GDPR Privacy Notice

Last updated: September 6, 2026

1. Scope 2. Legal Basis for Processing 3. Data Controller 4. Your Rights Under GDPR 5. International Data Transfers 6. Retention 7. Right to Complain

Scope

This notice applies to individuals located in the European Economic Area (EEA) and United Kingdom whose data is processed through use of Tuna, supplementing the general Privacy Policy.

Legal Basis for Processing

Tuna processes Discord IDs and server-scoped data (warnings, economy balances, XP, configuration) on the basis of legitimate interest — operating the moderation and community features a server administrator has chosen to enable — and, where applicable, the performance of a service requested by the server (i.e., adding and configuring the bot).

Data Controller

For data processed within a specific Discord server, that server's administrators act as the data controller for how Tuna is configured and used in their community. The operator of Tuna acts as a data processor with respect to the underlying bot infrastructure.

Right to access — request a copy of data associated with your Discord user ID.
Right to rectification — request correction of inaccurate data.
Right to erasure — request deletion of your data (see caveats below).
Right to restrict or object to processing.
Right to data portability — request your data in a structured, commonly-used format.

To exercise any of these rights, contact support through the resources listed on tunabot.app. Some data (e.g. moderation case history a server has an independent interest in retaining) may be subject to legitimate retention needs, which will be explained if a deletion request is limited.

International Data Transfers

Because Tuna operates over Discord's global infrastructure, data may be processed in countries outside the EEA. Discord's own data processing terms govern transfers at the platform level; Tuna's own bot-hosting infrastructure is disclosed in the Privacy Policy and updated if it changes.

Retention

See the "Data Retention" section of the Privacy Policy — the same retention periods apply under this GDPR notice.

Right to Complain

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority.