CATCH Privacy Policy
Effective date: 4 November 2026
1. Who we are and what this covers
CATCH is operated by Christopher Jones, doing business as CATCH, an individual in Texas, USA ("we", "us"). This policy covers the website at thecatchbots.com, its dashboard and sign-in, its support tickets, the Bots' donation commands and subscriptions, and every CATCH Discord bot, current or future, when you use it. "Bot" and "Service" mean what they mean in our Terms of Service. Where a Bot needs something extra, its page says so, and that addition applies to that Bot only.
We do not sell your data, show ads, or use analytics or advertising cookies.
2. Summary
- We collect what each part of the Service needs to run.
- Subscriptions are paid through Discord. We do not receive or store your card or bank details.
- You can delete your data, or ask what we hold, at any time (section 8).
3. What we collect
Support tickets. The bot the ticket is about, the topic, your email address, your Discord username and server ID if you give them, the subject, your message, and the time you sent it.
Older CatchTunes support tickets opened in Discord before the CATCH ticket desk existed (your user ID, username, topic and messages) are kept until 90 days after they were closed; /deletemydata removes them. The notifications about those tickets, and the old CatchTunes contact-form messages, that CatchTunes sent to the operator by Discord direct message or to a staff channel are deleted 90 days after they were sent. CatchTunes checks for them every 6 hours. If a deletion fails (for example, a Discord error), it tries again at the next check; if CatchTunes can no longer reach the channel or the message, the message stays until the operator deletes it.
Dashboard sign-in. If you sign in to the Website dashboard or a Bot's dashboard with Discord, we receive your user ID, name and picture, and the servers you are in. We keep your ID, name and picture, and the list of servers you are in (on the Website, CatchCrypto and CatchFocus dashboards, only the servers you own or manage; on the CatchTunes dashboard, every server you are in, with the permission level you hold there), so we can show you the servers you can set up. The Website dashboard keeps this for 30 days or until you sign out; a Bot's dashboard keeps it for 30 days or until you sign out. We do not keep your email or any Discord password. The Website and each Bot's dashboard set one cookie that keeps you signed in. The Website also sets a short-lived cookie during sign-in that guards against forged logins. Each Bot's dashboard does the same with its one cookie: when you start signing in, it keeps a short pre-login session that guards against forged logins; it works for at most 15 minutes, holds only random check codes and when it started and ends (and, on the CatchCrypto and CatchTunes dashboards, the dashboard page to take you back to), and is deleted soon after. The Website's cookies go away when you sign out or after 30 days, and each Bot's dashboard cookie goes away when you sign out or after 30 days. If you sign out of a Bot's dashboard other than CatchTunes from an old page after your session has already ended, the browser keeps the unused cookie until it expires, at most 30 days after the dashboard last set it; it can no longer sign anyone in. When you sign out of all devices on the CatchCrypto dashboard, or use /delete-my-data while signed in to it, CatchCrypto keeps your user ID and the time for 30 days, so that a session from before then cannot be used again.
Bot settings and preferences. The server ID, the server's time zone (CatchFocus), which features are on, the channel and role IDs that admins choose, when settings changed, and the preferences you set with a Bot's commands. Your Discord user ID is kept with them.
Bot activity. Price alerts, watchlists, quiz answers and suggestions you make with CatchCrypto commands, and the songs you queue or add to playlists with CatchTunes, are kept with your Discord user ID. If you turn on the daily watchlist message, we keep the hour you chose and whether it is on. When you use /donate, we keep which server you used it in for 7 days, so a later donation can be thanked there. Play history and activity logs are kept 30 days, quiz answers 90 days, and fired price alerts 30 days. Donation records (the sending address, asset, amount, time, and your user ID if you linked a wallet) are kept 5 years for accounting. When you send a suggestion, it is posted in our community Discord server with your display name and the rough size of the server you sent it from; the bot keeps only your user ID and the time for 24 hours, to limit how many you can send a day. When you donate, servers that turned donations on may post a thank-you with your name and a link to the transaction, unless you choose to donate anonymously with /donor-privacy.
