Draft, not legal advice

Privacy policy

This is a placeholder privacy policy for Keepcord. Replace it with a reviewed document before going to production.

What we collect

• Discord account data provided through OAuth2: user id, username, avatar and, if the server enabled those scopes, email address, connected accounts and the list of servers you are in.
• Verification metadata: timestamp, server id, roles and nickname snapshot, trust score, flags.
• Optional, per-server: a salted hash of your IP address and browser fingerprint (for alt detection) or the full IP address when the server owner enabled it.
• Server data in backups: roles, channels, settings, emojis, stickers, bans, AutoMod rules and messages, as configured by the server owner.

Why

To let server owners verify members, re-add them after a raid or deletion (using the guilds.join authorization you granted), and restore server structure from backups.

Storage & security

OAuth tokens are encrypted at rest with AES-256-GCM. Data is stored in the EU. Access is limited to the server team members who manage the server in the dashboard.

Your rights

You can revoke Keepcord's access at any time from Discord → Settings → Authorized Apps. Server owners can delete your data with /deluser. For data requests, contact [email protected].

Retention

Data is kept while the authorization is valid or until the server's retention period expires, whichever is shorter.