VoidSentryAdd to Discord

Privacy policy

Last updated 27 October 2026

Who is responsible

VoidSentry ("the bot") is run by ZoniBoy00, an individual, who decides why and how the data described here is processed (the "controller" under the GDPR). You can reach us by opening an issue on the project's GitHub page.

This policy covers the VoidSentry Discord bot and this website. It does not cover Discord itself, which has its own privacy policy.

What the bot stores

The bot keeps two kinds of data in a MySQL database.

Data stored by the bot
Ban recordsWhen the bot bans someone: their Discord user ID and username, the server ID and name, the trap channel ID and name, the time, the ban reason, and a short summary of the message that triggered the ban. The summary is at most 500 characters and holds the message text plus the names, types and sizes of attachments, the titles and domains of embeds, and the names of stickers.
Server settingsChosen by server administrators: server ID, trap channel IDs, log channel ID, custom ban reason, how much message history is deleted on a ban, dry-run setting and exempt role IDs.

What it reads but does not store

To notice a message in a trap channel, the bot has to receive messages from channels it can see (Discord's Message Content intent). For every channel that is not a trap channel, the bot checks the channel and ignores the message straight away. Those messages are not stored, logged, analysed or shared. The bot stores nothing about members who never write in a trap channel.

What happens when someone is banned

  • The bot tries to send the user a direct message with the server name and the ban reason, then bans them through Discord and deletes their recent messages (24 hours by default, set per server).
  • If the server has chosen a log channel, the bot posts a log message there. It shows the user's avatar, username, ID, account creation date, join date, server nickname and roles, and the message summary. That log lives in the server, so the server's administrators control it, not us.
  • The ban record described above is saved.
  • Our hosting machine's operational logs may briefly show the username and ID of banned users. They are not shared.

Why we process this data

We process it to protect Discord communities from self-bots, scams and hijacked accounts, and to give server administrators a history of the bans carried out on their server. The legal basis is our legitimate interest, and that of the server administrators, in keeping communities safe (Article 6(1)(f) GDPR). We do not use the data for advertising, profiling or anything unrelated.

Server administrators decide where trap channels are placed and are responsible for making them clear to their members. The bot posts a warning in every trap channel it sets up.

How long we keep it

  • Message summaries are removed from ban records 90 days after the ban.
  • The rest of a ban record is kept for as long as it is useful as a server's moderation history, or until you ask us to delete it.
  • Server settings are deleted when the bot is removed from the server.
  • Ban records of a server are not deleted automatically when the bot leaves. Ask us to delete them if you want them gone.

Who can see it

  • Server administrators can see the ban records of their own server, and only their own, through the bot's commands and the dashboard.
  • The bot operator can access the whole database in order to run the service and answer requests.
  • Our hosting providers store the data and run the bot on our behalf.
  • Discord receives the bot's requests as part of running a Discord bot.

We do not sell the data, share it with advertisers or give it to anyone else, except where the law requires it.

Your rights and deletion requests

If the bot has banned you or you want to know what we hold about you, you have the right to:

  • get a copy of the data we hold about you,
  • have it corrected or deleted,
  • ask us to restrict its use or object to it,
  • complain to the data protection authority in your country.

To make a request, open an issue on our GitHub page titled "Data request". Please do not put personal details in the issue, because it is public. We will answer there and arrange a private way to continue, and we may ask you to confirm it is your account. We reply within one month. Deleting your records is quick: the bot has a command that removes every ban record of a user on all servers.

Deleting our records does not lift a ban on Discord. Only that server's administrators can do that. Contact them to appeal.

This website

This website does not use analytics, advertising or tracking scripts, and it serves its fonts, images and code itself, with nothing fetched from third parties in your browser, apart from server icons shown in the dashboard (see below). The home page shows live totals (servers, members, bans). They are counts only and contain no personal data. Our web host may keep standard server logs, such as IP address and requested page, for security and troubleshooting.

Dashboard sign-in. If you sign in to the dashboard with Discord, the site asks Discord for your user ID, name and the list of servers you are in, and keeps only your user ID, your name and the IDs and names of the servers where you are the owner or an administrator. The names are used to list servers that do not have VoidSentry yet. These are stored in two signed cookies in your browser, one for the sign-in and one for the server names, which are needed for the dashboard to work, expire after 12 hours and are removed when you sign out. Your Discord access token is used once during sign-in and is not stored. The site does not keep this information anywhere else. "Sign out everywhere" makes the bot store your user ID and the time, so that sessions from before that moment are refused on every device. While you are signed in, the bot looks up your rights in each server you open and shows you only that server's settings and ban records, which are the same data its administrators can see with the bot's commands. Administrators can also download those ban records as a spreadsheet (CSV) for their own moderation records. Server icons are loaded from Discord's servers (cdn.discordapp.com), which therefore receives your IP address as it would when you use Discord itself.

Change log. When an administrator changes a server's VoidSentry settings or lifts a ban, in the dashboard, with a command or with the Unban button in the log channel, the bot records the administrator's Discord user ID, the time and a short description of the change (for example "dry-run turned on" or "user 123… unbanned", which includes the unbanned user's ID). The server's administrators can see this log in the dashboard. It is kept for as long as the bot is on that server and deleted when the bot is removed from it.

Children, security and changes

Discord requires users to be at least 13 years old (or the minimum age in their country). The bot is not aimed at children and does not knowingly collect data from anyone under that age.

We protect the database with access controls and keep the collected data to the minimum needed. No system is perfectly secure.

If we change this policy, we update the date at the top. For significant changes, we announce them where the bot's users will see them.