Focus activity (CatchFocus). When you are in a CatchFocus focus room or session, CatchFocus keeps your Discord user ID with: the times you joined and left the voice channel; in a room an admin marked camera-required, the times your camera was off (it checks only whether your camera is on, never the video); your visits to always-on rooms and the focus time credited to each; the focus goal you type for a session and whether you marked it done; and your daily totals per server (minutes, finished blocks and goals hit), which make your stats, streaks and the leaderboards. It also keeps, with your user ID: whether you hid yourself from a server's leaderboard; whether you turned focus pings off; the custom presets you save (their names and timer settings); the servers where you turned the weekly DM on, and the last week it handled; the milestone hours (10, 50 or 100) whose role you were given, and when; the personal rooms you own and, while you have one locked, the earlier Connect permissions of the members and roles it changed; the sessions you started, as their host; and, when an admin with a CatchFocus Pro subscription opens /focus settings, that admin's user ID and the time (the 5 most recent per server, so the server stays Pro). Join and leave times, camera-off times, visits and their focus credit are deleted 90 days after the session ended, or in an always-on room 90 days after you left. Goals, daily totals, presets and your other CatchFocus choices are kept until you use /delete-my-data. When CatchFocus leaves a server, it deletes that server's rooms, leaderboard hiding, weekly DM list, milestone roles and awards, Pro admins and camera-required rooms.
Subscriptions. For a paid feature, we receive from Discord your user ID, the server the subscription applies to, the plan, and whether it is active, renewing or cancelled. We check it with Discord and keep the result in memory for up to 5 minutes; we do not store payment details.
Donations and wallet links. If you donate in crypto, the transaction is on a public blockchain and anyone can see it. If you link a wallet with a command so we can thank you, we store the wallet address and your Discord user ID, and you can remove it with /unlink-wallet or the Remove button under /wallets.
Logs and backups. Error logs may include Discord user and server IDs. Web server logs may include IP addresses and browser type. Logs are kept for no longer than 30 days. We keep a daily copy of each database on the server for the last 14 days, to recover from failures. The operator may also copy these backups to an offline computer; offline copies are kept for no longer than 30 days. Data you delete stays in these copies until they are deleted, so for at most 30 days.
IP addresses. The Website keeps an IP address only in memory, for a short count to stop spam (at most 5 tickets an hour); that count is forgotten when the server restarts. The Website and each Bot's dashboard also keep, only in memory, the IP address that sign-in attempts come from (for an IPv6 address, often only the network it belongs to), to limit how many times one address can try to sign in within a few minutes. After those few minutes it no longer counts; it is removed from memory when that address next tries to sign in, when newer addresses take its place, or when the server restarts (for CatchCrypto, the web server in front of it), whichever comes first.
We do not collect data from the Bots beyond what the features on this page need.
4. Messages in your server
Bots answer slash commands and buttons, and do not store the text of your messages unless a feature says so. When a server admin turns them on, the CatchCrypto features read messages and members' names: scam-link protection checks links against the public MetaMask phishing list, removes messages with a listed domain, and posts a short notice in the channel and a line in the server's mod log; a new-member link hold removes links posted by recent members during a window the admin chooses; an impersonator watch compares member names and nicknames with staff names and flags look-alikes to staff; and when a member uses /report, the text they paste, who they say sent it (if they give that), and any known scam domain found in it are sent to the server's staff channel with the reporter's ID. CatchTunes does not read your server chat. CatchFocus does not read your server chat either: in a focus room it sees who is in the voice channel and whether their camera is on, and when a session started with /focus start ends, posts a summary in that channel with the names, focus time and goals of the people who took part. In personal and always-on rooms, it sends you a summary of your own session or visit by direct message instead (and, if you turned it on, the weekly DM with last week's hours, your streak and your best day). A direct message to the bot gets an automatic reply pointing to the ticket desk and is not stored.
5. How we use it
- To run the features that server admins turned on, and to remember your choices.
- To manage subscriptions and show your paid features.
- To answer support tickets, send you a copy of your ticket, and fix problems.
- To keep the Service secure and prevent abuse.
Support tickets from the Website are posted to a private staff channel in the CATCH Discord server, as well as emailed to you and to our support mailbox. Suggestions are posted in our community Discord server for staff and members to read.
We never sell your data or use it for advertising.
