Rumpus Privacy Policy

Last updated: October 8, 2026

1. Who I am

Rumpus is a Discord app. It's run by one person, David Windle Jr., in Tennessee, USA. In this policy, "I" and "me" mean that person. Rumpus isn't made by Discord and Discord doesn't endorse it.

Questions, deletion help, or something wrong? Contact me here: #support in the Rumpus Discord server (https://discord.gg/9sBxqRvvZa).

2. What the app does with your data

Rumpus helps friends see when they're around, so plans happen faster. You can say "I'm down" with /down, and your circle can see it. If you choose to share voice, online status or message times, the app notes that those things happened and when. Online status also notes the game you're playing. From that it works out things like your usual hours and the best time for your group. Once a year it can put together a Wrapped, a look back at your year. A server can also switch on an opt-in leaderboard.

There's a raccoon buddy too. It grows when you say hi and when you go to a plan, and it's yours alone: nobody else sees it. /rumpus opens your private home screen with a button for everything, so you don't have to remember commands. It only shows what you could already see: whether you're down, who's down in your server (the same people /whosdown shows you), your next plan, your buddy and who's in your circle. It saves nothing of its own: each button, and each choice in its More menu, does what the matching command does and saves only what that command would. My circle, for example, is /circle add, /circle remove and /circle mode. Two right-click shortcuts (or long-press on your phone), under Apps, do jobs you can already do with commands: Ping me when they're down on a person is /alert person, and Plan this on a message opens the plan form. They save only what the same command would.

That's the whole job. It doesn't read what you or anyone else says in chat. The one exception is when you right-click a message (or long-press on your phone) and pick Plan this: Discord hands Rumpus the words of that one message, and Rumpus uses them to fill in the plan form (see 4.6).

This policy applies however you added the app: to a server, or to your own apps.

3. When anything gets recorded

None of your activity is recorded until you finish /optin. The one thing that can exist before that is your Discord ID on another person's circle list (see 4.3).

Setup is one pop-up form. It starts with a tick box, "I'm 13 or older", and the form won't send without it. After that it asks for your time zone, who can see you (your circle), what you want to share, and which DMs you're OK with. Nothing in it is filled in for you. Nothing is saved until you send the form, and closing it saves nothing. Quiet hours and picking friends for your circle come after you send it, as buttons. If Discord won't open the form, setup runs as a set of short steps instead, with the same questions and the same rule: nothing is saved until the last step.

The three DM choices are asked as three questions in /settings and in the step version of setup: "Get a recap every Monday and on the 1st by DM?", "Let people in your circle set alerts on you?" and "Can people in your circle send you plans and free-time cards by DM?". In the setup form they're three tick boxes ("DM me a recap", "Let my circle set alerts on me" and "Let my circle DM me plans and cards"), and none starts ticked. A box you leave unticked is a no, and each one stays off unless you tick it. (In the step version each question needs a tap on yes or no.) All three are in /settings and /privacy too, so you can change them any time.

You opt in per server. Voice, online status and message times are only noted in servers you opted in to, and only the ones you switched on.

The app sits in every server it's added to, so Discord sends it events about everyone there. It throws away the events of anyone who hasn't opted in, doesn't share that signal, or has paused.

4. What I collect

4.1 When you set up

4.2 Signals you can switch on (per server, all off at the start)

• Voice: when you join or leave a voice channel (which channel, and when). Not audio, not what's said, not who else is in there.
• Online status: when your status changes between online, idle, do not disturb and offline. It also notes the name of the game you're playing, when you start and stop (only "Playing" activities). Game names come with online status. There is no separate switch for them.
• Message times: that you posted, in which channel, and when. At most one note per channel every 5 minutes. Never the words.

Discord shows "invisible" as offline. If you join voice or post while you look offline, the app can tell you're active. It marks that activity as "invisible" and hides it from everyone else (see section 6).

