Hey everyone! I built a Python Discord bot that connects to an achievement tracking API and sends notifications when users unlock new achievements. Right now I’m only testing it with my own account but I want to make it work for multiple users in Discord servers.
I’m working on adding encryption for user API keys so the bot host can’t see personal data. Is this kind of bot integration something that’s typically allowed? What are the best practices for handling user credentials securely in this type of setup?
Any advice on privacy considerations or potential issues I should watch out for would be really helpful!