Privacy Policy for Diski

a. The Short Version

• Diski stores your Discord user ID together with what the features you use need, like your XP, your birthday or a ticket you opened.
• Each server's staff decide which Diski features are switched on in their server, and they can see most of the records those features keep.
• Diski reads messages as they arrive to run features like AutoMod and auto-responders, but it doesn't save them in its database. The exceptions are ticket transcripts and text you give Diski directly, such as a suggestion, an application or a command.
• We don't sell your data or show ads, and the website doesn't use advertising or analytics cookies.
• Payments go through Stripe (subscriptions started earlier with PayPal stay with PayPal). Diski never sees your card number.
• If Diski is removed from a server, that server's data is deleted 30 days later unless Diski is added back. Logs are kept for no more than 31 days and backups for 14 days.
• Want a copy of your data, or want something deleted? Email [email protected] and we'll take care of it.

b. Who We Are and What This Covers

Diski ("we", "us") runs the Diski Discord bot, the dashboard at diski.xyz and its API at api.diski.xyz. This policy covers all three.

• Diski works inside Discord, so Discord's own Privacy Policy covers what Discord does with your account.
• Each server's owner and staff choose which Diski features run in their server and how they're set up. Most of what Diski stores about members exists only because a server switched a feature on.

c. Signing In to the Dashboard

You sign in with your Discord account. We ask Discord for two permissions: identify (your user ID, username, display name, avatar and banner) and guilds (the servers you're in and your permissions in each, so we can show the servers you're allowed to manage).

• We save that information on your Diski account, together with the login tokens Discord gives us. The tokens stay on our servers and are never sent to your browser; we use them to refresh your server list and profile from Discord from time to time.
• Diski doesn't ask Discord for your email address, and email addresses saved by earlier sign-ins are being removed from accounts. The only email we handle is the one you type at checkout for your receipts, which goes to Stripe (see "Payments and Billing").
• Cookies: access_token keeps you signed in for up to 30 days (it's a secure, httpOnly cookie, so scripts on the page can't read it); logged_in is a simple "1" that tells the website you're signed in (also 30 days); oauth_state protects the sign-in from forgery and lasts 10 minutes; and login_return remembers which page to bring you back to after signing in (10 minutes). The dashboard also remembers in your browser whether you've closed a banner. We don't use advertising or analytics cookies. When you open the checkout, Stripe's payment form may set its own cookies, for example to prevent fraud.
• Logging out ends your session on every device at once. If you remove Diski under Authorized Apps in your Discord settings, Diski notices the next time it checks with Discord, stops using your Discord login and signs you out everywhere.

d. Your Server's Settings

When Diski joins a server, it saves the server's name, icon and description, a few counts (members, channels, roles, emojis and boosts) and a list of the server's channels and roles (names and IDs) so the dashboard's menus work.

• Everything set up for a server, in the dashboard or with commands (channels, roles, messages, embeds, panels, rules, schedules and so on), is stored for that server.
• Only people with the Manage Server permission in a server can open its dashboard, along with Diski staff when they're helping with support. Whoever pays for a server's Premium can always open its billing page.
• Changes saved in the dashboard are recorded in a security log (who made them, when, which module and what was sent) that's deleted after 30 days.

e. Community Features

Diski only keeps the things below in servers that switched the feature on. Each item says what's stored, who can see it and when it goes away.