4.3 Things you do on purpose

• Check-ins: when you said you were down, how long, and an optional note (up to 100 characters).
• Usual free times: the blocks you tap in /usual.
• /free posts: the times, where you posted, and who got it by DM.
• Plans: the title, the time, who made it, who said In, Maybe or Out, and which reminders went out. If someone invites you, that invite is saved with the plan, even before you answer. If you start a plan with Plan this on a message, the message's words are only saved if you send the form, and then only as the title (see 4.6).
• Alerts you set: who or what you're watching for, your cooldown and snoozes, when it went off, whether the DM got through, and whether you joined voice within 30 minutes of the DM (only your own join, used for the trial counts). You can set an alert on a person with /alert person or by right-clicking them (or long-pressing on your phone) and picking Ping me when they're down. It's the same alert with the same rules, and it's saved the same way.
• Recap settings, and a note that a recap or a Wrapped went out (not what was in it).
• Leaderboard sign-ups: which server's leaderboard you joined, and when. Nothing else. The numbers on a board come from your hourly summaries when someone looks at it.
• Your buddy: a raccoon, made the first time you open /today or tap Say hi. Until then nothing is saved for it. It holds your own settings and counts and nothing about anyone else: whether the buddy is on, your weekly goal (1, 2 or 3 hangs), how many days have counted, its stage, your weeks in a row with the goal and your best, one banked free week, the last week that was closed out, how many goal weeks you've hit in all, and an on/off setting for a feature that's off at launch (Kit visits). When the oldest days are deleted (see the next bullet), a few numbers and a date are saved here first, just enough to keep your run of weeks with a hang the same. Numbers and a date, nothing else.
• Your buddy's shelf: up to seven keepsakes for your own milestones: your first hello, the first plan you went to that someone else also said In to, your 1st, 5th and 10th goal week, and your buddy reaching its third and fourth stage. Each is saved once, with the date you earned it on your own clock, and nothing else: not who you were with, where, or what time. /down and alerts never earn one. They stay until you run /forget-me, even after the days that counted are deleted.
• Hellos and the days that counted: one short note for each day that counted, as a yes or no for each of two things: you said hi, or you went to a plan. A plan counts when you answered In, at least one other person did too, and it started and wasn't cancelled (the day your buddy hatched counts too). A plan only you are In to never counts. It never says who else was there, or where. A hello is private. It adds to a day that counted and nothing else: nobody is told, it never shows you as down, and it never sets off an alert. The count only goes up. /down and alerts never count and never go in here. These notes are kept for the 13 full months before the current one (in October 2026, back to September 2025), and then deleted in whole weeks.
• Your weekly goal: 3 hellos and 1, 2 or 3 hangs a week (you pick), Monday to Sunday in your time zone. A hang is a plan you went to with at least one other person In. How each finished week went is kept as the weeks in a row and your best, in your buddy's settings. Only you see it.
• The daily buddy DM (off until you turn it on): if you tap "DM me this daily" and pick an hour, I save the hour and a note for each day one went out, so a restart never sends two. I also save the last time you used any Rumpus command or button, but only while your daily DM is on and only if you have a buddy, so the DM can pause itself (see section 5). Turn the DM off and it stops being updated. Nothing else uses that time.
• Your circle list: the Discord IDs of the people you pick. That can include someone who hasn't set up the app yet. Nothing else is saved about them, and they see nothing until they set up themselves.

4.4 Worked out from the above

• Hourly summaries. For each person, server and hour: minutes in voice, minutes online, how many message times, how many check-ins started, and minutes checked in as down. Activity from while you were invisible goes in separate rows.
• Best times, stat cards, your /today card, recaps, Wrapped, leaderboards and the community best time. Made when someone asks (recaps, Wrapped and the daily buddy DM when they're due). The cards and messages go to you or where you tell the app to post them. I don't keep copies. The community best time and a leaderboard's numbers are worked out from the hourly summaries when someone looks.
• Your hours with the squad. In a recap or Wrapped, that's how much of your voice time had someone from your mutual circle in the call too, as one number with no names. It's worked out when the recap or Wrapped is made (for Wrapped, as a close estimate from the hourly summaries), shown to you, then thrown away. There is no saved table of who hangs out with who. The only records that involve two people are ones people made on purpose: circle lists, alerts, plan invites and answers, /free posts and who got them, and the short note a cancelled plan leaves until the people on it have been told.
• Your buddy's room on the /rumpus home: a picture drawn when you open it, from your own clock and date, your buddy's stage and your shelf. Only you see it, and it isn't saved.

