Privacy Policy

Cinder only stores what its features need. Most of it depends on which features a server turns on.

• Discord IDs and names of servers, channels, roles and members, so settings and records point at the right things.
• Server settings that staff save in the dashboard or with commands, including custom messages, embeds and uploaded images.
• Leveling and activity: XP, levels, and daily counts of messages and voice time.
• Economy: coin balances, items, trades, quests and cooldowns, and a history of coin transactions.
• Moderation: warnings, timeouts, bans, notes and their reasons, and copies of messages that automod or anti-raid acted on.
• Tickets and modmail: the conversation, including message text, attachment links and who wrote what, saved as a transcript that staff can open.
• Member features: birthdays and timezones you set, reminders, AFK statuses, booster roles, personal voice channels and giveaway entries.
• Invite tracking: which invite a member joined with, if the server uses it.
• Server backups: channels, roles, permissions, settings and members' roles, when staff make a backup.

Cinder reads messages in the channels it can see so that commands, automod, leveling and similar features work. It does not keep the text of ordinary messages, except as described above. Recently deleted messages are kept in memory for /snipe for up to 6 hours.

When you log in to cinder.bot with Discord, Cinder receives and stores:

• Your Discord ID, username, avatar and email address, and the list of servers you are in, which is how the dashboard knows which servers you can manage.
• A limited access key that Discord issues when you log in. It only lets the dashboard see your basic profile, email and server list, which keeps that list up to date.
• A session, stored with your IP address and browser details, kept for up to 7 days after you were last active.

The dashboard uses cookies only to keep you logged in, and your browser's local storage to remember the servers you opened recently. There are no tracking or advertising cookies.

Data is used only to run Cinder's features, keep them secure, stop abuse and fix problems. Where the GDPR applies, the legal basis is our legitimate interest in providing the service you or your server chose to use, and for the dashboard, providing the service you log in to.

• Discord, since Cinder runs on it. Discord's own privacy policy applies there.
• /ai: your question, and a few recent messages from the channel for context, are sent to the AI providers behind it (such as Anthropic, OpenAI or Google) to write the answer.
• /translate: the text is sent to Google Translate.
• Alerts: Cinder asks Twitch, YouTube and the RSS feeds a server adds for new posts, and Twitch and Google (for YouTube) notify Cinder when a followed channel goes live or uploads. No member data is sent.
• Cloudflare carries the traffic to cinder.bot, and the dashboard loads emoji images from jsDelivr, which sees your IP address.

Nothing is sold or shared for advertising.

Server data is kept while the server uses Cinder and is not deleted automatically when Cinder is removed, so a server can add it back without losing its setup. Some records expire on their own, such as dashboard sessions after 7 days of inactivity. Anything can be deleted on request, as described below.

Data is stored on servers the Cinder team runs, behind access controls, and the dashboard is only served over HTTPS. No system is perfectly secure, but we work to keep your data safe.

You can ask to see the data Cinder has about you, have it corrected, have it deleted, or object to how it is used. Server owners can ask for all of their server's data to be deleted. Ask in the Cinder support server. We may need to confirm you own the Discord account or server first. If you are in the EU or UK, you can also complain to your data protection authority.

Deleting your data can reset things like your XP, coins and birthdays. Records that a server needs for moderation, such as warnings, may be kept for that server unless its staff remove them.

Cinder is for people old enough to use Discord in their country. It is not aimed at children below that age.

We may update this policy. The date at the top shows when it last changed.

Questions about privacy? Ask in the Cinder support server.