Blossoms — Privacy Policy

01Information We Collect

When you use Blossoms (the "Bot") or visit blossoms.cloud, the following information may be collected by itself or through third parties:

User Data: Discord user IDs, usernames, or nicknames required for bot functionality.

Server Data: Server IDs, channel IDs, and roles used to manage bot features.

Message Data: Only where required for specific commands or features — never stored permanently unless explicitly stated.

Trackers: Usage data collected automatically when using this Application, including IP addresses, browser/OS details, time of requests, and interaction patterns, primarily processed via Cloudflare.

We do not collect sensitive personal information. Unless stated otherwise, all requested Data is mandatory — failure to provide it may make it impossible to provide certain services.

Typical retention periods: Discord user/server IDs are retained for as long as the Bot remains in your server or you use its features (maximum 12 months after last interaction). Temporary command data is purged within 24 hours. Website usage data processed by Cloudflare follows Cloudflare's own retention schedule (maximum 30 days for logs).

02How We Use Information

Collected data is used to:

Provide and improve the Bot's features and the website.

Ensure moderation and compliance with Discord's Terms of Service.

Prevent abuse, spam, or violations of our Terms of Use.

Comply with legal obligations and respond to enforcement requests.

Protect the rights and interests of Expired Studios and its users.

Traffic optimisation and distribution via Cloudflare infrastructure.

03Mode & Place of Processing

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification, or destruction of Data. Processing is carried out using computers and IT-enabled tools, following organisational procedures strictly related to the purposes indicated.

In addition to the Owner, Data may be accessible to persons involved with the operation of this Application (administration, legal, system administration) or external parties appointed as Data Processors where necessary.

Data is processed at the Owner's operating offices and wherever the parties involved in processing are located. Depending on your location, data transfers may involve transferring your Data to a country other than your own. Contact us for details on specific transfer locations.

04Data Storage & Retention

Data is stored only as long as necessary to fulfil the purpose for which it was collected.

Data collected for the performance of a contract is retained until the contract is fully performed.

Data collected for legitimate interests is retained as long as needed to fulfil those purposes.

Temporary data (e.g. command inputs) may be deleted automatically after use.

The Owner may retain Data for longer periods where required by legal obligation, consent, or authority order.

Once the retention period expires, Data shall be deleted. Rights of access, erasure, rectification, and portability cannot be enforced after expiry.

Specific retention periods: Discord user/server IDs — up to 12 months after last interaction. Command and message data — up to 24 hours. Website log data (via Cloudflare) — up to 30 days. Moderation records (bans, warnings) — up to 24 months.

You may request deletion of your data at any time by contacting us at support@blossoms.cloud.

05Sharing of Information

We do not sell, rent, or share your information with third parties for commercial purposes. Data may only be shared in the following circumstances:

When required by applicable law or legal process.

To comply with Discord's Terms of Service.

With appointed Data Processors (e.g. infrastructure providers) strictly for operational purposes.

To protect the rights, property, or safety of Expired Studios or its users.

Users are responsible for any third-party Personal Data they obtain, publish, or share through this Application.

06Third-Party Services

The following third-party services are used in the operation of this Application.

Traffic Optimisation & DNS — Cloudflare

Cloudflare provides DNS, DDoS protection, and traffic optimisation for blossoms.cloud. It may collect IP addresses, browser data, and request metadata.

CompanyCloudflare, Inc.

CountryUnited States

Transfer MechanismStandard Contractual Clauses (SCCs)

Personal DataIP addresses, Trackers, Usage Data

Privacy Policycloudflare.com/privacypolicy

Bot Hosting & Infrastructure — Discord

The Bot operates on Discord's platform. Discord processes user IDs, message content (where required for commands), server data, and interaction metadata.

CompanyDiscord, Inc.

CountryUnited States

Transfer MechanismStandard Contractual Clauses (SCCs)

Personal DataUser IDs, Server IDs, Message Data

Privacy Policydiscord.com/privacy

Transactional Email — Resend

Resend is used to send transactional emails from support@blossoms.cloud.

CompanyResend (WorkOS, Inc.)