4.5 What I never collect

• What you type or say. No message text, no edits, no attachments, no reactions. Plan this is the one thing close to it, and what it gets isn't kept unless you send the form, as your plan's title (see 4.6).
• DMs or group DMs between people. Bots can't see them. The one exception is Plan this: if you added Rumpus to your own apps and pick it on a message in a DM or group DM, Rumpus gets that one message's words the same way (see 4.6).
• Custom status text, Spotify, streams, or any other activity detail. Only the game name above.
• Voice audio, camera or screen shares.
• Your email, phone number, birthday, real name or address. Your time zone is the only place-type detail.
• Payment details. Nothing is for sale right now, and if that changes, Discord takes the payment, not me.
• Your friends list on Discord.
• Anything about servers where you didn't opt in.

4.6 Seen but not kept

Discord sends the app live info about people in servers it's in: names, avatars, who's online, custom statuses. The app uses what it needs and throws away the rest. Discord's software library keeps some of it in the computer's memory while the app runs. None of that goes into the database. Discord also lets apps see messages sent straight to them or that @mention them. Rumpus doesn't read or keep those.

There's one time Rumpus uses a message's words, and you start it: Plan this. Right-click a message (or long-press on your phone), pick Apps, then Plan this, and Discord hands Rumpus the words of that one message, only then, and only that message. It doesn't use a message's words any other way. It uses the words once, to fill in the Make a plan form: the plan's title, and a time if the message plainly says one (like "sat 8pm"). Mentions, channel tags and long ID numbers are left out, and the title is cut to 100 characters. Rumpus doesn't save the words and doesn't write them in its logs. They only go anywhere if you send the form, and then they're your plan's title, saved like any title you type (see 4.3). If the message was somebody else's, those are still their words, and the people you invite will see them in the title, so pick a message you're happy to share with them. Close the form and they're gone. A message with no words, like a picture, opens the form empty.

4.7 Your data export (/import)

You can attach the zip from Discord's "Request your data". The app reads it in memory, makes your card, and lets go of it. It saves nothing from the file: no copy, no numbers, no names. It only looks at when you sent messages, not what they said. Before it will post the card in a channel, it checks that the account details in the file (account/user.json) are yours. The file passes through Discord when you attach it, and Discord's own rules cover that copy. You have to be opted in to use it.

4.8 Steam (only if you link it)

Linking Steam is optional. If you run /steam link, the app uses the Steam Web API to look at your Steam online status and the game you're playing, about every couple of minutes. It only gets a status or a game if your Steam profile and game details are public. To prove the account is yours, the app gives you a short code to put in your Steam profile name for a minute, and you take it out afterwards.

The app saves your Steam ID and when you linked it. While you're linking it also keeps the code and its 30-minute expiry. It notes your Steam status and game names the same way it does for Discord online status: only if you have "Online status" on, and only in servers you opted in to. If you look offline on Discord, your Steam activity is treated as invisible, so nobody sees it unless you turned on "Visible to my circle while invisible". Steam only feeds who's-around, game alerts and squad alerts. It doesn't go into best times or cards, and it isn't used for the top game in your Wrapped (that comes from Discord only). /privacy shows a Steam line while you're linked. /steam unlink stops the checks and removes the link. Steam records already saved stay until their 90 days are up or you run /forget-me.

4.9 Logs

The app keeps a rolling log file for fixing bugs. It's four files at most, about 1 MB each, so about 4 MB in total, and when they're full the oldest lines are overwritten. Log lines hold no usernames, no Discord ID numbers and no server or channel names. They say what went wrong, or give counts. The app also hides anything shaped like a Discord ID before it writes a line. They never hold message text, and the app's login keys are hidden too. So there's nothing in the logs for /forget-me to delete.

4.10 Paid features (switched off right now)

Paid features are built but switched off. Nothing is for sale and the app never asks anyone to pay. If they're turned on later, Discord tells me which server or person has a subscription. I store that, with its dates, and nothing about payment details. For a server subscription, that's the server, not who paid. For a one-time personal purchase, it's the person. /forget-me removes a person's record, and removing the app from a server removes that server's.

