PRIVACY POLICY

CATEGORY I: PERMANENT DATA RETENTION (SUBJECT TO MANUAL DELETION REQUEST)

• Discord Guild Identifiers and Associated Nomenclature
• Channel Identification Numbers
• Role Assignment Identifiers
• User Identification Numbers
• Message Identifiers and Temporal Metadata
• Historical Avatar Representations
• User Aliases and Nomenclature History
• Cryptographically Hashed Internet Protocol Addresses

CATEGORY II: THREE HUNDRED AND SIXTY-FIVE (365) DAY RETENTION VIA CLOUDFLARE ENTERPRISE

• Internet Protocol Addresses and Associated Request Metadata
• Client Browser and Device Specifications
• Geolocation Data Points
• Traffic Analysis and Security Event Logs

CATEGORY III: FOURTEEN (14) DAY RETENTION PERIOD

• Command Execution Information (Command Name, Invoked By, Invoked At.) NO MESSAGE CONTENT IS STORED
• Command Parameter and Argument Data

CATEGORY V: POSTHOG ANALYTICS DATA (US SERVERS)

• Command Invocation Analytics (Command Usage, User ID, Guild ID)
• Anti-Nuke Event Data (Action Type, Punishment Type, Guild ID, User ID, Success Status, Reason)
• Anti-Raid Event Data (Action Type, Punishment Type, Guild ID, User ID, Success Status, Reason)
• Guild Analytics (Total Anti-Nuke/Anti-Raid Actions, Last Action Timestamps, Current Punishment Settings)

CATEGORY IV: TWO (2) HOUR MAXIMUM RETENTION IN VOLATILE MEMORY

• Recently Deleted Message Content (Maximum of Eighteen (18) Entries)
• Message Modification History (Maximum of Eighteen (18) Entries)
• Emoji Reaction Historical Data (Maximum of Eighteen (18) Entries)

DATA CENTER SECURITY SPECIFICATIONS

• Primary Processing Facility: Ashburn, Virginia (SOC 2 Type II Certified Infrastructure)
• Secondary Processing Facilities: New York, United States of America and Falkenstein, Federal Republic of Germany
• Twenty-Four (24) Hour Physical Security Monitoring and Access Control
• Regular Third-Party Security Audits and Compliance Verification

DATA PROTECTION MEASURES

• Implementation of Industry-Standard Encryption Protocols for Data at Rest and in Transit
• Automated Security Update Implementation and Patch Management System
• Multi-Factor Authentication and Role-Based Access Control Implementation
• Scheduled Data Backup Verification and Disaster Recovery Testing

REPORT PROCESSING LIMITATIONS AND DISCLAIMERS

The Company expressly disclaims any and all responsibility for the processing or handling of server-related reports. The Company lacks the requisite capabilities to verify or authenticate the veracity of such reports and therefore cannot undertake any actions predicated upon such unverified information.

In instances where users encounter violations of Discord's Terms of Service or Community Guidelines, such violations must be reported directly to Discord through their designated support channel at dis.gd/support.

• The Company maintains no report database infrastructure
• Report verification capabilities are not within the Company's operational scope
• All violations require direct submission to Discord's Trust & Safety division
• The Company does not engage in user or server dispute mediation

DATA SUBJECT RIGHTS

Pursuant to applicable data protection laws, you are entitled to exercise the following rights:

• Right to access and obtain a copy of your personal data
• Right to request deletion of your stored personal data
• Right to be informed about the processing of your personal data

To exercise any of the aforementioned rights, please submit your request via electronic mail to [email protected]. Please be advised that response times may vary, with a maximum processing time of twenty four (24) days.

