MEDIA

CONTACT

IMPRINT

BLOG

PROJECTS

RESEARCH

ABOUT

HOME

INSTAGRAM - TWITTER - FACEBOOK - YOUTUBE

INSTAGRAM - TWITTER - FACEBOOK - YOUTUBE

Notice: This document applies exclusively to the Discord application "Augustus" (the "Bot"). It does not apply to the website davidfischer.dev or to any other service.

PRIVACY POLICY //

Last updated: 2026-10-28

1. Controller

David Fischer, 87439 Kempten, Germany — theupsider@gmx.de.

2. Scope

This policy applies only to the Bot, not to the website. For the Discord platform itself (your account, messages at Discord) Discord is separately responsible.

3. Data, purposes and legal bases (per purpose)

  • Answering your messages: Discord identifiers, message content and the context needed — Art. 6(1)(f) GDPR (legitimate interest: operating a private assistant). See section 6 for how long context is kept.
  • Operational security, abuse defence, error analysis: technical metadata (IDs, timestamps, error codes) — Art. 6(1)(f) GDPR. Logs: 7 days; security-relevant at most 30 days.
  • Legal obligations (e.g. answering data-protection requests) — Art. 6(1)(c) GDPR.

We do not specifically collect special categories (Art. 9, e.g. health, religion); if you send such data voluntarily, we process it to answer you based on your explicit consent (Art. 9(2)(a) GDPR) and delete it on request.

4. AI processing

To generate replies, your messages are transmitted to and processed by a language model. Reply generation takes place in Germany; we do not use a language-model provider outside Germany. Your content is not used to train models.

5. Recipients

Discord (separately responsible, its own privacy policy). Where we use service providers to operate the Bot, they act as processors under Art. 28 GDPR. We do not share your data with third parties for their own purposes.

6. Retention

Conversation context needed to answer you is used while the session runs. For operations and security, session transcripts are archived for a limited period — up to 60 days — and then deleted. Individual messages may also feed the assistant's derived memory; such excerpts are kept until you ask for deletion. Technical logs: 7 days; security-relevant at most 30 days. Records of data-protection requests: up to 3 years (limitation period). Data held at Discord itself cannot be deleted by the Bot — that is Discord's responsibility.

7. Objection and rights

You may object at any time to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR) — write to theupsider@gmx.de. You also have the right to access (Art. 15), rectification (16), erasure (17), restriction (18), portability (20), and withdrawal of consent (Art. 7(3)). We reply within one month as a rule. You have the right to complain to a supervisory authority (Art. 77), including the Bavarian DPA (BayLDA), Ansbach.

8. Not mandatory

You are not obliged to provide data; without messages the Bot simply cannot answer you.

9. What does NOT happen

No selling, no advertising, no tracking, no cookies (§ 25 TDDDG not triggered), no shadow profiles, no automated decision-making with legal effect (Art. 22 GDPR), no disclosure to authorities without a legal basis.

10. Security

Reasonable technical and organisational measures (Art. 32 GDPR), including transport encryption and access control.

11. Changes

The current version is always published here, with the date above.

ENGINEER // DEVELOPER // DESIGNER // RESEARCHER // CREATOR //