4.11 Kit's place (optional)

Kit's place is a small screen inside Discord (a Discord Activity) that shows Kit's room. It's optional: nothing happens unless you open it. When you open it, Discord gives the page a one-time code. The app turns that code into your Discord ID (using Discord's identify permission, which also lets it see your name and avatar; I only use the ID) and checks you are really in that Activity. Nothing about opening it is saved: not the visit, not the time, not the taps. (The app does hold a short-lived sign-in pass in its memory, never in the database; see section 7.) It shows your own Kit, from what 4.3 already describes: its stage, whether today's hello is still waiting, and your shelf. Tapping Kit is today's hello, the same as the Say hi button, and that is the only thing it can change. The first tap on your own calendar day counts, and later ones change nothing. If you haven't set up Rumpus, or you turned your buddy off, it signs you in the same way and then just says so. The page also gets Discord's own sign-in token for you (identify only) and hands it straight back to Discord so the page counts as signed in. Nobody keeps it: the app doesn't save it, the page uses it once, and Cloudflare (see section 10) only passes it along.

5. How I use it

• To run the features you turned on: check-ins, alerts, best times, plans, cards, recaps, Wrapped, leaderboards, your buddy and your weekly goal.
• Server owners and admins with Manage Server can see counts only, like how many people opted in, how many check-ins happened this week and how many alerts went out in the last 90 days. No names. Activity from while people were invisible isn't counted. They can also switch their server's leaderboards on or off, pick the recap channel, and post the squad Wrapped.
• To fix bugs and keep the app running. I can read the database on my computer. I only open it to fix a problem, not to look up what particular people are doing.

I don't:

• sell your data, rent it out, or trade it;
• use it for ads or marketing, or give it to ad networks or data brokers;
• use it to train AI;
• use it to build a profile of you for anything outside these features;
• use it for decisions about jobs, housing, credit, insurance or anything like that;
• contact you outside Discord.

The DMs the app sends you are:

• Only if you said yes: recaps and your Wrapped. The setup form has a "DM me a recap" tick box, and it starts unticked. A yes means a weekly recap on Mondays, a monthly one on the 1st, and your Wrapped once, when it opens on December 15. /settings or /recaps settings turns recaps off any time.
• Alerts you set: you asked for those. An alert about one person comes with a Message button. It's only a link to their Discord profile, and tapping it sends nothing.
• Only if you turn it on, the daily buddy DM. It's off until you tap "DM me this daily" (on /today, or in the Buddy screen in /settings) and pick an hour from 8 AM to 9 PM your time, or whatever your own quiet hours leave open. It's one a day at most. Nothing goes out from midnight to 6 AM your time, ever, even if the app was offline and is catching up: a DM that would only go out then is dropped instead of sent late. If you haven't set quiet hours of your own, it also stays out of 10 PM to 8 AM. Quiet hours you set replace that part, and it isn't sent in them either. It has your card, a Say hi button and a Stop these button, and nothing else. No promo, no link. If you already said hi that day, it isn't sent. After five in a row where you haven't used any Rumpus command or button in between, the fifth one says once how to turn it back on, and then the daily DM pauses itself. If three in a row can't be delivered, it switches itself off. It only goes to people who share a server with Rumpus.
• One check when you make your first alert: a short DM ("Alerts land here. You're all set.") so you find out right away if your DMs are closed to the app. It goes only to you. It runs when the alert you just made is your only one, so it can run again if you delete them all and start over. It's skipped if you don't share a server with the app, because it can't DM you then and the reply to your alert already says so.
• Only if you said yes, when someone else used a command: a /free card or a plan invite. The setup form has a "Let my circle DM me plans and cards" tick box, and it starts unticked. These go only to people who have set up, whose circle includes the person who sent it, and who ticked that box. If you said no, the app sends you none of them, whoever asks. The person who asked is told the same thing whatever the reason it didn't reach someone, so it can't be used to find out who has them in a circle or who said no. A plan invite says, in the DM, that answering shows your name on the plan's channel card.
• Plan reminders, one an hour before and one 15 minutes before, only to people who said In or Maybe.
• Plan cancelled notes, to people who said In or Maybe, when a plan is cancelled. That includes a plan whose maker ran /forget-me.
• Your /export file, when you run /export.

