Privacy Policy
Last updated 2 November 2026
In short:
- TheUAB keeps only what its features need, mostly Discord IDs, settings, and records like warnings, levels and moderation logs.
- Most of it is only kept if a server turns on the feature that needs it.
- We don't sell your data, and we don't use it for ads.
- When the bot leaves a server, that server's data is deleted the next time the bot starts. The main exception is the known-offender list, which we delete on request.
- You can download or delete your data on the dashboard's Account page, or ask us: the bot's support server.
- 1. Who we are
- 2. What we collect
- 3. Message content
- 4. The dashboard
- 5. How we use it
- 6. Who sees it
- 7. How long we keep it
- 8. Your choices and rights
- 9. Security
- 10. Children
- 11. Changes
- 12. Contact
1. Who we are
This policy covers the Discord bot TheUAB and its web dashboard, run by the people who operate this copy of the bot ("we", "us"). It explains what the service keeps about you, why, and what you can do about it. It works alongside our Terms of Service.
2. What we collect
TheUAB gets information from Discord when you use its commands, when you're in a server that uses it, or when you sign in to its dashboard. It stores Discord IDs for users, servers, channels, roles and messages, which are numbers that identify them. It doesn't store your email address, password or payment details.
What's kept depends on which features ("cogs") a server has turned on:
| Feature | What's kept |
|---|---|
| Every server | The server's settings: which cogs are on, its channels and roles for the bot, and its options. Command cooldowns. |
| HoneyPot | For anyone who posts in a trap channel: their user ID, username, the message they posted, any spam patterns found, and what was done to them. These go in the server's activity log, and in a known-offender record shared across servers (see section 6). |
| Incidents | For each ban, kick or timeout: the member's ID, username, account details at the time, the moderator, the reason, and the member's recent messages that the bot had seen (up to 50 per channel). |
| Warnings | Warnings with their reason, points and moderator; appeals you write; and notes staff keep about members. |
| Quarantine, Staff Policy, Raid Protection, Suspicious Accounts, Lockdown | Roles taken from members so they can be given back, recent joins, how suspicious accounts look (account age, activity since joining), and locked channels' previous permissions. |
| Logs | Messages, edits, deletions, joins, leaves and server changes are posted to the server's own log channels, not kept by us. We keep only the IDs of messages sent by bots, so those can be left out of the logs. |
| Security Scanner | Scan results: the server's score, and findings about its roles, channels, bots, webhooks and invites. |
| Levels, Economy, Pets, Games | XP, level, reputation, wallet and bank balances, pets and their stats, and counting and guessing games. |
| Profile, AFK | The profile fields you fill in, and your AFK message. |
| Tickets, Applications, Suggestions | Open tickets (closed ones are deleted, and a transcript is posted in Discord); your answers to applications; suggestions, their status and staff responses, and who voted. |
| Reaction Roles, Rules, Sticky, Announcements, Live Status | Their messages and settings. For Live Status, the Twitch channel a server follows. |
| Analytics | Daily counts per server (joins, leaves, messages, commands used), and which members sent messages on each day, to count active members. |
| Premium | Which premium tier you have and which servers you've put it on. Discord tells us about purchases, but we never see your payment details. |
| Blacklist | The IDs and names of users and servers we've barred from the bot, and when. |
3. Message content
TheUAB reads messages in servers where it's present. This is how it checks links, catches spam in honeypot channels, gives XP, runs counting games and notices mentions of AFK members. Most messages are read as they arrive and are not stored. Messages are only stored in these cases:
- a message posted in a honeypot channel, kept in that server's honeypot log;
- a member's recent messages, saved in an incident report when they're banned, kicked or timed out. To make this possible, the bot keeps up to 50 recent messages per channel in memory, and they're gone when it restarts;
- text you deliberately give a command, such as suggestions, appeals, application answers, profile fields and ticket messages.
4. The dashboard
When you sign in with Discord, we ask Discord for the identify and guilds permissions. We use them to read your user ID, username and avatar, and the servers you're in, so we can show the ones you manage. We keep a sign-in session for up to 7 days. We store a hash of the session token, never the token itself. Changes you make on the dashboard are recorded in that server's audit log with your name. The dashboard uses one cookie to keep you signed in, and a short-lived one while you sign in. There are no tracking or advertising cookies. Your theme choice is saved in your browser.
5. How we use it
We use this information only to run, protect and improve the service. That means providing the features a server turns on, showing results to its staff, enforcing our terms and keeping the bot secure, and fixing bugs. We don't sell it, rent it, or use it for advertising or profiling unrelated to the service.
6. Who sees it
- Server staff can see what the bot keeps about their server and its members, in Discord and on the dashboard. This includes moderation records, warnings, notes, logs and analytics.
- Other servers using TheUAB: if you're caught by a honeypot channel, a record of it is kept. It holds your user ID, username, how many times and when you were caught, and in which servers. Staff of other servers using TheUAB can look the record up. It's also flagged if you're caught there, and it raises your score in their suspicious-account checks when you join. This is how the bot warns servers about known spammers.
- Members of a server see what features post publicly there, such as leaderboards, suggestions and rank cards.
- Discord receives what the bot sends through it. Twitch receives the channel name a server follows, when live notifications are on.
- The law: we may share information if the law requires it, or to protect people or the service from harm.
7. How long we keep it
- Server data is kept while TheUAB is in the server. When the bot leaves, that server's data is deleted the next time the bot starts.
- The known-offender record (see section 6) is kept across servers, because its purpose is to warn servers about spammers. If you ask us to delete it, we delete the record and your honeypot catches from every server's log.
- Analytics history is kept for 90 days.
- Each server keeps its latest 60 security scans.
- Dashboard sessions last up to 7 days.
- Tickets are deleted when they close.
- Premium records, the blacklist and dashboard access lists are kept while they're in use.
- Server staff can remove much of their server's data themselves, for example by clearing warnings or logs. Turning a cog off stops it collecting anything new.
8. Your choices and rights
You can stop TheUAB collecting anything new about you by leaving the servers that use it, and by not using its commands or dashboard. Server owners can turn cogs off with /disablecog, or remove the bot.
Signed in to the dashboard, your Account page shows what TheUAB keeps about you, lets you download it, and lets you delete your account: your profile, levels, reputation, economy accounts, pets, AFK messages, cooldowns and activity counts in every server. Warnings, suggestions, applications and premium records are kept, for the reasons below.
Depending on where you live, you may have the right to see the data we keep about you, correct it, delete it, or object to how we use it. For anything the Account page doesn't cover, contact us at the bot's support server with your Discord user ID. We may need to confirm the account is yours. We'll answer within 30 days. Some records, like a server's moderation history, also belong to that server's staff, so we may ask them first or keep what's needed to prevent abuse.
9. Security
Data is stored in databases on the server that runs TheUAB. Only the people who run it can access them, and the dashboard only shows each server's data to people allowed to manage that server. No system is perfectly secure. If we learn of a breach that affects you, we'll tell you where the law requires it.
10. Children
TheUAB is meant for people old enough to use Discord where they live. We don't knowingly collect data from anyone younger. If you think we have, contact us and we'll delete it.
11. Changes
We may update this policy as the bot changes. We'll change the date at the top, and for significant changes we'll try to give notice, for example in the bot's support server.
12. Contact
For questions or requests about your data, contact us at the bot's support server.