Privacy Policy

Data we collect from Discord

When you sign in with Discord (OAuth), Discord shares the following data with us based on the scopes you authorize:

• Discord user ID — your unique account identifier;
• Username — your Discord username;
• Global (display) name — your chosen display name;
• Avatar — your profile image reference;
• Email address — the email associated with your Discord account;
• Guild list — the list of Discord servers you belong to, used to verify that you can manage a server you wish to list.

Purpose and legal basis

• Account creation and authentication (Discord ID, username, global name, avatar) — to operate your account. Basis: performance of a contract.
• Verifying server ownership (guild list) — to confirm you may list and manage a given server. Basis: performance of a contract.
• Transactional communication (email) — receipts, security and service notices. Basis: contract and legitimate interest.
• Security, fraud prevention, and abuse moderation. Basis: legitimate interest and legal obligation.

Payments

Paid subscriptions are processed by Stripe, our payment processor. Stripe collects and processes your payment details directly. We never receive or store your full card number, CVC, or other complete card data. We retain limited billing metadata (such as subscription status, plan, and the last four digits or card brand surfaced by Stripe) to manage your subscription. Stripe’s handling of your data is governed by Stripe’s own privacy policy.

Sub-processors

We share data with the following service providers to operate:

• Discord — authentication and OAuth identity data;
• Stripe — payment processing and subscription billing;
• Hosting and edge/CDN providers (including Cloudflare) — application hosting, delivery, and security.

International data transfers

Our providers may process data in countries other than yours, including the United States. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms offered by those providers.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove or anonymize your personal data within a reasonable period, except where we must retain certain records (for example, billing and transaction records) to comply with legal, tax, or accounting obligations.

Your rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to access, rectify, and erase your personal data, to receive a portable copy, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.

Your rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to access and delete it, and to correct inaccuracies. You also have the right to opt out of any “sale” or “sharing” of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising any of these rights.

How to exercise your rights

To make any privacy request, email us at [email protected] or use our Contact page. We will verify your request and respond within the timeframe required by applicable law.

Cookies

We use a small number of cookies, including a strictly necessary authentication session cookie. For details, see our Cookie Policy.