When recaps, Wrapped and the buddy DM go out. Never between midnight and 6 AM your time, whatever you set. If you haven't set quiet hours, also not between 10 PM and 8 AM. If you have, your quiet hours replace that 10 PM to 8 AM part, and midnight to 6 AM still holds. A recap or a Wrapped that comes due in that time waits, and goes out when it's over if it's still in time. Alerts are different. They only follow your own quiet hours.

Right before an alert, a recap, a Wrapped, a daily buddy DM, a /free card or a plan invite goes out, the app checks again that the yes it depends on is still there. For a recap or a Wrapped, that's your own profile and your answer. For a daily buddy DM, it's that it's still on and that it isn't midnight to 6 AM, your quiet hours or, if you set none, 10 PM to 8 AM. For an alert, it's that the alert still exists and the person it's about still lets their circle set alerts. For a /free card or a plan invite, it's the same circle and plans-by-DM check as before. If you said no a moment ago, or ran /forget-me, it isn't sent.

A heads-up isn't a DM. If a DM didn't get through, the app puts one line in front of the private reply to your next command, once.

No ads and no promos.

6. Who can see what

Your circle. In setup you pick one of two:

• Everyone set up here: anyone who's set up in a server you're both in.
• Only people I pick: just the people on your list.

You can change it any time with /circle or /settings. The app doesn't tell people who has put them in a circle.

What your circle can see

• Your "I'm down" check-ins and notes. Always, even while you're invisible, because you posted them on purpose.
• Whether you're around (online or in voice, with a link to the voice channel). If you share online status, that includes the game you're playing right now, like "playing Valorant". Only if you share that signal, and never while you're invisible. /whosdown lists who's down, who's in voice and who's playing a game. It doesn't list someone who is only online.
• Best times and group heatmaps. These show time windows and head counts, never names.
• Your usual free times, in the best-time answers.
• Alerts: if you allow it, someone in your circle can set an alert that DMs them when you check in as down, come online, join voice, or start a game (the last three only if you share the matching signal). Only if you said yes to "Let people in your circle set alerts on you?" in setup (or turned it on in /settings). If you said no, nobody can set one. Use /privacy to see who has one on you. A yes also lets you count toward their squad alerts ("DM me when 3 of my squad are around"). That DM names the people who are around, up to 8 names and then "and N more". /privacy lists squad alerts that count you too.
• Recaps and Wrapped are sent to you only.
• Not your buddy, its room and shelf, your hellos or your weekly goal. Nobody else sees them, not your circle and not a server admin. A hello never shows you as down. /down and alerts never feed the buddy. Your card style only changes how your own cards look.
• Kit's place is private to you. Nobody else in the call can see your Kit, and Rumpus doesn't tell anyone that you opened it. Discord itself may show that you joined an Activity, the way it does for any Activity. That part is Discord's, not mine.

Invisible. If you look offline but you're active, that activity is hidden. You never show as around and you never set off an alert. If you turn on "Visible to my circle while invisible", your circle sees you as around when you're in voice, posting or playing on a linked Steam, for whatever you share. That can set off their alerts, and your invisible hours count for them in their own best times and cards, when they look at them privately. The switch is for your circle only. It never puts your invisible time in something someone else posts. It only reaches a channel in a card you post yourself (/mystats, a recap or Wrapped), and only while the switch is on. Check-ins are the one exception, because you choose to post them.

What gets posted in a channel. Nothing about you posts to a channel unless you press a button or run a command that does. There's one exception, and a server manager has to turn it on: once a recap channel is set, the server squad recap and the squad Wrapped post there by themselves. Both are totals with no names (see below).

In anything that gets posted, other people's invisible time is never counted, whatever their own switch says. Your own invisible time is in what you post only if you turned that switch on.

