watchlist remove or /watchlist daily
- Change how you are thanked: /donor-privacy
- Sign out of the dashboard: the Sign out button
- Delete everything we hold about you: run /delete-my-data. To get a copy, correct something, or delete by request instead, email support@catchcryptobot.com with your Discord username, or message us in the support server. We will answer within 30 days.
- Removing the bot from a server deletes that server's settings right away.
We cannot erase anything on a public blockchain. When you ask us to delete your data, we remove the link between your Discord account and your donations in our records. Depending on where you live (for example the EU, UK or California), you may have more rights under local law, including the right to complain to a data protection authority.
8. Legal basis (EU and UK users)
We process data to provide the Service you asked for (contract), to keep it secure and prevent scams (legitimate interests), and, for linked wallets and public thank-yous, because you chose to (consent, which you can withdraw at any time). Our servers are in the United States, so your data may be handled outside your country.
9. Security
The dashboard uses HTTPS, signed session cookies and protection against cross-site requests, and it never stores your Discord access token. No system is perfectly secure, and we will tell affected users if a breach puts their data at risk, as the law requires.
10. Children
The Service is only for people 18 and older. If you think someone under 18 has given us data, contact us and we will delete it.
11. Changes
We will post any update here and change the effective date. For material changes we will also post a notice in our support server.
12. Contact
Privacy questions and requests: support@catchcryptobot.com.