← Return to Home

Karma Cloud Privacy Policy

Last Updated: February 26, 2026

At Karma, community safety and data privacy are our primary objectives. We collect only the minimal forensic data necessary to detect alternate accounts and prevent community abuse.

1. Introduction

We are committed to safeguarding your privacy. This policy explains what forensic data we collect, how it is pseudonymized, and your rights under the GDPR and UK GDPR. This policy applies to the Karma Discord bot and the Karma Vault web portal.

2. What Data We Collect

When you interact with our services, we collect data through the following triggers:

• Identity Mapping: We collect your Discord User ID and Username during standard bot interactions to manage Karma balances, ranks, and server progression.
• System Interactions: We log usage of specific bot features and commands to analyze activity patterns and detect automated or fraudulent behavior.
• Forensic Signatures: When you access our web-based portals (such as the Vault Terminal), we collect your hashed IP Address and basic hardware/browser configuration to verify device integrity and detect ban evasion.

3. How We Secure Your Data

To ensure the highest level of privacy, we utilize "Privacy by Design" principles. We do not store raw, identifiable IP addresses or hardware strings in plain-text.

• One-Way Cryptographic Hashing: Sensitive identifiers are instantly converted into a unique "Forensic Hash" (SHA-256) before being committed to our database.
• Result: This process allows us to detect matching fingerprints across multiple accounts for security purposes without actually knowing your real IP address.
• Restricted Access: Your data is never shared with third parties, sold, or used for advertising. It remains exclusively within our encrypted shard.

4. Your Rights

Under GDPR, you have the right to request access to or deletion of your stored forensic shards. To exercise these rights, please contact the server administrator via the bot's support menu.