Privacy Policy

Effective date: 31 August 2026 Last updated: 31 August 2026

1. Who this covers

This policy explains how the Discord bots operated by BORING CONSULTING LLC (Boring Consulting合同会社), a company registered in Japan ("Boring Security", "we", "us"), handle your information. It applies to every bot we operate in our Discord community, including our course, attendance, and certificate-claim bots (the "Bots").

Our Bots are used to run our free Web3 security education program inside our own Discord server. They are not general-purpose public bots.

Using our Bots is voluntary. If you do not want us to process your information as described here, do not run our commands or participate in our classes.

2. What we collect

We collect only what we need to run classes and award course credit. Specifically:

Discord identifiers

• Your Discord user ID — a numeric ID, attached to your attendance records, exam attempts, and per-question answers. Also stored for staff members on our permissions list.
• Server, channel, thread, role, and message IDs — used to store per-server configuration (which roles a course grants, which channel hosts the class menu, which thread hosted your exam).

Course participation data

• Attendance records — timestamped snapshots of whether you were connected to the class voice channel while a class was in session, and your resulting attendance percentage.
• Exam results — whether you passed, which questions you answered correctly, when you took the exam, and an identifier for that attempt.
• Staff actions — if a staff member manually overrides a result, we record who did it and when, for accountability.

Wallet address

• The blockchain wallet address you type into the Bot when starting an exam, so your completion certificate can be issued to it. You provide this directly — we do not obtain it from Discord, and you choose which address to give us.

What we explicitly do not collect

• Message content. Our Bots do not read your messages. They operate through slash commands and buttons.
• Presence or activity data. We do not track your online status, what you are playing, or when you are active.
• Usernames, display names, avatars, or profile information.
• Email addresses, phone numbers, IP addresses, or payment information.
• Private keys or seed phrases. We will never ask for these. Anyone who does is scamming you.

3. Why we collect it

Purpose	Data used
Verify you attended a class	Discord user ID, attendance snapshots
Administer and grade your exam	Discord user ID, exam answers and result
Grant course roles in Discord	Discord user ID, role IDs
Issue your completion certificate	Wallet address, exam result
Let instructors review class results and troubleshoot	All of the above
Prevent abuse of certificate claims	Wallet address

We do not use your information for advertising or profiling, and we do not make automated decisions about you beyond grading your exam against the answer key.

4. Who we share it with

• Our own course-alumni service — receives your wallet address and eligibility status so your certificate can be minted.
• Discord — inherently processes the interactions you send to our Bots, under Discord's own Privacy Policy.
• Instructors and staff in our community can view class attendance and exam results, including exports, for the courses they run.

We do not sell or rent your information. We do not share it with advertisers or data brokers. We do not use it to train machine learning or AI models. We may disclose information if legally required to do so.

5. Where it is stored

Course records are held in a private database on infrastructure we control, hosted in the United States by our cloud provider. We are established in Japan, so if you participate from the EEA or the UK your information is transferred outside your country to the United States and Japan. Access is limited to the small number of people who operate the Bots and run our classes.

6. How long we keep it

We keep course records for as long as needed to prove you completed a course and to keep your certificate valid. Because a certificate does not expire, we do not delete these records on a fixed schedule — we keep them for as long as we run the program. If a record is corrected or a course credit is withdrawn, we mark it rather than erasing it, so the history of your credential stays auditable.

We delete records earlier on request, subject to Section 7.

7. Your choices and rights

You can ask us to:

• See what we hold about you.
• Correct it if it is wrong — for example, if you gave us the wrong wallet address.
• Delete it. Note that deleting your course record means we can no longer verify you completed the course, and any associated Discord roles or certificate eligibility may be removed. Records of an already-issued on-chain certificate cannot be deleted from the blockchain, because we do not control it.
• Withdraw from the program — simply stop using the Bots. You can also ask us to remove your course roles.

Depending on where you live (for example, the EEA, UK, or California), you may have additional statutory rights, including the right to object to processing, to request portability of your data, and to lodge a complaint with your local data protection authority.

To make a request, contact us using Section 10. We will respond within 30 days. We may ask you to confirm your Discord user ID to verify the request comes from you.

8. Blockchain data

Our program issues completion certificates as blockchain tokens. Blockchain transactions are public and permanent. Once a certificate is issued to your wallet address, that record exists on a public blockchain outside our control, and we cannot edit or delete it. Consider using a wallet address you are comfortable associating publicly with course completion.

9. Children

Our Bots are not directed at children. You must meet Discord's minimum age requirement for your country to use Discord, and therefore our Bots. We do not knowingly collect information from anyone below that age. If you believe a child has provided us information, contact us and we will delete it.

10. Contact us

• Email: redzin@boringsecurity.com
• Discord: open a ticket in our Discord server
• Post: BORING CONSULTING LLC (Boring Consulting合同会社), 769-1 Tokuriki, Iwatsuki Ward, Saitama City, Saitama 339-0004, Japan

For data protection requests, please put "Privacy Request" in the subject line.

11. Security

We restrict access to course records to the people who operate the Bots, and we do not store credentials or sensitive personal information. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify affected users and any required authority of a breach as the law requires.

12. Changes to this policy

We may update this policy as our Bots change. We will update the "Last updated" date above, and for material changes we will post a notice in our Discord server. Continuing to use our Bots after a change means you accept the updated policy.