• Leveling. Your XP and level, how many of your messages earned XP (a number, never the messages themselves), your minutes in voice channels, when you last earned XP, and a copy of your display name and avatar link (refreshed every few hours) so leaderboards load quickly. Members can look up anyone's rank, level, XP, message count and voice time with /rank and see the top members with /leaderboard; server staff can also edit or reset XP. A server can turn on a public leaderboard page on diski.xyz, which shows the name, avatar, level and XP of members who have earned XP to anyone with the link, without signing in. Staff can also import XP from MEE6's public leaderboard for their server. XP stays until the server resets it, or until you leave if the server turned on "reset on leave".
• Birthdays. The day and month you save with /birthday set, plus your birth year and time zone if you choose to add them. Other members can see your birthday (day and month) with /birthday view and /birthday upcoming, but never your age or time zone. Your birth year is only used to show your age in the server's birthday message, and only if that message includes {age}. Server staff see the day, month and time zone in the dashboard (not the year) and can remove an entry. /birthday remove deletes the date, year and time zone straight away, and so does leaving the server. So that nobody is announced twice, Diski may keep a small note of when it last celebrated you in that server (no date of birth); that note is deleted automatically within about two years.
• Sticky roles. When you leave a server that uses Sticky Roles, Diski saves the list of roles you had so it can give them back if you return. The list is deleted when you rejoin, if you're banned, or automatically after the time the server chose (1 to 365 days, 30 by default).
• Invite tracker. Which invite you joined with and who created it, when you joined and left, whether you'd been in the server before, and whether your account was newer than the server's "fake account" limit, plus each inviter's totals. Server staff see this in the dashboard and their log channel, and members can check invite counts with /invites. It stays until server staff reset the server's invite data.
• Giveaways. Who entered (user ID and username), when, any bonus entries, and the winners. Server staff can see the entry list. It's deleted when staff delete the giveaway.
• Polls. For button polls, Diski records which option each member picked so everyone votes only once. Whoever creates the poll chooses whether it's anonymous: if it is, no one in the server can see who voted, not even its staff; if it isn't, the poll says so and staff can see who voted in the dashboard. Discord's own native polls are run by Discord, which shows voters to everyone; Diski reads the results but doesn't store individual votes. Poll data is deleted when staff delete the poll.
• Suggestions. The title and text, who wrote it, who voted for and against it, and the staff decision and reason. If a server allows anonymous suggestions, other members don't see who wrote yours, but server staff can.
• Tags, stat channels and temporary voice. Tags store the text a server's staff saved and who created or last edited it. Stat channels only show counts. For temporary voice channels, if the server remembers settings, Diski saves the name, user limit, lock and hide settings and the allow and block lists you set for your channel, so your next one starts the same way.
• Linked roles and Guild Linker. These give you a role based on a role you already have, in the same server or, with Guild Linker, in another server whose staff approved the link.
• Commands. When you use a Diski command, we log the command, the options you typed, your user ID and username, the server and channel, whether it worked and how long it took. Only Diski staff can see these logs, and they're deleted after 30 days.

f. Tickets and Applications

• Tickets. Who opened the ticket, who was added to it, who claimed and closed it, when things happened and the close reason; your answers to the ticket form (for uploaded files we keep only the file names, the files themselves are posted in the ticket channel on Discord); the 1 to 5 star rating and comment you can leave after it closes; and the list of members a server has blocked from opening tickets.
• Transcripts. When a ticket is closed or saved, Diski can make a web-page copy of the ticket channel: its messages, and images unless the server turned that off. Common secrets such as API keys and login tokens are blanked out automatically, unless the server turned that off too. Each transcript has a private link containing a secret key. Anyone who has the link can open the transcript, so treat it like a password. Links can be sent by DM to the person who opened the ticket and posted in the server's transcript channel, and server staff can read transcripts in the dashboard.
• Applications. Your answers, your username and avatar, the status, and the reviewer's notes and decision. Server staff review them in Discord and in the dashboard.
• Tickets, transcripts and applications aren't deleted automatically. The server's owner or staff can ask us to delete them, and you can ask about your own (see "Your Choices and Rights" below).

g. Moderation, AutoMod and Security

• Moderation cases. Each warning, timeout, kick, ban and similar action is saved as a case: the member, the moderator, the reason, any duration, when it happened and whether a warning was pardoned. Cases also come from AutoMod and from kicks, bans and timeouts done directly in Discord (read from the server's audit log). If the server has it on, Diski DMs you when you're warned, timed out, kicked or banned. Server staff see cases in the dashboard and with moderator commands. Cases aren't deleted automatically; a server can make old warnings stop counting, but the record stays.
• AutoMod. Diski checks new and edited messages against the server's rules (banned words, spam, links, caps and so on) as they arrive. This happens in memory: messages aren't saved in our database, and for the spam and duplicate rules recent messages are only remembered for about a minute. When AutoMod acts, it can post a log in the server's log channel that includes up to the first 1,024 characters of the message, and it can record a moderation case.
• Phishing links. If a server turns it on, links are checked against a public, community-maintained list of known phishing websites. We download that list to our own servers, so your messages are never sent anywhere for this check.
• Raid protection and account age. Diski counts how quickly people join (in memory) to spot raids, and can lock the server down or kick or time out new members during one. The account-age check looks at when your Discord account was created and can kick, ban, time out or quarantine new accounts, after sending you the server's explanation by DM if it has one. Diski saves when a lockdown started and who started it.
• Verification. The challenge you answer (a button, code, math question or reaction) and your failed attempts are only kept in memory, briefly. Diski then gives you the verified role and may post a note in the server's log channel.
• Action logs. If a server turns logging on, Diski posts events into that server's own channels: deleted and edited messages (with their text and attachment links), bulk deletions, invites, moderator commands, joins and leaves, role and nickname changes, bans, unbans and timeouts, channel, role and emoji changes, and voice joins and leaves. These logs live in Discord, in the server's channels. Diski doesn't keep a copy, and the server decides who can see them.
• Starboard. When a message collects enough reactions, Diski reposts it (its author, text and first image) in the server's starboard channel. It only does this when everyone who can see the starboard can already see the original message, unless an admin chose to include private channels. Diski itself only stores references (message and channel IDs, the author's ID and the reaction count), not the content, and it takes the repost down if the original is deleted.

