Privacy Policy
Last updated November 15, 2026
This explains what Bums (bums.consulting, its API, and the “bum's counselor” Discord bot) collects and what happens to it. Short version: we keep what's needed to run a chat app, we don't sell anything, and we don't run ads or trackers.
What we store
- Account: username, email, display name, and a hashed password (we never store your password itself). If you sign in with Google, we store your Google account ID, name, email and profile picture link.
- Profile: avatar, bio, banner color, status and custom status you set.
- Content: messages you send, servers and channels you create or join, friend requests, and images you upload.
- Discord bridge: for linked Discord channels, the bot stores copies of new messages there: the text, the author's Discord display name and avatar link, attachment links, and the Discord message ID (so edits and deletes can be synced). It doesn't read channels that aren't linked and doesn't store Discord tokens or emails.
- Technical: short-lived server logs (request path, status, time) used to keep things running. Your login token is kept in your browser's local storage.
What we don't do
No ads, no analytics trackers, no selling or renting data. Voice and video calls aren't recorded, and their audio and video aren't stored by Bums.
Who else is involved
Bums relies on a few services that process data on our behalf:
- Google Firebase: Google sign-in.
- LiveKit: carries voice, video and screen share in real time.
- Cloudflare: DNS and the secure tunnel to our API server.
- Vercel: hosts the website.
- Discord: only for channels a server owner chooses to bridge.
Each has its own privacy policy. We share only what each needs to do its job.
Who can see your stuff
Messages in a server are visible to its members (and to the linked Discord channel, if bridged). DMs are visible to you and the other person. Your profile is visible to people who share a server or DM with you, or who you're friends with. The people running Bums can technically access the database to keep it working and to handle abuse reports.
How long we keep it
We keep your data while your account exists. Deleted messages are removed from the database. If you ask us to delete your account, we delete your profile and account details; messages you sent in shared servers may be kept but shown as from a deleted user, unless you ask for those to be removed too.
Your choices
You can edit your profile and delete your own messages at any time. To get a copy of your data or have your account deleted, contact the Bums admins. To stop the Discord bridge, a server owner can run /bums unlink or remove the bot from the Discord server.
Kids
Bums isn't meant for children under 13, and we don't knowingly collect their data.
Changes
If this policy changes, we'll update the date at the top.
Contact
Privacy questions or requests: message the Bums admins, or reach us through the Discord server the bot is in.