• /mystats Share: only your own numbers. It leaves out your invisible time unless you turned that switch on.
• /squad Share: head counts only, never names. It counts only people who said yes to "Include me in posted squad cards" (off until they turn it on), it needs at least 3, it counts only what they did in the server you post it in, and it leaves out invisible time for everyone it counts.
• Recap Share (weekly or monthly, from /recaps settings): your numbers. Your hours in voice with the squad leave out any time your friends spent invisible.
• Wrapped Share: your numbers. Your hours with the squad leave out any time your friends spent invisible.
• The squad Wrapped (/wrapped show:squad, and a post the app makes once on its own when Wrapped opens, in the channel picked with /recaps channel): totals only, no names, same rules as the server squad recap.
• A leaderboard Share: the names of the people who joined that server's board. See below.
• A /free card in a channel: your name and when you're free, because you posted it. That includes the one the Tell the channel button posts. It's under your /down reply when you're in a server, and it posts a /free card from now until your check-in ends. It only happens when you tap it, and only while you're still down. Nothing is DMed.
• A plan card in a channel lists everyone who said In or Maybe. That includes people who answered from the private invite DM, not just people who tapped it in the channel. The invite DM says so.
• The server squad recap: counts only, no names, needs at least 3 people who said yes, and leaves out invisible time for everyone it counts. Its check-in total needs 3 people who checked in.

Once something is posted in a channel, it's a normal Discord message. Anyone in that channel can see it or screenshot it, and Discord's rules apply to it.

Wrapped. From December 15 to January 10, /wrapped shows you your year so far in a few cards: hours in voice with the squad, check-ins (a plain count), your weeks with a hang (a week counts when you went to a plan you said In to and at least one other person did too), your biggest day or night, your most active month, your top game lately (if you share online status; it comes from Discord only, not Steam), and a hangout type like Night Owl or Weekend Warrior. It's worked out from your own numbers when you ask and thrown away. Only you see it, with /wrapped or by DM if you said yes to recap DMs. Your top game only covers the last 90 days, because game times are only kept that long. Steam game time doesn't count towards it.

The squad Wrapped. Totals only, no names: voice hours, hours together, check-ins and the busiest day or night. It counts only people who said yes to "Include me in posted squad cards", it needs at least 3 of them (the voice numbers need 3 who share voice, and the check-in total needs 3 who checked in), and it never counts invisible time. Anyone who has set up can look at it. Someone with Manage Server can post it. With fewer than 3 people it isn't posted.

Leaderboards. They're off until someone with Manage Server turns them on for the server, and turning them off clears everyone who joined. Even when they're on, nobody is on one until they run /leaderboard join. That's its own yes, separate from your sharing switches, and being active, sharing or being in a circle doesn't put anyone on it. /leaderboard show draws that week's voice hours for the people who joined, by display name, using only what they did in that server. Anyone in the server can look at it and post it. It needs at least 3 people with something to show, so it never shows one person's numbers on their own. Until it has that, it only says it isn't ready. It doesn't say how many people joined, or how many of them have been active. Voice hours only count if you share voice. Time you spent invisible never counts, even with "Visible to my circle while invisible" on, because the whole server can see a board. Nothing from pressing /down is ranked or counted on a board. /leaderboard leave takes you off right away. If you leave the server, or pause with /optout, you're off the board when you come back until you join again.

The community best time. /community besttime shows the best times for a voice night in the server, as time windows with head counts like "12 of 40 usually free". No names. It only counts people in that server who said yes to "Include me in posted squad cards", only what they chose to share there plus their usual free times, and it needs at least 3 of them. It never counts invisible time or another server's activity. Only the person who asked sees it. Nothing about it is saved.

Server admins can add or remove the app, pick the panel and recap channels, switch leaderboards on or off, and see the counts above. They can't see anyone's activity.

7. How long I keep things

The app applies the time limits in this table by itself. Raw activity, check-ins, alert history, /free posts, hourly summaries, the days that counted and daily-DM notes are cleaned up once a day.

Backups. Every night the app makes a copy of its database, so one bad day can't wipe everything out. The newest 14 copies are kept and older ones are deleted. A backup holds everything above as it was that night. So when something is deleted, by a time limit in this table, by /forget-me, or because the app was removed from a server, it's gone from the app right away, but a copy can stay in a backup for up to 14 days. After that it's gone for good. If I ever have to restore a backup, anything deleted since that backup was made would be back in the app.

