Privacy Policy

1. Summary

Aegis stores the minimum needed to run moderation and logging in each server. It does not build advertising profiles, it does not sell data, and it does not share data between servers. This website sets no cookies and runs no trackers.

2. Who is responsible

The Aegis maintainers operate the service. Individual Discord servers that invite Aegis are separate controllers of the data they configure Aegis to process, and their own privacy policies apply to their members.

3. Data we collect

Data is collected only as a consequence of a server owner or moderator configuring or using Aegis.

Server configuration

• Guild ID, and the channel IDs selected for logging and welcome messages.
• Settings toggles: logging enabled, welcome enabled, automod rule states, slowmode, and similar.
• Blocked word and link filter lists, which you control.
• Scheduled automation jobs, including the channel, content, and interval.

Moderation records

• User IDs of warned members, the warning reason, the moderator who issued it, and the timestamp.
• Details of moderation actions in audit log channels, including the moderator, target, and reason.
• Message content, but only when a moderation action deletes that message or an automod rule matches it, and only as needed to enforce the rule.

Operational data

• Process memory usage, uptime, and gateway latency, used for the status page and the homepage counters.
• Server logs containing error messages, used to diagnose faults.

4. What we do not collect

• Direct messages. Aegis is not built to act in DMs and does not store their contents.
• Passwords, payment details, or any Discord account credentials. Aegis only ever holds its own bot token.
• Advertising identifiers, cross-site tracking data, or behavioural profiles.
• Data harvested from servers where Aegis has not been invited.

5. How data is used

• To execute the moderation, logging, and automation features a server has enabled.
• To maintain guild, member, and channel caches required for role hierarchy checks and routing.
• To detect and respond to abuse, including rate limit and permission errors.
• To publish aggregate counts on the homepage and status page, such as total servers and total members.

Your data is never used for advertising, profiling, or model training.

6. Website privacy

The pages on this site are static and self-contained. They set no cookies, embed no analytics or advertising scripts, and transmit nothing about you to us. The only personal data this site processes is standard web server request logs, such as IP address and user agent, retained briefly for security and diagnostics.

The site does store one local preference: your light or dark theme choice, kept in your browser's local storage. It is never transmitted and clearing site data removes it.

The status endpoint returns bot metrics only and holds no requester data. /api/stats does the same in JSON form.

7. Data retention

• Configuration and automod rules: retained while Aegis is in the server, then deleted on removal or after a defined period.
• Warnings: retained until a moderator clears them with /clearwarnings, or until Aegis is removed.
• Audit log entries: written to your own Discord channel and governed by your message retention settings; we do not keep a separate copy.
• Operational logs: retained for a short period for debugging, then discarded.

8. Data isolation between servers

All stored records are keyed by guild ID. Configuration, warnings, and rules in one server are never visible to, or mixed with, another server. This isolation is enforced in the application layer and is a design requirement, not a configuration option.

9. Sharing and disclosure

We do not sell, rent, or trade your data. We disclose data only in these cases:

• To Discord, as required to operate the service. Discord receives commands, messages, and member events under its own privacy policy.
• To infrastructure providers, such as Fly.io, strictly to host and run the service under our instructions.
• When required by law, or in good faith to protect the rights, safety, and integrity of the service, its users, or the public.

10. Security

Secrets are held in environment variables and are never written to source control, logs, or this website. Access to production systems is limited to the maintainers. No system is perfectly secure, so we do not claim that data held in connection with the service can be guaranteed breach-free.

11. Your rights

Because the relevant data is largely held by Discord servers rather than by us, most requests are best directed at the server operator. A server moderator can remove data by clearing warnings, resetting configuration, or removing Aegis entirely.

If you are a Discord user and want data removed concerning you, contact the operator of the relevant server, or reach us and we will assist where the data sits with us.

12. Children

The service is not directed at children under Discord's minimum age, and we do not knowingly collect personal information from them.

13. International transfers

The service is hosted on infrastructure that may be located outside your country. By using it you consent to the transfer and processing of data in those locations under the safeguards described here.

14. Changes to this policy

We may revise this policy as the service changes. The effective date at the top of this page indicates the current version, and material changes will be announced in the support server and on the changelog.

15. Contact

Privacy questions and data requests can go to our support server or to support@aegisdeno.fly.dev.