CountryUnited States

Transfer MechanismStandard Contractual Clauses (SCCs)

Personal DataEmail addresses, message content

Privacy Policyresend.com/legal/privacy-policy

This Application uses cookies and similar tracking technologies. To learn more, consult our Cookie Policy.

07Your Rights (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights regarding your Personal Data:

✦

Withdraw Consent

Withdraw previously given consent to data processing at any time.

✦

Object to Processing

Object to processing carried out on a legal basis other than consent.

✦

Access Your Data

Learn if Data is being processed and obtain a copy of it.

✦

Rectification

Verify accuracy of your Data and request corrections.

✦

Restrict Processing

Request that we limit processing to storage only.

✦

Right to Erasure

Request deletion of your Personal Data from our systems.

✦

Data Portability

Receive your Data in a structured, machine-readable format.

✦

Lodge a Complaint

Bring a claim before your competent data protection authority.

To exercise any of these rights, contact us at support@blossoms.cloud. Requests are free of charge and will be answered within one month.

Legal basis of processing: We process your Data where you have given consent; where processing is necessary for a contract; where required by legal obligation; or where necessary for the legitimate interests of the Owner.

08Children's Privacy

The Bot and this Application are not intended for users under the age of 13. We do not knowingly collect Personal Data from children under 13. If you believe a child has provided us with Personal Data, please contact us immediately at support@blossoms.cloud so we can remove it.

09Automated Decision-Making

The Bot uses automated processing in the following limited ways:

NSFW & Content Guardrails: Automated content classification is applied to certain Bot interactions to detect and block prohibited content. This may result in a command being refused or a response being withheld.

Spam & Abuse Detection: Automated rate-limiting and abuse detection may temporarily restrict access to Bot features for high-volume or suspicious usage patterns.

No Profiling: We do not use automated decision-making to build individual profiles, make decisions with significant legal effect, or target advertising.

If you believe an automated decision has incorrectly affected you, contact us at support@blossoms.cloud to request human review.

10Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, Expired Studios will:

Notify the relevant supervisory authority (ICO in the UK, or applicable EU DPA) within 72 hours of becoming aware of the breach, where feasible.

Notify affected Users without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

Notification will be made via email (where contact details are available) or via a prominent notice on blossoms.cloud.

The notification will describe the nature of the breach, categories and approximate number of individuals affected, likely consequences, and measures taken to address the breach.

To report a suspected security vulnerability: security@blossoms.cloud. For non-urgent data concerns: support@blossoms.cloud.

11Legal Action

Personal Data may be used for legal purposes by the Owner in Court or in stages leading to possible legal action arising from improper use of this Application or its related Services. The User is aware that the Owner may be required to disclose Personal Data upon request of public authorities.

Additional contextual information concerning particular Services or data collection may be provided upon request. System logs and maintenance files may be collected for operational purposes.

12Changes to This Policy

We may update this Privacy Policy at any time. Changes will be notified on this page and, where technically and legally feasible, via contact information available to the Owner. We strongly recommend checking this page regularly.

Continued use of the Bot after updates constitutes acceptance of the revised policy. Where changes affect processing activities based on consent, we will collect new consent where required.

13Definitions & Legal References

Personal Data: Any information that directly or indirectly allows for the identification of a natural person.

Usage Data: Information collected automatically, including IP addresses, browser/OS details, request times, and page interaction data.

User: The individual using this Application, coinciding with the Data Subject unless otherwise specified.

Data Controller (Owner): The entity that determines the purposes and means of processing Personal Data — Expired Studios.

Data Processor: A natural or legal person that processes Personal Data on behalf of the Controller.

Tracker: Any technology (cookies, unique identifiers, web beacons, scripts, e-tags, fingerprinting) that enables tracking of Users.

European Union: All references to the EU include all current member states and the European Economic Area.

14Contact

For questions about this Privacy Policy, your data, or to exercise your rights, contact us at:

OwnerExpired Studios

Emailsupport@blossoms.cloud

Websiteblossoms.cloud

Discorddiscord.gg/tzDMUAa55P

Requests are free of charge and will be responded to within one month.