8. Your controls

• /settings, /circle, /privacy: change what you share, who sees it, whether you get recap DMs, whether your circle can set alerts on you, whether people in your circle can send you plans and free-time cards by DM, and your card style. /privacy also shows who has an alert on you, and whether your daily buddy DM is on, paused or off.
• /today and the Buddy screen in /settings: pick your weekly goal, turn the daily DM on or off, or turn off buddy and daily stuff. Off hides the buddy and your goal and stops the DM. What you earned stays until you run /forget-me. Stop these on any daily DM turns it off too.
• /leaderboard leave: takes you off a server's leaderboard right away.
• /optout: pauses the app for you in this server. Your old data stays. Leaving a server pauses you there on its own.
• /forget-me: deletes everything the app has about you, behind a confirm button. There's no undo, and it's all or nothing. It deletes:
• your profile and settings, and your server opt-ins;
• circle entries, both the ones you made and ones that list you;
• activity records and hourly summaries;
• check-ins, usual free times, /free posts and who got them;
• alerts you set and alerts other people set on you, plus alert history;
• your Steam link, if you made one;
• recap settings and the records that recaps and Wrapped went out;
• your buddy and its shelf, the days that counted, your weekly goal, your daily DM settings and notes, and your card style;
• your leaderboard sign-ups;
• any paid-feature record in your name, if there is one;
• plans you made (people who said In or Maybe get told it was cancelled), and your answers and reminder records on other people's plans.
• /export: the app DMs you a file (JSON) with your data, your buddy, its shelf and card style included. If your DMs are closed, it shows up as a private attachment instead. If someone has an alert on you, the file only says who, what kind, which server, and when they made it. Nothing else of theirs is in it.
• Discord's own tools: you can block the app, close your DMs, or remove it from your apps any time.

What /forget-me can't delete right away: copies in backups. They're gone when the backups roll off, up to 14 days later (section 7). What it can't delete at all: messages that are already posted in Discord (shared cards, /free cards, plan cards), DMs the app already sent you, and other people's own copies or screenshots. When you forget yourself, cards for plans that haven't happened yet change to "cancelled". Cards for plans that are over stay as they are.

These controls work the same for everyone, wherever you live.

9. When the app is removed from a server

When the app is removed from a server, that server's data is deleted:

• activity records and hourly summaries;
• check-ins made there, and /free posts and who got them;
• alerts tied to that server, and their history;
• plans made there, with their answers and reminders;
• the pinned panel, the recap channel setting and the recap and Wrapped records;
• leaderboard sign-ups and the server's leaderboard switch;
• any paid-feature record for that server;
• every opt-in for that server.

What stays is yours: your profile and settings, your circle list, your usual free times, your recap settings, your buddy, its shelf and card style, the days that counted (a yes on a date, with no server and no names, kept for the 13 full months before this one), and anything that isn't tied to a server (like a check-in you made in a DM). You can wipe those with /forget-me.

If the app was removed while it was offline, the clean-up runs the next time it starts. If it can't get its server list at start-up, it skips the clean-up and tries again next time. Copies in backups go when the backups roll off, up to 14 days later.

10. Who else touches your data

• Discord. Everything the app does goes through Discord, and Discord's own privacy policy covers what Discord does. Discord can also check that apps follow its rules.
• Steam (Valve), only if you link your account. The app asks Steam's public web service about your account, so Steam sees which Steam ID it's asking about. The short code you put in your Steam profile name is public on Steam while it's there. Steam's own privacy policy covers what Valve does.
• Discord, for payments, only if paid features are turned on later. Discord takes the payment and tells me which server or person has a subscription. I never see card or payment details.
• Google Calendar, only if you tap Add to Google Calendar on a plan. That's a link with the plan's title and time in it, so tapping it sends those to Google from your browser. Rumpus doesn't send anything to Google. Google's own privacy policy covers what it does.
• Cloudflare, only if you open Kit's place. Cloudflare serves the page and carries the traffic between Discord, the page and my computer. It doesn't keep your Kit data. Its own privacy policy covers its normal request logs.
• That's the list. No analytics service, no ad service, no data brokers.

I only share your data when you tell me to (a Share button posts a card to Discord, an invite goes to your friend), when the law requires it, or with a company that helps me run the app (only Cloudflare, and only when you open Kit's place). I never sell it.

