1. Who we are
Artchemy Labs LLC, a company registered in Connecticut, United States, makes Hootloot. In this policy, "we," "us," and "Hootloot" mean Artchemy Labs LLC. "You" means the person using the bot. Hootloot runs on Discord, and your use of Discord is also governed by Discord's own terms and privacy policy.
2. The short version
Hootloot stores the pages you ask it to watch, the settings for each watch, and the Discord IDs it needs to send you the alert. It does not read your messages, never sees your payment details, and sells nothing to anyone. Delete a watch and it's gone; remove the bot and everything goes.
3. What we receive from Discord
When you add Hootloot to a server or use it in your DMs, Discord provides the minimum identifiers Hootloot needs to function:
- Your Discord user ID, so a watch belongs to you and so we can DM you an alert.
- The server (guild) ID and channel ID where a watch lives, so a server alert lands in the right place.
- Your subscription status for Hootloot Premium, as reported by Discord's subscription system.
These are account and location identifiers, not your name, email, or profile. Hootloot works entirely through slash commands and its own dashboards.
4. What Hootloot stores
The useful part of Hootloot is the watches you create. For each one, we store:
- The URL you chose to watch and an optional name you gave it.
- Your watch settings, how often to check, which kind of change to alert on, any size or keyword filter, quiet hours, and pause or snooze state.
- The page state Hootloot reads from that URL, such as price, stock status, available sizes, or item counts, and a record of how it changed over time, which is what lets Hootloot tell you what changed rather than just that something did.
- Server and personal settings, defaults you set for how alerts behave.
All of this lives in a database on our hosting provider (see §6). We keep it only to run your watches.
5. What we never receive
- Your messages. Hootloot doesn't read your conversations. It responds to slash commands and its own buttons, that's it.
- Your payment details. Premium is billed through Discord's subscription system. Discord processes the payment; Hootloot only learns whether you're subscribed. We never see or store a card number.
- Your identity. No email, no real name, no address, no contacts.
6. Who else touches your data
These are our subprocessors, the third parties involved in making Hootloot work. We keep this list current; if we add one, we update this page and give notice as described in §15.
| Who | What they do | Where |
|---|---|---|
| Discord | The platform Hootloot runs on. Delivers your alerts and handles Premium billing. | United States |
| Railway | Application hosting and our database. | United States |
| Google (Gemini API) & Anthropic (Claude API) | Generate a short summary of a change when the page's own data isn't enough to describe it. See §7. | United States |
| Affiliate networks (e.g. Skimlinks / Sovrn) | If you click an optional affiliate link, the network records the click to attribute any commission. See §8. | United States |
Separately, Hootloot fetches the web pages you choose to watch, on your behalf. Those sites are not our subprocessors, but you should know Hootloot makes requests to them the same way a browser would.
7. How we use AI
Most Hootloot alerts are built directly from the page's own structured data, such as a price, a stock flag, or a size list, and no AI is involved at all. Occasionally, when Hootloot cannot describe a change precisely from that data, it sends a short excerpt of the changed page to an AI provider (Google's Gemini or Anthropic's Claude) to produce a one-line summary.
Two things are true, and we state them plainly:
- These excerpts are sent only to generate that summary. Once the model returns it, the exchange is over.
- Your data is not used to train AI models, ours or the providers'. We use these APIs in a mode that does not permit training on the content we send.
If we ever change our AI providers, or change what is sent to them, that is a material change and we will give notice under §15.
8. Affiliate links
Some links Hootloot shows, clearly labeled, always optional, and shown alongside your own link, never replacing it, are affiliate links. If you choose to click one and buy something, we may earn a commission at no extra cost to you, and the affiliate network records the click to attribute it. Your own link is never altered, and if your URL already carries someone's affiliate tag, we leave it alone. The full details are in our affiliate disclosure.
9. How long we keep things
| What | How long |
|---|---|
| Your watches & settings | Until you delete the watch, or remove the bot. |
| Change history for a watch | Kept while the watch exists, to power diffs and your dashboard. |
| Database backups | Short-lived, rotating nightly snapshots (a few days). Deleted data clears from backups as they roll over. |
10. Deleting everything
You are in control, and none of this requires emailing us:
- Delete a single watch anytime from the Hootloot dashboard (/hootloot me or /hootloot server).
- Remove the bot from your server, or block its DMs, to stop all processing for you.
If you'd like us to purge everything associated with your Discord ID directly, email privacy@artchemylabs.com and we'll take care of it.
11. Your rights
Depending on where you live, and in particular under the Connecticut Data Privacy Act (CTDPA) and the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), you have the right to access, correct, delete, and obtain a copy of the personal data we hold, to appeal our decision on such a request, and not to be discriminated against for exercising any of these.
Hootloot does not sell personal data, and does not share it for cross-context behavioral advertising. There is no opt-out to find, because there is nothing to opt out of.
To exercise any right, email privacy@artchemylabs.com. We may need to confirm the Discord account is yours before we act. That protection exists for you, not against you.
12. This website
This website sets no cookies and runs no analytics. No tracking pixel, no advertising network, no session recording, no fingerprinting.
The one external request the page makes is to Google Fonts, which serves the typefaces and, as any CDN does, receives your IP address in order to deliver them. Clicking an affiliate link on the site shares standard click data with the relevant network, as described in §8.
13. Age
Hootloot follows Discord's rules: you must be at least 13 years old, or older where your country requires it, to use Discord and therefore Hootloot. We do not knowingly collect data from anyone below that age. If we learn we have, we'll delete it.
14. Security
We use standard measures to protect data: encrypted connections in transit, access-restricted infrastructure, and the smallest possible number of people able to reach production data. No system is perfectly secure, so we designed Hootloot to hold as little as possible for as short a time as possible, the only security measure that never fails.
15. Changes to this policy
We may update this policy as the product changes; the "Last updated" date above always reflects the current version. For material changes, a change in what we collect, how we use or share it, our AI providers, our subprocessors, or what a paid plan includes, we'll give notice before it takes effect.
16. Contact
Questions about this policy, or anything we hold:
Email: privacy@artchemylabs.com
Support: support@artchemylabs.com
Post: Artchemy Labs LLC, 2389 Main St STE 100, Glastonbury, CT 06033