pessimist privacy policy

last updated 22 August 2026

PESSIMIST PRIVACY POLICY

Effective date: 1 September 2026

Last updated: 1 September 2026

1. ABOUT THIS POLICY

Pupi.Co Pty Ltd ("Pupi.Co", "Pessimist", "we", "us" or "our") operates the Pessimist network of Discord bots, websites and related services.

This Privacy Policy explains how we collect, hold, use, disclose, retain and protect personal information in connection with:

(a)

pessimist.io and related Pessimist websites;

(b)

Pessimist Plus subscriptions, gifts, entitlements and billing pages;

(c)

account login, Discord authorisation and server-management features;

(d)

support, ban appeals, billing enquiries and privacy requests;

(e)

Pessimist Discord bots where a bot-specific policy incorporates this policy; and

(f)

future Pessimist services that expressly link to this policy.

Emma, Bella and Pessimist QOTD each have an additional privacy policy describing their particular information practices. The bot-specific policy and this policy should be read together. If they conflict concerning a bot-specific practice, the bot-specific policy applies to that practice.

Discord separately processes information under Discord's own privacy policy. Pupi.Co is not Discord and does not control Discord's independent information practices.

2. WHO IS RESPONSIBLE

The operator responsible for the Pessimist services is:

Pupi.Co Pty Ltd

Suite 44173, 3/2237 Gold Coast HWY

Mermaid Beach

Queensland

4218

Australia

Privacy contact: pessimist@emmasdome.co

Pupi.Co is an Australian company. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us, and with other privacy laws that apply to a particular user or processing activity.

3. INFORMATION WE COLLECT

The information collected depends on the services you use.

3.1 Discord identity and account information

We may collect:

(a)

Discord user ID;

(b)

username, display name and avatar URL;

(c)

Discord server, role and membership information needed to authenticate you, administer a server or determine access;

(d)

OAuth authorisation, scope and account-association information;

(e)

internal Pessimist account ID; and

(f)

account status, bans, restrictions and relevant timestamps.

We do not ask for or collect your Discord password or login token.

3.2 Subscription, entitlement and transaction information

We may collect:

(a)

whether you have a free, trial, gifted, voting-based, legacy or paid entitlement;

(b)

the service, user or Discord server to which an entitlement applies;

(c)

subscription source and status;

(d)

purchase, activation, renewal, expiry, cancellation and refund dates;

(e)

Stripe customer, checkout, invoice, subscription, price and payment-status identifiers;

(f)

PayPal order, payer, plan, subscription and payment-status identifiers;

(g)

gift purchase, delivery and redemption records;

(h)

discount, coupon, trial, retention-offer and cancellation information;

(i)

access-reminder and entitlement-expiry information; and

(j)

records showing that a paid entitlement was checked or used, as described in section 7.

Stripe, PayPal, Discord or another payment provider processes complete payment-card or payment-account credentials. Pupi.Co does not intentionally store complete card numbers, card security codes or PayPal passwords.

3.3 Information you submit

We may collect information you deliberately provide, including:

(a)

ban appeal text and supporting information;

(b)

your choice about receiving an appeal-result direct message;

(c)

support messages and privacy requests;

(d)

billing enquiries and dispute correspondence;

(e)

cancellation reasons and feedback;

(f)

custom role names, colours and preferences;

(g)

gift selections and redemption details;

(h)

reports of abuse or security vulnerabilities; and

(i)

information submitted through an administrator interface.

A ban-appeal record may include the appeal, Discord user ID and username, relevant server ID, associated Discord message ID, moderator decision and reason, resolver ID and timestamps. Relevant moderators may be able to view an appeal.

Please do not include sensitive personal information in a support request, appeal or free-text field unless it is genuinely necessary for us to address the matter.

3.4 Referral, voting and promotional information

Where these features are used, we may collect:

(a)

Top.gg vote information, including Discord user ID, username, vote weight, project and timestamp;

(b)

referral source and project;

(c)

the Discord server linked to an invitation;

(d)

inviter Discord user ID where attribution succeeds;

(e)

gift, trial and promotional eligibility; and

(f)

the resulting free-access or voting entitlement.

