This policy explains what information ShortRex collects, how it is used, and the choices you have. ShortRex is a Discord bot, a web dashboard, and a URL shortening service operated by Arpan S ("we", "us"). It applies to anyone who uses the bot in a Discord server, signs in to the dashboard, or opens a ShortRex short link.
ShortRex is not affiliated with or endorsed by Discord, YouTube, Spotify, SoundCloud, or Razorpay.
1. Information we collect
When you use the bot in Discord
- Your Discord user ID and username.
- The ID and name of the server and channel where you ran a command.
- What you send with a command, such as a URL to shorten, a custom slug, or a music search.
ShortRex does not read the content of ordinary messages. Unrelated messages in your server are never collected, stored, or logged.
Short links you create
For each short link we store the destination URL, the short code, the date it was created, and a tag that links it to your Discord user ID so that only you can view its stats or delete it.
People who open a short link
When anyone opens a ShortRex short link, including people who don't use Discord, our link service records the time of the visit, the browser's user agent, the referring page, an approximate location (country and city), and an anonymised form of the IP address. This is used to show visit statistics to the person who created the link.
Music playback
The queue holds each track's title, link, length, thumbnail, and the username and profile picture of the
person who requested it, whether it was added in Discord or from the web dashboard. The queue is kept in memory only and is
cleared when the bot leaves the voice channel. We also store the ID of the last text channel where
/play was used in each server, so the bot knows where to post notices about music changes made
from the web dashboard.
The web dashboard
-
You sign in with Discord. We request the
identifyandguildspermissions. We store your Discord user ID, username, profile picture link, account tier, and the dates your account was created and updated. Your profile picture link is refreshed each time you sign in. We do not receive your email address or password, and we do not store your server list. - We set a single session cookie to keep you signed in for up to 7 days. We do not use analytics, advertising, or tracking cookies.
- The dashboard loads fonts from Google Fonts, and profile pictures and server icons from Discord's image servers. Both receive your IP address as part of those requests.
Payments
If paid tiers are offered, payments are handled by Razorpay. We receive and store the payment, order, and subscription IDs, the amount, the currency, the status, and the date. We never see or store your card, UPI, or bank details. Razorpay handles them under its own privacy policy.
Error reports
If a command fails, we record the error together with the command name, your username and user ID, and the server and channel name. These details are sent privately to the operator through Discord so the problem can be fixed.
2. How we use your information
- To run the bot's features: shortening links, showing link stats, and playing music.
- To check who created a link before showing its stats or deleting it.
- To apply your account tier and process payments.
- To post a notice in the server when someone controls music from the web dashboard. The notice includes that person's username and what they changed.
- To find and fix bugs, and to prevent abuse of the service.
We do not sell or rent your information, and we do not use it for advertising or profiling.
3. Who we share it with
We only share information as needed to run the service:
- Discord, which carries all bot messages and handles dashboard sign-in.
- YouTube, Spotify, and SoundCloud, which receive the music searches and links you submit. These requests come from our server and do not include your Discord identity.
- Razorpay, if you make a payment.
- Our hosting provider, which stores the servers the service runs on.
- Authorities, where we are required to by law.
The link-shortening service is run by us, not by a third party.
4. How long we keep it
- Short links and their visit statistics are kept until the link is deleted.
- Dashboard account records are kept until you ask us to delete them.
- Payment records are kept for as long as tax and accounting laws require, even after your account is deleted.
- Session cookies expire after 7 days or when you log out.
- Music queues are cleared when playback stops, after 2 minutes with nothing playing, or after the voice channel has been empty for 5 minutes.
- Error and activity logs are kept only as long as needed to fix problems, and are deleted periodically.
5. Your choices and rights
- You can delete any short link you created at any time with the
/deletecommand. - Server admins can stop all data collection in their server by removing the bot.
- You can ask us for a copy of your data, or ask us to correct or delete it. We will respond within 30 days.
These rights apply under the data protection laws that cover you, including India's Digital Personal Data Protection Act, 2023.
6. Security
The dashboard is served over HTTPS, and the bot's control interface is reachable only from the server it runs on. We take reasonable steps to protect your information, but no online service can be completely secure.
7. Children
ShortRex is not intended for children under 13 or below the minimum age to use Discord in their country. If you believe a child has given us personal information, contact us and we will delete it.
8. Where data is processed
Your information may be processed outside your country, including where our servers and service providers are located.
9. Changes to this policy
When we update this policy we will change the effective date above. For significant changes, we will also post a notice on the dashboard.
10. Contact
For privacy questions or data requests, contact Arpan S:
- Email: shortrex@sen.li
- Discord: message the operator at their Discord profile