Privacy Policy

The dashboard signs you in with Discord using the identify and guilds permissions. That provides your user ID, username, display name, avatar and the servers your account can access. The login request does not include your email address.

A session cookie stores that profile, your Discord access token and an expiry time so the dashboard can list servers you manage. The cookie is encrypted, HttpOnly and limited to this site. It lasts up to seven days. Logging out clears it. A short-lived cookie is also used during Discord login, and another during a GitHub connection, to prevent a login from being reused.

If you open your profile, Thunderstruck stores your user ID, username, display name, avatar, bio, rank card colours, which servers use that card, and whether the profile is public or private. New profiles are private. A public profile can be opened by anyone with the link.

When Thunderstruck is in a server, it stores the configuration and records needed for the modules that server turns on. Depending on those modules, that can include:

• Moderation cases, with the member, moderator, action, reason and duration.
• Ban appeals, when a banned member sends one: who appealed, the text they wrote, the ban reason, and which staff member approved or denied it.
• Log, greeting, automod, auto-purge, auto-ban, anti-raid, anti-nuke, verification and server-stat settings. Auto-purge stores the channels, schedule and message counts, not the message text. Auto-ban stores the rules, blocked words and user IDs, and a ban is recorded as a moderation case.
• Tickets and applications, including the member who opened them and the answers they submit in Discord or on this website.
• Giveaways, invite counts, leveling XP and voice-channel settings.
• Economy, when a server turns it on: each member's coin balance, the items in their inventory, and when they last claimed a daily, weekly, monthly or earn command.
• Starboard, when a server turns it on: which message was starred, who starred it, and the starboard post. The message text stays on Discord.
• Reviews, when a member leaves one: who wrote it, what it is about, the star rating, the comment, and which staff member approved or rejected it. A member can delete their own review.
• Suggestions, when a member sends one: who wrote it, the text, each vote, and which staff member accepted or denied it. A member can delete their own suggestion. If anonymous is on, the author is hidden in Discord and still visible to staff in the dashboard.
• Birthdays, when a member chooses to save one: the month and day, and a year only if they include it so the birthday message can show their age.
• Reminders, when a member sets one: who it is for, the text, and when it should be sent. It is deleted after it is sent or cancelled.
• When a member leaves a server: the role IDs they had and when any timeout ends, so they get those roles back, and stay timed out, if they rejoin. This is deleted when they rejoin.
• AFK, when a member sets it: their reason, when they went away, and their previous nickname so it can be restored.
• Insights, when a server turns them on: daily totals for messages, joins, leaves, voice time and commands, plus which channels and members were most active. The text of messages stays on Discord.
• Embeds, sticky messages, stream alerts, music setup, saved radio stations and soundboard clips for that server. A soundboard clip is the audio file an admin uploads, with the name they give it.
• Custom commands, when a server creates them: the command name, description, reply, embed, options, cooldown and which roles may use them.
• Autoresponders, when a server turns them on: the trigger, the reply, and which channels or roles it applies to. Messages that set one off stay on Discord and are not saved.
• Global chat, when a server turns it on: the channel, and the user and server IDs that server blocks. Messages typed in that channel, with the sender's display name, profile picture, server name and server icon, are posted in the global chat channel of every other connected server that has not blocked them. Links between a message and its copies stay in memory so edits and deletes reach every copy, and the message text is not written to the database.
• Status monitors: the name and address of each website, and the Discord bot, that a server chooses to watch, plus the latest up or down result.
• Bot master members and roles, which can open that server's dashboard and use the bot's commands without the usual Discord permissions.
• A server listing, when an admin publishes one, including its description, tags, language, website and invite.
• Public or private server templates created by that server.
• Private server backups of that server's roles, channels and settings, when an admin saves one or turns on automatic backups. The schedule and the time of the last automatic backup are stored with that server's backup settings.
• When a server turns on pull-back in verification, the user ID, username and roles of members who allow it, plus an encrypted Discord authorization used only to add that member back to the same server.

If a server sets its ban check to all servers, verification also looks at bans in the other servers this bot is in. Server admins can see and change their own server's configuration in the dashboard. Members of a server are subject to the tools that server's admins enable. The Members page reads the live member list from Discord when an admin opens it, and does not save that list.

Connecting GitHub is optional and is done per server. Thunderstruck stores the GitHub account ID, login name, access token, selected repositories and the events that server chose to post. The token is used to receive pushes, pull requests, issues and releases into a Discord channel.

The site uses cookies only to keep you logged in and to complete Discord or GitHub login. It does not use advertising or analytics cookies.

Information is used to run the bot and dashboard. Public listings, public profiles and public templates are shown on this website because an admin or you chose to publish them. Discord processes messages and account data under Discord's own privacy policy when you use Discord.

Stored information is not sold.

If you subscribe, Thunderstruck stores your Discord user ID, which tier you have, the subscription status and the renewal date. Premium also stores the one server you choose and its highlight color. Custom bot also stores the bot's name, picture link, banner link, status and server. The bot token is encrypted and is used only to keep that bot online. It is not shown again after you save it.

Card payments are handled by Stripe. Thunderstruck stores the Stripe customer and subscription IDs. Card numbers stay with Stripe.

Session cookies expire after seven days or when you log out. Profile visibility can be switched back to private from your profile page. A server admin can turn modules off, unlist a server and edit that server's configuration.

Guild records stay while the bot needs them to operate that server. To ask for data held by Thunderstruck to be removed, contact the operator of the bot. Server-specific records can also be handled by an admin of that server.

Use of the service is also covered by the terms of service and guidelines.