6. Who we share it with
We share data only with the services that run the Service:
- Discord, which the Bots, the sign-in, and subscription payments run on;
- our hosting provider for the server;
- our email provider, for ticket emails;
- our community Discord server, where support tickets and suggestions are posted for staff;
- CatchTunes, when a server turns lofi on in CatchFocus (only the server ID and voice channel ID are sent);
- YouTube and YouTube Music, which CatchTunes searches and plays music from (through yt-dlp, from our server): they receive the search text you type, the YouTube links you play or import, and the song titles and artists CatchTunes looks up, including those from a playlist you import;
- LRCLIB, for lyrics: it receives the song's title, artist, album and length;
- price, token and link data providers used by CatchCrypto, which receive requests but no personal data.
We may share data if the law requires it.
7. How long we keep it
- Support tickets sent through the ticket desk on the Website: deleted automatically 90 days after you send them.
- Older CatchTunes support tickets opened in Discord: deleted automatically 90 days after they were closed.
- CatchTunes ticket notifications and contact-form messages sent to the operator by Discord direct message or to a staff channel: deleted 90 days after they were sent; a failed deletion is tried again every 6 hours, and a message CatchTunes can no longer reach stays until the operator deletes it.
- Emails about tickets: kept in our support mailbox until we delete them.
- Website dashboard sign-in and cookies: 30 days or until you sign out.
- Bot dashboard sign-in and cookies: 30 days or until you sign out (a cookie left by signing out from an old page stays in your browser until it expires, at most 30 days, and no longer works).
- CatchCrypto's record of when you signed out of all devices or used /delete-my-data: 30 days.
- Subscription checks: in memory for up to 5 minutes.
- Play history and activity logs: 30 days. Quiz answers: 90 days. Fired price alerts: 30 days.
- Donation records: 5 years, for accounting.
- CatchFocus voice join and leave times, camera-off times, always-on visits and their focus credit: 90 days after the session ended (in an always-on room, 90 days after you left).
- CatchFocus goals, daily totals, saved presets, weekly DM choice, milestones, leaderboard hiding and pings choice: until you use /delete-my-data (the server-linked ones also go when CatchFocus leaves that server).
- Error and web server logs: no longer than 30 days.
- Backups: daily copies on the server for 14 days; offline copies for no longer than 30 days.
8. Your choices
- Use a Bot's delete-my-data command (/deletemydata in CatchTunes, /delete-my-data in CatchCrypto and CatchFocus), or in CatchTunes the My data page of its dashboard, to delete the data that Bot holds about you. It also signs you out of that Bot's dashboard. Server playlists and play history that other members still use stay, with your user ID removed; donation records stay for accounting (section 7), with your user ID removed; CatchFocus sessions you started and personal rooms you own stay, with your user ID removed.
- For Website dashboard data (your sign-in), sign out and email us.
- Sign out of the dashboard to end your session at once.
- Remove a Bot from your server to stop it collecting anything there.
- Cancel a subscription in Discord's subscription settings.
- Link a wallet with /link-wallet and remove it with /unlink-wallet or the Remove button under /wallets.
- Email catch@thecatchbots.com from the address you used to see, correct or delete anything else. We answer within 30 days.
9. Cookies
The Website and each Bot's dashboard set one cookie that keeps you signed in. The Website also sets a short-lived cookie during sign-in that guards against forged logins; each Bot's dashboard uses its one cookie for the same check while you sign in; that check works for at most 15 minutes. The Website's cookies go away when you sign out or after 30 days; each Bot's dashboard cookie goes away when you sign out or after 30 days. If you sign out of a Bot's dashboard other than CatchTunes from an old page after your session has already ended, the browser keeps the unused cookie until it expires, at most 30 days after the dashboard last set it; it can no longer sign anyone in. We use no other cookies.
10. Security
Data is stored on private servers and only the operator can reach it. No system is perfectly secure, so we cannot promise absolute protection.
11. Children
Dashboards, subscriptions, donations and wallet links are for people 18 and older. Server members must meet Discord's minimum age for their country. If you think someone younger has given us data, contact us and we will delete it.
12. Future Bots and features
This policy applies to every new Bot and feature the same way. If a new Bot or feature needs data this policy does not describe, we will update this policy before it starts collecting that data and change the effective date.
13. Changes
We will post any change to this policy on the Website and update the effective date.
14. Contact
Privacy questions and requests: catch@thecatchbots.com, or the CATCH ticket desk at https://thecatchbots.com/#ticket.