11. Where it's stored

For now, all of it is stored in one file on a computer I own and control, in Tennessee, USA, along with the nightly backup copies. There's no cloud database. Two things follow from that. The app goes offline when the computer is off. And if you live outside the US, your data is stored in the US.

Kit's place is offline when the computer is off, too: it says Rumpus is taking a nap. Your data still stays on my computer. Cloudflare only passes it through (see section 10).

If that changes, for example I move the app to a server at a hosting company, I'll update this page and its date, say who the new host is and where it is, and post a notice in the Rumpus support server (https://discord.gg/9sBxqRvvZa) before the move. If you don't want your data to move, run /forget-me first. I'll delete the old copy after the move.

12. Kids and teens

Rumpus is for people 13 and older. That's Discord's own rule, and the app adds its own check: /optin asks you to tick that you're 13 or older, and nothing is saved without it. The app discards what Discord sends about people who haven't opted in. The one thing that can be kept about someone who hasn't is their Discord ID on another person's circle list, with nothing else attached. /forget-me removes it.

I can't check anyone's ID. I trust your answer. If I find out someone under 13 is using the app, I'll delete their data. A parent or guardian can ask me to do that: #support in the Rumpus Discord server (https://discord.gg/9sBxqRvvZa). In some places the minimum age is higher than 13. If you live in one, that age applies to you.

If you're 13 to 17:

• The same privacy rules apply to you as everyone else. Nothing is sold and there are no ads.
• You decide what's shared and who sees it. "Only people I pick" is the tightest circle.
• Your buddy and its daily DM are yours to switch on and off. The DM is off until you turn it on, and it never goes out from midnight to 6 AM your time.
• Share only what you need, and check /privacy now and then.
• You can run /forget-me any time.
• If someone makes you uncomfortable using the app, tell a parent or someone you trust, and report it to me at #support in the Rumpus Discord server (https://discord.gg/9sBxqRvvZa).

If paid features show up later, you'd buy them through Discord, and Discord's own rules apply, including any spending limits a parent has set.

13. Security

• The data is a database file on my own computer at home, behind my Windows login. The computer's drive isn't encrypted, so anyone who got into the computer, or took the drive, could read the file.
• The backup copies are on the same computer, under the same login, and aren't encrypted either. They aren't copied to a cloud drive. When Rumpus moves to a server, I'll update this page and say so first.
• The app's Discord login key (its token), and its Steam key if one is set, live in a protected settings file. They're not in the code, and they're scrubbed out of the logs.
• Kit's place: the computer connects out to Cloudflare; nothing connects in. That connection uses a password that only the app and my Cloudflare account hold. Discord's client secret and the app's login key stay on my computer and are never sent to Cloudflare or to the page.
• The app has Discord's presence and server-member access (so it can tell who's around and who's in a server). It doesn't have the Message Content permission, so it doesn't get what people write in chat. The only time it uses a message's words is when you right-click a message (or long-press on your phone) and pick Plan this (see 4.6).
• When you add the app to a server, the add link asks Discord for these permissions: View Channels, Send Messages (including in threads), Embed Links, Attach Files, Read Message History, Use Application Commands, and Create Events and Manage Events (for the Scheduled Events a plan makes). It doesn't ask for Administrator, Manage Server, Manage Messages, Manage Roles, or any power to kick, ban or mute anyone.
• Files you upload to /import are size-checked and read in memory only.
• No system is perfect. If something happens that puts your data at risk, I'll tell Discord and the people affected quickly.

14. Changes to this policy

When I change this page, I'll change the date at the top. For small fixes, like typos or clearer wording, that's all. For big changes, like new kinds of data, new people who can see it, a different place it's stored, or anything that makes it less private, I'll post a notice in the Rumpus support server (https://discord.gg/9sBxqRvvZa) before it starts. If you don't agree with a change, run /forget-me and remove the app.

15. Contact and reporting

Contact me at #support in the Rumpus Discord server (https://discord.gg/9sBxqRvvZa) to ask a question, ask for something to be deleted or fixed, report someone misusing the app, or report a bug that exposes data. I read every report and act on it. For anything private, just post "DM me" there and I'll message you, so nothing personal goes in a public channel.

Discord is a trademark of Discord Inc. Rumpus isn't affiliated with Discord.