What we protect, and how.
Straight answers to what people worry about before trusting us with their bot, with what we do and what we don't kept clearly apart.
Common questions
Can anyone else see my bot's token?
It's encrypted when stored, and never shown on screen again once saved. The encryption keys are kept under strict control, with access tightly limited.
Applies to: bot tokens and environment variables registered as secretsIs every value I set on my bot encrypted?
No. Only environment variables registered as "secret" are encrypted. Environment variables that aren't secret, and persistent variables, are not encrypted, and their values can be viewed in the dashboard. New environment variables are set to "secret" by default.
Can other bots see my bot's data?
The data your bot runs on is separated per bot by the database itself. A bot's processes can only touch that bot's own data. The application also filters by bot, so the separation is twofold.
Can my traffic be read along the way?
Traffic is encrypted. We also have protections in place against suspicious access.
How can I protect my account?
You can sign in with a passkey and use recovery codes. You can also sign out of all your other devices at once.
Do you keep a record of what your team does?
Administrative actions by our team are logged: who did what, when, and to what. The log covers our team's actions. It is not a history of your own actions.
I found a security issue. Who should I contact?
Please reach our support team at help@botshade.com. Including the steps to reproduce it and what it affects helps us a lot.
Anything not written here is not something we promise. If you have questions, ask us on our Discord support server.
Go to support