Privacy Policy

1. Data we process

When you log in with Discord: your ID, username, avatar, locale and the list of servers you belong to (with your permissions). We do not access your e-mail or your private messages.

From servers the bot is in: the settings you save in the dashboard, each member's XP and level, moderation history, the logs you configure, suggestions with their votes and, if statistics are on, how many messages each member writes per day (never the content of the messages).

If you customise your rank card: your choices and, if you upload one, a photo. The photo is stored cropped and without metadata (such as location), staff review it before it is shown, and it is deleted when you remove it, when it is rejected or when you delete your account.

Technical data: a keyed, non-reversible hash of your IP and your user agent, for session security and abuse prevention.

Website notifications (the bell): yours and your preferences. They're deleted after 90 days, or sooner if you delete them.

Tickets: if the server turns transcripts on, the copy of the conversation is posted as a file in its Discord channel (and DMed to the author if they choose so). We only store where that file is and who wrote in the ticket, so those people, the ticket's team and the server's managers can open it from the website; that link stops working after a year.

If you add the bot with the option to join the support server, we use your Discord permission once to add you to it and send you a welcome message; we don't keep that permission.

Payments: handled by Stripe. We never see or store your card details, only your subscription status.

2. Why we use it

To provide the service (legal basis: performance of contract), to protect accounts and prevent abuse (legitimate interest) and to meet legal obligations such as invoicing.

3. Retention

Sessions expire after 30 days, or after 7 days without activity. The dashboard audit log is kept for 12 months. Per-member and per-channel statistics are deleted after 92 days and the server's daily totals after 400 days. A server's data (settings, levels, moderation cases, tickets, statistics…) is kept while the bot is in it; if the bot is removed it's deleted after 6 months, or sooner if its administrators ask.

Database backups are kept encrypted for up to 30 days: deleted data may remain in them for that time, until they expire.

Billing data is kept for as long as the law requires.

4. Sharing

With providers needed to run the service (hosting, database, encrypted backups and Stripe for payments), always under data processing agreements. We never sell personal data.

5. Security

We use encryption in transit (HTTPS), encryption at rest for Discord tokens and backups, secure cookies and permission checks on every dashboard operation.

6. Your rights

You can access, rectify, export and delete your data. From My account you can download a copy and delete your account. You can also revoke access in Discord Settings › Authorized Apps.

To exercise any right, contact us at discord.gg/gkK8wBKDU2. You may lodge a complaint with the data protection authority of France.

7. Cookies

We only use strictly necessary cookies: the session cookie, a temporary one during login and the language cookie. No advertising or tracking cookies.