Privacy
Iris stores only what she needs to run in a Discord server.
What is stored
- The server ID, server name, a custom prefix, and which commands a manager turned off.
- A live alert for one server: the YouTube channel ID and name, whether alerts for it are on, the Discord channel that server chose, and the video ID of a stream that was already announced there. A manager of that server can change this list on the dashboard.
- The dashboard session: user ID, display name, avatar, and the Discord OAuth token. The session lives in Redis and expires.
- The server count and a heartbeat time, for the status on the home page.
What is not stored
Message text is read only to recognize a command. Message text, attachments, and chat history are not written to the database.
Song titles and YouTube links are read to play audio in the voice channel. Audio and voice-channel contents are not stored.
Discord permissions
The bot uses the Guilds, Guild Messages, Message Content, and Guild Voice States intents. Message Content is required so the prefix can be read. Guild Voice States tells Iris which voice channel you are in. Message Content is enabled in the Developer Portal. The server permissions requested on invite are View Channels, Send Messages, Embed Links, Read Message History, Connect, and Speak.