Privacy

Stretz Bot stores the Discord profile used to sign in, encrypted OAuth tokens, server ids you can access, and the configuration you save. Message content is stored only when logging is enabled and content storage is turned on. If a deleted message was never received, the log says the content is unavailable.

Anonymous feedback keeps the author id in the database and omits it from the Discord post. Revealing it requires a manager and writes an audit event. Account deletion removes your user, sessions, tokens, and memberships. Moderation cases remain with the server and the actor is detached.

Retention for message logs and join events follows the server retention setting. Session cookies are httpOnly. The bot token and client secret are read from the server environment and are not sent to the browser.