Drop Bot privacy policy
Last updated November 9, 2026
Drop Bot is the members app for a Discord community that reports when trading card products are in stock at local stores. This page explains what the app collects and why.
What we collect
- Your Discord account basics. When you sign in with Discord we get your Discord user ID, username, display name, and avatar. We use them to check that you're a member of the server and to show your name on reports and chat messages. We never see your Discord password or email.
- What you post. Stock reports, votes, chat messages, and photos you choose to attach. These are shared with other members in the app and in the Discord server.
- Private messages. Messages you send another member in the app. Only the two of you see them, unless one of you reports a message, which shows it to the mods.
- Reports and blocks. Messages you report to the mods, and members you block.
- Location, only while you use the app. Used to center the map, find the nearest store, and mark a report as made at the store. We store the store you picked and whether you were on-site, not a history of where you've been.
- Your settings. Home ZIP code, stores you follow, alert choices, and quiet hours.
- A push notification token so the app can send the alerts you turned on.
- The drop assistant. When you tap the mic, your phone turns speech into text. The app asks before the first question goes out. After that, the text you type or say, your display name, and your location (if location is on) are sent to our server and to OpenRouter, an AI service, to answer questions about stores and drops or to draft a report you confirm. Recordings of your voice aren't sent.
- Security and second-account checks. We keep a one-way scrambled (hashed) copy of your internet address, of your phone's notification token, and of a random id the app makes for your phone or browser. We use them only to spot one person signing up with several accounts, and to keep a member who was banned from coming back on a new account. If a member is banned, the scrambled ids of the phones and browsers they used are blocked, and so are internet addresses only they used, for 30 days. They can't be turned back into the original, and they're never used for ads or tracking.
- Membership status. Whether your membership is paid, from Stripe. We never see your card details.
What we don't do
- We don't sell your data or share it with advertisers.
- We don't track you across other apps or websites.
- The app doesn't take payments. Memberships are handled through the Discord server and Stripe, under Stripe's privacy policy.
Who else handles data
Discord (sign-in and posting reports to the server), Railway (our hosting provider for the server and database), Expo and Apple or Google (delivering push notifications), Stripe (payments, on the website, not in the app), and OpenRouter (the AI service behind the drop assistant, only after you allow it).
Deleting your data
In the app, open More → Settings → Delete my account. That deletes your app account and right away deletes your settings, followed stores, alerts, push tokens, chat choices, private messages, blocks, and second-account check data. Stock reports you made stay on the map so other members can still use them, but your name and picture are taken off them (they show as "Former member"). Messages you posted to the Discord server stay there under Discord's rules; ask a mod in the server's tickets channel if you want them removed. Deleting your account doesn't cancel a paid membership; cancel that in Discord with /billing. Payment records are kept as the law requires. You can also ask for deletion through the support page below.
Community rules
Everyone agrees to the community rules before using the app. Abusive or objectionable content isn't allowed. Long-press any message to report it or block the person. Mods review reports within 24 hours and remove content and members that break the rules.
Children
Drop Bot isn't meant for anyone under 13, the same as Discord.
Contact
See the support page.