3.5 Technical, security and preference information

We may collect or process:

(a)

essential authentication-session information;

(b)

(c)

browser type, device category, referring page and requested page;

(d)

approximate country derived from an IP address;

(e)

IP address transiently for security, rate control and country-level pricing;

(f)

server, request, security and error-log information;

(g)

timestamps and identifiers associated with account or entitlement actions;

(h)

theme preference stored in browser local storage; and

(i)

sidebar and interface preferences stored in cookies.

We do not use precise GPS location for these purposes. We do not use Google Analytics, Meta Pixel or behavioural-advertising pixels unless this policy and any required consent notice are first updated.

4. HOW WE COLLECT INFORMATION

We collect information:

(a)

directly from you when you sign in, purchase, configure a service, submit content or contact us;

(b)

from Discord when you use a bot or authorise Discord login;

(c)

from server owners and administrators who configure a bot or entitlement;

(d)

from payment providers concerning transactions and subscription status;

(e)

from Top.gg and similar services when you vote or follow an attributed invitation;

(f)

automatically from your browser or device when you use our websites; and

(g)

by deriving entitlement status, fraud indicators and deidentified service statistics from the information above.

5. WHY WE USE INFORMATION

We use personal information where reasonably necessary to:

(a)

authenticate users and maintain accounts;

(b)

provide, configure and support Pessimist services;

(c)

verify and administer subscriptions, gifts, trials, voting rewards and entitlements;

(d)

process and reconcile payments, refunds, renewals and cancellations;

(e)

deliver operational messages requested by users or server administrators;

(f)

administer roles and server access;

(g)

review ban appeals, abuse reports and support requests;

(h)

prevent fraud, chargeback abuse, account compromise and unauthorised access;

(i)

enforce our Terms and protect users, Pupi.Co and Discord;

(j)

diagnose faults, secure our systems and improve reliability;

(k)

calculate deidentified or aggregate product statistics;

(l)

comply with accounting, tax, recordkeeping and legal obligations; and

(m)

establish, exercise or defend legal claims.

For users in the EEA or United Kingdom, where the relevant law applies, our legal bases ordinarily include performance of a contract or steps requested before a contract, our legitimate interests in operating and securing the services, compliance with legal obligations, and consent where consent is required. You may contact us for information about the basis applying to a particular activity.

We will obtain consent where required for non-essential marketing, non-essential cookies or another activity that cannot rely on a different lawful basis.

6. DEIDENTIFIED AND AGGREGATE ANALYTICS

We may create and use aggregate or deidentified information to understand service reliability, adoption, feature use, subscription performance and broad usage trends.

We call information "anonymous" only where it is no longer reasonably capable of identifying or being linked to an individual. Removing a username, hashing an identifier or replacing it with another persistent identifier does not necessarily make information anonymous.

We do not attempt to reidentify information that has been properly deidentified. We do not use Discord message content to train machine-learning or artificial-intelligence models.

7. PAID-SERVICE USE AND PAYMENT DISPUTES

To provide paid access and address fraud or payment disputes, we may record:

(a)

the Discord user ID or server ID associated with an entitlement;

(b)

entitlement source, product, status and relevant dates;

(c)

transaction, invoice, subscription and payment-provider identifiers;

(d)

the date and time an entitlement was checked;

(e)

the paid feature or service category accessed; and

(f)

whether the entitlement check succeeded.

These records may be used to provision access, correct billing errors, respond to chargebacks, show whether a paid service was available or used, and establish or defend a legal claim.

We do not need to retain the content of an ordinary Discord message merely to prove paid-service use. We minimise payment-dispute evidence to information reasonably relevant to the disputed transaction.

8. WHEN INFORMATION IS DISCLOSED

We may disclose information to the following recipients only for the described purposes.

8.1 Discord

Discord processes OAuth authorisations, bot interactions, direct messages, Discord-hosted content, user and server identifiers, roles, bot messages and other activity occurring through Discord.

Discord privacy information: https://discord.com/privacy

8.2 Payment providers

Stripe, PayPal, Discord and other checkout providers may process payment credentials, billing identity, transaction data, tax information, fraud signals, invoices and subscription status.

