I'd like to see Discord applications have OPTIONAL fields to specify links for a privacy policy and terms of service for the application in the developer portal for developers who may have them. The purpose of this would be to allow users to have proper notice if using a developer's bot is subject to any conditions and give notice to users of the developer's privacy practices, including what end user data the bot developer collects and how they use that end user data.

Discord could then use the links provided to notify the user via the authorization flow to let users know that the application/bot they are authorizing is subject to these additional terms and policies.

I think it's also worth pointing out that many of the questions that are asked as part of the bot verification process could probably be answered if they were able to review a developer's privacy policy, the same one which users would see.

In closing, I believe that this would be a valuable change for both developers and end users. Developers will more easily be able to communicate the rules of using their bot, while users will be informed of the developer's privacy practices. Additionally, Discord can also review developer's privacy policies to ensure that they are in line with Discord's own privacy policy and comply with the developer terms.

--

EDIT: This feature request is trying to solve the problem of users being able to add bots and not being presented with the developer's privacy policy before it starts processing end user data. For example, the user is given no notice about who the developer of the bot is, what information that developer collects with their bot, and how that information is going to be used. You might potentially be able to find a website for the bot with this information or it might be contained within the bot, but both of those aren't great solutions. For the former, the end user might not know about such a site and for the latter, the bot is already processing end user data before they have a chance to know the full terms and policy. Both of those are inadequate, in my opinion.

EDIT: For the avoidance of doubt, this proposal is NOT intended to require developers to have their own privacy policy or terms. My proposal is only an attempt to solve a problem for developers that already have their own privacy policy or terms from being able to give proper notice to end users. For further clarification, when I refer to an "end user", I'm referring to a server owner or administrator that adds a bot, not every member of a guild.