h. Welcome Cards, Feeds, Alerts, Music and the Custom Bot Identity

• Welcome messages and cards. Welcome and goodbye messages can include your name and avatar. Welcome cards draw them into an image when you join; the image is made on the spot and not saved (avatars are only cached in memory for a short time). Premium servers can add their own background image: Diski downloads it once from Discord and stores it, so it keeps working after Discord's link expires. It stays until server staff remove it.
• Feeds (Premium). Server staff can follow public RSS or Atom feeds and Bluesky accounts. Diski fetches those public feeds and posts new items, storing the feed's address and short fingerprints of the items it already posted so nothing is posted twice.
• Stream alerts. Twitch tells us when a followed streamer goes live, and Diski checks Kick, YouTube and TikTok regularly. Only public channel information is used, such as the channel name, profile picture, stream title, game and new videos.
• Music. Diski plays SoundCloud tracks, direct audio links and a hand-picked list of internet radio stations through an audio server we run in Australia. It doesn't store what you listen to: the queue only exists in memory and is gone when the music stops. Diski joins voice channels deafened, so it never hears or records voice chat.
• Custom bot identity. The custom bot identity isn't offered right now, and Diski shows its default look in every server. For servers that used it before, we keep a history of the last 20 changes (who made them, when and which parts changed, but not the images or text) and whether Diski staff locked the identity for breaking the Terms of Service . The images were passed straight to Discord and never stored by us. This record is deleted with the rest of the server's data.

i. Votes and Vote Rewards

When you vote for Diski on top.gg, top.gg sends us your Discord user ID, the time of your vote and whether it was a weekend vote. We use that to run vote rewards:

• We keep a history of your votes to work out your monthly total, your tickets in the monthly draw and any Premium time you earn.
• If you're in our support server, you get the Voter role while your vote is recent, and the Top Voter role if you reach the monthly target.
• Each monthly draw keeps a lasting record of its entrants (user ID, number of votes and tickets) and its winners, so the result can be checked. Winners are announced in our support server and sent a DM.
• Premium time you've earned but haven't applied to a server is shown in the dashboard with its expiry date.
• top.gg handles your vote under its own privacy policy.

j. Payments and Billing

Diski offers an optional paid Premium subscription, billed monthly or yearly. New subscriptions are paid by card through Stripe . Subscriptions that were started with PayPal are still billed and managed through PayPal.

• You enter your card details into Stripe's secure payment form (PayPal subscriptions are paid entirely on PayPal). Diski never receives, sees or stores your card number or security code.
• We store what we need to run the subscription: which server it's for, the plan, monthly or yearly billing, its status and dates (including any pending cancellation or pause), who paid (your Diski account), the Stripe or PayPal subscription ID, and a record of each payment event (amount, currency, date, type such as purchase, renewal, refund or cancellation, and the provider's reference). If you cancel, we save the reason you pick and any comment you add.
• We send Stripe only what it needs to connect a payment to your server: the server ID, the plan and billing period, your Diski account ID, and the email address you type at checkout, which Stripe uses to send your receipts. Stripe collects your card details (and, if it asks, your name and billing address) itself. For PayPal subscriptions, PayPal received the server ID and the plan, and it holds your payment details itself.
• If you pay for Premium, we use your Discord user ID to give you the Supporter role in our Discord support server, as part of priority support. That only works while you are a member of that server.
• The billing panel shows the card on file (brand, last four digits and expiry) and links to your invoices. These come live from Stripe, are shown only to the person who paid (and Diski staff), and aren't stored by us.
• Stripe and PayPal handle your payment information under their own privacy policies (see the Stripe Privacy Policy and the PayPal Privacy Statement for details). The Terms of Service explain how refunds work.