Stripe privacy information: https://stripe.com/privacy

PayPal privacy information: https://www.paypal.com/privacy

8.3 Cloud infrastructure, database and storage providers

We use contracted infrastructure, database, logging, backup and file-storage providers to host and secure the services. They may process the information stored or transmitted through their systems only to provide services to us and subject to applicable contractual and security requirements.

MongoDB privacy information: https://www.mongodb.com/legal/privacy-policy

Neon privacy information: https://neon.com/privacy-policy

8.4 Email provider

Mailchimp may process an email address and subscription preferences only when a person directly and explicitly subscribes to a newsletter or product update. We do not collect email addresses from Discord OAuth, and we do not add a person to Mailchimp merely because the person used Discord or purchased a service. Marketing messages contain an unsubscribe mechanism.

Mailchimp privacy information: https://www.intuit.com/privacy/statement/

8.5 Voting, attribution and location providers

Top.gg may provide voting and referral information used for rewards and attribution. IP geolocation providers such as ip-api.com and ipapi.co may receive an IP-based request to estimate country for regional pricing, security or analytics. They do not provide us with precise GPS location.

Top.gg privacy information: https://top.gg/privacy

ip-api privacy information: https://members.ip-api.com/privacy-policy

ipapi privacy information: https://ipapi.co/privacy/

8.6 Browser-delivered resources

Our websites may load Discord-hosted avatars or icons and Google Fonts. The user's browser contacts the relevant provider and supplies ordinary request information such as IP address and browser headers.

Google privacy information: https://policies.google.com/privacy

8.7 Legal, safety and business recipients

We may disclose information where reasonably necessary to comply with law, respond to valid legal process, prevent serious harm, investigate fraud, enforce our rights, or complete a genuine corporate transaction subject to appropriate confidentiality and privacy protections.

Service providers that handle Discord API data on our behalf must be bound in writing to use that data only at our direction to operate the services and not for their own purposes.

9. WHAT WE DO NOT DO

We do not:

(a)

sell personal information as a standalone dataset;

(b)

sell, license or commercialise Discord API data;

(c)

disclose Discord API data to advertising networks, data brokers or targeted-advertising services;

(d)

use Discord message content to train AI or machine-learning models;

(e)

ask for Discord passwords or authentication tokens; or

(f)

use personal information for materially unrelated purposes without a lawful basis and any notice or consent required by law.

10. PUBLIC AND SHARED INFORMATION

Information you deliberately post in a Discord server is visible according to that server's permissions and Discord's functionality. Discord messages may remain available through Discord even after a Pessimist account is deleted.

Ban appeals may be shown to authorised moderators. Gift-redemption links are shareable by design, and a person who receives a valid link may be able to open its redemption page. Administrator-supplied public images may be publicly accessible where they are intentionally published or embedded.

Authorised Pupi.Co administrators may access account, entitlement, billing-reference, appeal, error and security information when reasonably necessary to operate the services. Administrative access is restricted and must not be used for personal purposes.

11. COOKIES AND LOCAL STORAGE

Pessimist websites may use:

(a)

an essential authentication-session cookie, which may operate on a rolling basis for up to 30 days;

(b)

a sidebar preference cookie for up to 7 days;

(c)

local storage for a dark, light or system theme preference until cleared; and

(d)

short-lived security, OAuth and login-state values needed to prevent misuse and complete authentication.

Essential cookies are required for requested account and security functions. You can clear cookies and local storage through your browser, although doing so may sign you out or reset preferences.

Where law requires consent for non-essential analytics or similar technology, it will not be activated for that user until the required consent is obtained.

12. RETENTION

We retain information only for as long as reasonably needed for the purposes in this policy, subject to user and Discord deletion requests and any legal requirement to retain information. Our intended standard retention schedule is:

(a)

authentication sessions: until expiry, logout or revocation, ordinarily no more than 30 days;

(b)

unused or expired login and setup tokens: deleted within 30 days after expiry;

(c)

account and profile data: while the account is active and ordinarily up to 12 months after inactivity, unless deleted sooner on request;

(d)

active entitlement records: for the life of the entitlement;

(e)

minimal entitlement-use and payment-dispute records: ordinarily up to 24 months after the last relevant transaction, or until a dispute is finally resolved;

(f)

financial, invoice, tax and legally required transaction records: for the period required by law, which may be up to 7 years;

