1. Who This Policy Covers
This Privacy Policy explains what information Chrysoberyl (the "Bot") and its web dashboard (the "Dashboard") collect, why, and what you can do about it. It applies to everyone who uses the Bot in a Discord server, signs in to the Dashboard, or fills in a form on this site, such as a ban appeal.
2. Information We Collect
From Discord, when the Bot is in your server:
- Your Discord user ID, username, display name and avatar.
- Server information needed for the features a server turns on: server ID and name, channels, roles and member counts.
- Activity counts used for leveling and leaderboards, such as how many messages you've sent and the XP and level that gives you. We count messages; we don't keep what they say.
- Moderation records a server creates: warnings, strikes, timeouts, kicks and bans, with the reason a moderator gave and the case number.
- Invite tracking, if a server uses it: which invite you joined with and who created it.
- Entries for giveaways you join, ticket records (who opened a ticket and when), and suggestions you post.
- For the scam image detector: a fingerprint (hash) of images flagged as possible scams, the score, and the moderator's verdict. We don't keep the image itself.
When you sign in to the Dashboard:
- Your Discord user ID, username and avatar, and a sign-in token from Discord that lets the Dashboard see which servers you manage.
- A session cookie that keeps you signed in for one day, or 30 days if you choose to stay signed in.
When you fill in a form:
- Ban and kick appeals: your answers, your user ID and the outcome.
What server staff set up:
- Server settings, custom messages, embeds, custom commands, uploaded images (such as welcome images, embed images or a custom bot avatar), and the social accounts a server follows.
- Backups of a server's bot settings, if backups are turned on.
3. How We Use It
We use this information only to run the Bot and the Dashboard:
- To provide the features a server turns on, such as leveling, moderation, appeals, giveaways, tickets and social alerts.
- To let you sign in and to show you only the servers you're allowed to manage.
- To keep the service safe: stopping abuse, spam and scams, and keeping basic error logs.
- To restore a server's settings from a backup when its staff ask.
We do not sell your information, and we don't use it for advertising.
4. Cookies and Local Storage
The Dashboard uses one cookie, to keep you signed in. Your browser also stores a few preferences on your device, such as your chosen theme and language and which release notes you've seen. We don't use advertising or tracking cookies.
5. Who We Share It With
We share information only with the services the Bot needs to work:
- Discord, which the Bot and sign-in run on.
- Cloudflare, which hosts the Dashboard and its connection to our database.
- YouTube, Twitch, Kick, TikTok and Instagram, only to look up public accounts that a server follows for social alerts. We send them the account name, not anything about you.
We may also disclose information if the law requires it.
6. How Long We Keep It
- Sign-in sessions end after one day, or 30 days if you chose to stay signed in.
- Appeals are deleted after the time a server sets once they're resolved (14 days unless the server changes it).
- A server keeps its most recent backups (12 by default); older ones are deleted automatically.
- Other data, such as XP, moderation records and settings, is kept while the Bot is in the server so its features keep working.
7. Your Choices
- You can sign out of the Dashboard at any time, which ends your session.
- Server staff can change or delete their server's settings, messages and records from the Dashboard.
- You can ask us to see or delete the information we hold about you. Contact us through the support server linked in the footer of this site. We may need to keep some records, such as moderation history, where a server needs them or the law requires it.
8. Children
The Bot is not meant for anyone under 13, or the minimum age of digital consent in your country. If you believe a child has given us information, contact us and we will delete it.
9. Security
We protect information with access controls, encrypted connections and limits on who can reach our systems. No service is perfectly secure, so we can't guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top shows when it last changed. Continued use of the Bot or the Dashboard after a change means you accept the updated policy.
11. Contact
If you have any questions about this Privacy Policy or your information, you can reach us through the links in the footer of this site.
EN