AGE-RELATED REQUIREMENTS AND RESTRICTIONS

In accordance with the Children's Online Privacy Protection Act (COPPA) and Discord's Terms of Service, the following age-related restrictions are strictly enforced:

• Users must have attained a minimum age of thirteen (13) years to utilize the Service
• Users between thirteen (13) and eighteen (18) years of age must obtain parental or legal guardian consent
• Users under eighteen (18) years of age are expressly prohibited from accessing age-restricted functionalities

MINOR DATA PROCESSING PROTOCOL:

• The Company does not knowingly process or retain data from individuals under thirteen (13) years of age
• Upon discovery of data collection from an individual under thirteen (13) years of age, such data shall be promptly deleted
• Parents or legal guardians may request data deletion for users under eighteen (18) years of age

REQUIRED AUTHORIZATION SCOPES:

• identify - For Discord account verification and authentication
• guilds - For Service management permission verification

DATA PROCESSING PROTOCOL:

• The Company generates and maintains its own proprietary authentication tokens, distinct from Discord's account tokens which are never accessible to the Company
• Company-generated tokens are subject to industry-standard encryption protocols
• Token utilization is strictly limited to facilitating secure communication between the dashboard interface and Company's application programming interface
• Immediate token invalidation occurs upon user-initiated logout

NON-DISCLOSURE AND NON-TRANSFER POLICY

The Service maintains stringent data handling protocols:

• Prohibition of data sale or rental to third-party entities
• Non-disclosure of data to external Discord-based services
• Exclusive data retention within the Service's infrastructure
• Restricted external service access to user data

PARTNERSHIP EXCEPTION - PROX BOT

The Company maintains a strategic partnership with Prox (operated by loti.dev, managed by Zelfur.gg) to provide enhanced vanity URL reward functionality. Under this partnership:

• Configuration data entered through our Service for Prox's vanity URL reward system is shared with Prox
• This data sharing is strictly limited to information you explicitly provide for Prox's functionality
• Data sharing occurs only when you choose to configure Prox's services through our interface

LEGAL COMPLIANCE EXCEPTION

The sole exception to this policy shall be in response to legally binding requests from law enforcement agencies or judicial authorities. In such instances, only the specific data required by the legal order shall be disclosed.

ENHANCED RIGHTS UNDER GENERAL DATA PROTECTION REGULATION

Data subjects within the European Union are entitled to additional rights pursuant to the General Data Protection Regulation:

• Right of access to personal data
• Right to rectification of inaccurate personal data
• Right to erasure of personal data ("right to be forgotten")
• Right to restriction of processing
• Right to data portability

EXPEDITED PROCESSING PROTOCOL FOR EU DATA SUBJECTS:

To facilitate expedited processing of data subject requests, please include the designation "(EU CITIZEN)" in the subject line of electronic mail correspondence to [email protected]. Requests from European Union data subjects shall typically be processed within forty-eight (48) hours of receipt.

DATA COLLECTION PARAMETERS:

• Internet Protocol addresses and associated request metadata
• Client browser specifications and device identifiers
• Geographic location coordinates
• Network traffic patterns and security event logs

DATA RETENTION PROTOCOL:

• Cloudflare maintains data for three hundred and sixty-five (365) days
• Data processing is conducted in accordance with Cloudflare's privacy policy
• The Company maintains no direct control over Cloudflare's data retention practices

PROCESSING OBJECTIVES:

• Distributed Denial of Service (DDoS) protection and threat mitigation
• Service performance optimization protocols
• Security analytics and monitoring systems
• Service reliability enhancement protocols

PROCESSING PURPOSE:

The Service uses Cloudflare Turnstile to distinguish human visitors from automated bots and to protect against malicious activity. Turnstile may process client-side signals such as Internet Protocol addresses, TLS fingerprints, User-Agent headers, and site key metadata associated with your visit.

DATA CONTROLLER AND PROCESSOR ROLES:

Cloudflare processes Turnstile signals on our behalf as a data processor for bot detection and website protection. Cloudflare may also process certain signals as a data controller to improve Turnstile's bot detection capabilities, as described in Cloudflare's Turnstile Privacy Addendum.

INTERNAL PROCESSING PROTOCOL:

• Internet Protocol addresses undergo cryptographic hashing prior to storage
• Hashed identifiers are retained indefinitely pending manual deletion request
• Utilized for security protocol enforcement and abuse prevention measures

SECURITY IMPLEMENTATION MEASURES:

• Implementation of industry-standard cryptographic algorithms
• Regular third-party security protocol audits
• Access control monitoring and authentication protocols