(g)

gift and refund records forming part of financial records: up to 7 years where legally required;

(h)

ban appeals and moderation decisions: ordinarily up to 24 months after closure, unless deletion is required sooner or a longer period is legally required;

(i)

support, cancellation feedback and ordinary complaints: ordinarily up to 24 months after closure;

(j)

referral, invitation and voting-reward records: ordinarily up to 12 months after the related entitlement or attribution ends;

(k)

security and error logs: ordinarily up to 90 days, unless needed longer for an active incident or legal matter;

(l)

marketing subscription data: until unsubscribe or deletion, with a minimal suppression record retained as needed to honour the opt-out; and

(m)

browser preferences: until expiry or until cleared by the user.

Discord API data will be promptly deleted when Discord or the relevant user validly requests deletion, when it is no longer necessary for the approved service functionality, or when we stop operating the relevant service, unless retention is required by law. We aim to complete a verified deletion request within 30 days.

Deleted information may remain temporarily in restricted backups until overwritten through ordinary backup rotation. During that period it is put beyond ordinary use and is restored only where necessary for disaster recovery, after which the deletion is reapplied.

13. SECURITY

We use reasonable technical and organisational safeguards appropriate to the information and risks involved. These include access controls, restricted administration, session protections, signed payment webhooks, provider security controls and encryption of Discord API data at rest and in transit where required.

No internet service is completely secure. If an incident involving personal information requires notification under applicable law or Discord's rules, we will notify affected users, Discord and regulators as required.

14. INTERNATIONAL PROCESSING

Pupi.Co operates from Australia, but Discord and our contracted technology, payment, database, email and infrastructure providers may process information outside Australia and outside your country. Likely regions include the United States and other countries in which the named providers and their subprocessors operate. Exact processing locations may depend on provider configuration and network routing.

Where required, we take reasonable steps concerning overseas recipients and use contractual or other recognised safeguards. You may contact us for current information about a particular provider or transfer.

15. YOUR PRIVACY RIGHTS AND CHOICES

Depending on applicable law, you may ask us to:

(a)

confirm whether we hold personal information about you;

(b)

provide access to or a copy of that information;

(c)

correct inaccurate, incomplete or outdated information;

(d)

delete or deidentify information;

(e)

restrict or object to particular processing;

(f)

provide portable information where applicable;

(g)

withdraw consent for future consent-based processing; or

(h)

explain an automated process that materially affects you.

You may unsubscribe from non-essential email through the link in the email. You can manage cookies through your browser and cancel subscriptions through the billing provider identified at checkout.

To make a request, email pessimist@emmasdome.co and include your Discord user ID, relevant server ID if applicable, the service involved and the request. We may ask for proportionate verification before disclosing or deleting information. Do not send a password, login token or complete payment-card number.

We aim to respond within 30 days. We may lawfully refuse or limit a request where necessary to protect another person, preserve legal privilege, prevent fraud, comply with law or address another recognised exception. If so, we will explain the decision where permitted.

The fact that a user is blocked, frozen, banned or involved in a payment dispute does not remove a privacy right. A request must instead be assessed under applicable law and Discord's deletion requirements.

16. CHILDREN

The services are not directed to anyone below the minimum age required by Discord or applicable law. A user must be at least 13 and may need to be older in their country.

If we learn that we collected personal information from a person who was not permitted to use Discord or the service, we will take reasonable steps to delete it and restrict the account. A parent or guardian may contact pessimist@emmasdome.co.

17. PRIVACY COMPLAINTS

Send a privacy complaint to pessimist@emmasdome.co with enough detail for us to understand the concern. We will acknowledge and investigate the complaint and aim to provide a substantive response within 30 days.

If the Privacy Act applies and you are dissatisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner:

https://www.oaic.gov.au/privacy/privacy-complaints

You may also have the right to contact a privacy or data-protection authority where you live.

18. CHANGES TO THIS POLICY

We may update this policy when our services, providers or legal obligations change. We will update the date above and provide reasonable notice of a material change through the website, Discord or another appropriate channel. Where consent is legally required for a new use, we will seek it before that use begins.

19. CONTACT

Email: pessimist@emmasdome.co