k. Logs, Hosting and Backups

• Our API keeps a log of the requests it receives: the time, the address requested and the result, your IP address, your browser's user agent, your Diski and Discord IDs if you're signed in, the server involved, and a shortened copy of what was sent with passwords, tokens and other secrets removed. The bot also logs things like which commands ran and any errors. These logs are kept for security and troubleshooting, for no more than 31 days.
• A separate security log records sign-ins, refused requests, payment events and dashboard changes, along with the IP address and browser involved. It's deleted automatically after 30 days.
• Diski runs on a rented server in Germany, and music plays from a separate audio server in Australia. Traffic to diski.xyz and api.diski.xyz passes through Cloudflare, which protects and speeds up the site. Our database is backed up every night to our storage provider, Cloudflare R2, and each backup is deleted after 14 days. This means your information may be stored or handled outside your own country.
• The website loads its fonts from Google Fonts and some styles from jsDelivr, which see your IP address when your browser fetches those files.
• We use reasonable safeguards, such as HTTPS, secure cookies, permission checks on every dashboard request and rate limits. However, no system is 100% secure, and we cannot guarantee absolute security.

l. Who Can See Your Information

• Other members of a server see what a feature shows in Discord, like leaderboards, birthdays, invite counts and giveaway winners.
• Server staff can see their server's records, as described above. They can't see your birth year, who voted in an anonymous poll, or the card and invoices of whoever pays for the server's Premium.
• Anyone with the link can open a ticket transcript, or a server's public leaderboard if that server turned it on.
• Diski staff (a small number of Diski administrators) can access any server's dashboard and our systems to give support, handle billing, keep Diski running and look into abuse.
• Service providers that help run Diski: Discord, Cloudflare, our hosting providers, Stripe, PayPal and top.gg. To run features, Diski also connects to public services such as Twitch, Kick, YouTube, TikTok, Bluesky, the RSS feeds a server follows, SoundCloud, internet radio stations, MEE6 (only for an XP import) and GitHub (for the phishing list). It only sends them what's needed to fetch public content, like a channel name or a song search, never your account details.
• We do not sell personal data. We only share it beyond the above if the law requires it, or when it's needed to protect Diski, its users or others, for example while investigating abuse of the bot.

m. How Long We Keep Things

• Your dashboard account: until you ask us to delete it. Sign-in sessions last up to 30 days, or until you log out.
• The security log and command logs: 30 days. Other logs: no more than 31 days.
• Sticky roles: the time the server chose (1 to 365 days). Birthdays: until you remove them or leave the server. XP: until the server resets it.
• Giveaways, polls and invite records: until server staff delete or reset them, or Diski is removed from the server (see below).
• Tickets, transcripts, applications, suggestions and moderation cases: no automatic deletion while Diski is in the server. They stay until the server or you ask us to delete them, or Diski is removed (see below).
• Vote history and draw records: kept as a record of the rewards. Billing records: as long as we need them for accounting, taxes and payment disputes.
• If Diski is removed from a server, that server's settings and records are deleted 30 days later, unless Diski is added back in the meantime (then everything is still there). A server whose Premium is still running, whether paid, from a voting reward or given by Diski staff, isn't deleted until its Premium has ended. Billing and payment records, vote and draw records and dashboard accounts are kept, as described above; if the server has billing history, we also keep its name, icon and subscription details so that history still names it. The server's owner can ask us to delete its data sooner.
• Deleted information can remain in our nightly backups for up to 14 days, until those backups are deleted.

n. Children's Privacy

Discord requires everyone to be at least 13 years old (or older where local law requires), and Diski relies on that requirement. Diski is not meant for anyone younger. The birth year in /birthday is optional and only used to show an age in a server's birthday message. If you believe a child under the minimum age has given us personal information, contact us and we'll delete it.

o. Your Choices and Rights

• Remove your birthday any time with /birthday remove. Leaving a server also removes your birthday there, and your XP if the server resets XP on leave.
• Server staff can remove birthdays, reset XP and invite data, and delete giveaways and polls from the dashboard.
• You can log out of the dashboard at any time, or remove Diski from Authorized Apps in your Discord settings.
• To see, correct or delete the information we hold about you, email [email protected] or ask in our support server on Discord, and include your Discord user ID. We may ask you to confirm it's really you, for example by messaging us from that Discord account.
• A server's owner can ask us to delete all of that server's data.
• Some records also belong to a server (moderation cases, for example), and we may need to keep billing records or information about abuse. If we can't delete something, we'll tell you why.
• Opting out of data collection may mean some Diski features won't work for you.

p. Changes to This Policy

We may update this Privacy Policy as Diski changes. We'll post the new version on this page with a new "Last updated" date, and let you know about significant changes through an announcement in our Discord support server or another reasonable method.