People First Design

Privacy Policy

We build with people-first principles: clear purpose, minimal data, and user choice. This notice covers the Voltus website and Discord bot.

Who We Are

Voltus IDE is developed and operated by the Voltus maintainer team. For the purposes of data protection law, we are the data controller responsible for your personal information collected through our services.

What We Collect

Website: Vercel Web Analytics captures privacy-first metrics (page views, referrer, device type, country) without cookies or cross-site tracking. Basic server logs may include IP and user-agent for security.

Discord OAuth & Downloads: When you log in on the download page we receive your Discord username, ID, and a list of guilds to verify Voltus server membership. We store a short-lived `oauth_state` cookie (10 minutes) and a signed `voltus_session` cookie (up to 6 hours) to keep you signed in. When you request a download, our server verifies your session cookie and checks your Discord ID against our access-control list before delivering the file. The download file location is stored as a server-side environment variable and is never exposed to the browser or included in any client-side code.

Discord Bot: The bot processes command content and Discord IDs to respond. We do not permanently store message content; transient processing logs are minimized and purged during routine maintenance.

How We Use Data

- Provide authentication for gated downloads, confirm server membership, and deliver download files through authenticated server-side requests.
- Enforce access controls, including verifying session cookies and maintaining a list of Discord user IDs that are permitted or restricted from downloading the IDE.
- Keep our services secure, debug issues, and understand high-level usage through Vercel Web Analytics.
- Operate the Discord bot and deliver requested responses.

We do not sell or rent your data. We only share data with Discord (for OAuth and bot interactions) and Vercel (hosting and analytics) as processors.

Legal Basis for Processing

We process your personal data on the following lawful bases:

- Legitimate interest: to operate and secure our services, including verifying server membership and enforcing access controls.
- Contract performance: to provide you with the services described in our Terms of Service, including authenticated downloads.
- Legal obligation: where we are required by law to process or retain data.

Your Choices & Controls

- You can revoke Voltus access in your Discord Authorized Apps at any time.

- Delete cookies in your browser to clear the signed session; the session expires automatically within 6 hours.

- Use a browser with tracking protection; Vercel Web Analytics is cookie-free and respects your privacy by design.

- Contact us for questions or removal requests; we will confirm and respond promptly.

- To request full deletion of your Voltus account and associated data, DM a moderator in our Discord at discord.gg/N4B8CRKFW8. We will respond within a reasonable timeframe and may ask for verification to confirm your identity before processing your request.

Retention

- oauth_state cookie: up to 10 minutes.
- voltus_session cookie: up to 6 hours.
- Access control list (Discord user IDs for permitted or restricted access): retained for as long as the restriction or permission is in effect, and removed when no longer needed.
- Analytics: aggregated, no personal identifiers.
- Bot processing logs: transient and cleared during routine maintenance.

Data Sharing & Security

We use HTTPS everywhere, sign session cookies, and validate OAuth state to prevent CSRF. Access to any operational logs is restricted to maintainers and used only to secure and operate the service.

Children

Voltus is not directed to children under 13. If you believe a child has used our services, contact us in our Discord server so we can delete related data.

International Data Transfers

Your data may be processed in countries outside your own, including where our hosting provider (Vercel) and Discord operate. Where required by applicable law, we rely on appropriate safeguards for these transfers, such as standard contractual clauses approved by regulatory authorities, adequacy decisions, or other legally recognized transfer mechanisms.

Your Legal Rights

Depending on your location, you may have rights under data protection laws (such as GDPR, CCPA, or similar regulations), including the right to:

- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your personal data.
- Restrict or object to processing of your data.
- Data portability (receive your data in a structured, commonly used format).
- Withdraw consent at any time, where processing is based on consent.

To exercise these rights, please contact us through our Discord server. We will respond to valid requests in accordance with applicable law.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.

Updates

We may update this policy as features change. We will update the "Last updated" date below and highlight material changes.

Last updated: 15 February 2026

Questions? Reach us in the Voltus Discord at discord.gg/N4B8CRKFW8.