About this policy
This policy covers lawkitty.me and its public website features, the LawKitty Discord bot (its slash commands and moderation tools), the watch party Discord Activity, and the account features for Law's Jellyfin media server. Some features link to or rely on services operated by other people, including Discord; their own privacy policies apply when you use them.
Information handled when you visit
The hosting and security services that deliver this site may process technical request data such as your IP address, requested page, request time, browser or device details, and referrer information. This helps deliver the site, troubleshoot failures, and protect it from abuse. Their processing is governed by their own terms and privacy notices.
The site is self-hosted and delivered through Cloudflare, which acts as its network, cache and security provider. Cloudflare processes request data like the above to route traffic, cache pages, and block attacks, and may set strictly necessary security cookies (such as __cf_bm) to tell people from bots. The site may also use Cloudflare Web Analytics, which counts page views and performance without cookies and without tracking you across sites.
This site does not require visitor accounts. Its theme control can save your choice in your browser's local storage under the key `law-theme`; that preference stays on your device and is not a site account.
Anime requests and search
You can request anime on the website or with the bot's /request command. A request stores the anime details you picked (title, MyAnimeList link and image, type, episode count, score and a short synopsis), who it's from, your optional note, and its status and timestamps. On the website, who it's from is the optional name you type. With /request, it's your Discord display name and username, marked as sent via Discord.
New requests are posted, with those details, to a review channel on Discord through a webhook, and status changes are posted there too. The public request board at /media/requests shows each request's title, image, status, dates and any update note from Law, but never the requester's name or note.
Anime searches, from the website form or the /request command, are sent to the MyAnimeList catalog search service the site uses, and recent results are briefly cached on the server. Following anime or image links can take you to MyAnimeList or another external service, which will receive information as described in that service's own privacy policy.
To keep out spam, the website form may ask you to complete a Cloudflare Turnstile check, which looks at technical signals from your browser to tell people from bots, and the server briefly keeps a count of requests per IP address in memory to limit how often requests can be sent.
Please do not include sensitive personal information in a request. To ask about a request you submitted or request its removal, contact Law using the email below.
The guestbook
When you sign the guestbook, the site stores the name, message and optional website you enter, and when you sent it. New entries are only visible to Law until they are approved; approved entries show your name, message, website and the date publicly on /guestbook. Law may also get a Discord notification with the same details so it can be reviewed.
Like the anime request form, the guestbook may use a Cloudflare Turnstile check and a short-lived, in-memory count of submissions per IP address to keep out spam. Your IP address is not saved with your entry. To have an entry changed or removed, contact Law using the email below.
The Discord bot
When you use one of the bot's commands, Discord sends it what it needs to respond: your Discord user ID, username and display name, the command and options you chose, and the server, channel or DM it was used in. Replies to account and request commands are only visible to you.
In Law's own Discord server, the bot watches one designated anti-spam channel. If an account posts there, the bot logs its username, user ID and the server, bans it, deletes its recent messages and sends it a notice by DM. The bot does not read or store messages in other channels.
The bot can see the online status and current activity (for example, the game or music shown on a profile) of members of servers it is in, as Discord shares that with bots. The site's /rpc/<user id> endpoint and the status cards it powers can show that status, activity and public profile details to anyone who requests them with a user ID. Leaving the servers the bot is in, or turning off activity sharing in Discord's privacy settings, stops this.
Media server accounts
The /media commands create, link and manage your account on Law's Jellyfin media server. The username and password you enter in the bot's private forms go straight to the Jellyfin server to create or check the account. The bot itself does not keep your password or any Jellyfin sign-in token.
To connect your Discord account to your Jellyfin account, the bot stores your Discord user ID, your Jellyfin user ID and username, and when you linked them. /media unlink removes that record; /media delete permanently deletes your Jellyfin account and the record.
Like most media servers, Jellyfin keeps its own account and usage records, such as sign-ins, devices, IP addresses and what you have played, so it can resume playback and so Law can administer the server.
Watch parties (Discord Activity)
When you open the watch party Activity, Discord asks you to authorize it. It requests the identify permission, which shares your Discord user ID, username, display name and avatar, and may also ask to show what you're watching on your Discord profile. The server uses a one-time code from Discord to get a sign-in token, reads your profile with it, and hands it back to the Activity; the server does not store that token.
To make sure only people actually in the call can watch, the server asks Discord which users are in the Activity session and which server and channel it is running in. It then gives you a signed session holding your user ID, name, avatar and those session details, which expires after 12 hours.
While a party runs, the server keeps it in memory: who is in it, who is hosting, what is playing, the playback position, and suggestions viewers send the host. Other people in the party see your name and avatar. The server forgets a party a few minutes after everyone leaves, or when it restarts. Avatars are fetched from Discord through this site, because the Activity can't reach Discord's image server directly.
Each viewer's video streams from the Jellyfin server under its own playback session, which Jellyfin may record like any other playback. If you allowed it, Discord shows what you're watching on your profile while you're in the party, to whoever can normally see your activity.
Advertising and third parties
The site includes the Google AdSense script. Google and its advertising partners may receive technical information about your browser or device and may use cookies or similar technologies to provide, measure, or personalize advertising, depending on your location and the applicable settings. Google handles that information under its own policies; this site does not control Google's data practices. The watch party Activity does not show ads.
Anything you share through the bot or the Activity also passes through Discord, which handles it under its own privacy policy.
This site does not sell the information you submit. Information may be processed by providers that help operate the site and bot, deliver advertising, search the anime catalog, or send request notifications, and disclosed when required to protect the site or comply with law.
Retention and your choices
Request records and media account links are kept while they're useful for running the server; there is no automatic deletion schedule. Watch party data lives only in memory and disappears shortly after a party ends. Server logs may briefly include usernames or IDs when something goes wrong, such as a failed sign-in or a moderation ban.
You can unlink or delete your media account at any time with /media unlink or /media delete, remove the watch party's access in Discord under User Settings → Authorized Apps, and clear browser storage and cookies in your browser settings. To ask about anything else you submitted, or to have it removed, contact Law using the email below. Some records may be controlled by Discord, the hosting provider or other services rather than by this site.
