Privacy policy and terms of service

Who is responsible

The hosted Sentinel service is operated by Haxurus ("we"). Contact: [email protected].

The administrators of each Discord server decide whether to add Sentinel and which events to record; we process that data to provide the service to them. If you are a member of a server that uses Sentinel, you can also contact that server’s administrators.

Data we process

From the Discord servers where the bot is installed, only for the events the server’s administrators enable:

• server, channel and role identifiers and names, server icon;
• user identifiers, usernames, nicknames, avatars and roles of the members involved in an event (who acted and who was affected);
• message content, attachment names and links and embeds, to show edited and deleted messages;
• moderation actions and their reasons from the Discord Audit Log, member joins and leaves, voice activity, invites, AutoMod actions and server configuration changes;
• on paid plans and only if enabled: new messages, reactions, polls and interactions.

When you sign in to the dashboard with Discord: your Discord user ID, username, avatar and the list of servers you belong to (scopes identify and guilds), plus a log of the changes you make in the panel with a one-way hash of your IP address.

Sentinel does not collect members’ online status or activities (games, music, custom status), nor when they are typing.

When Sentinel is added to a server, it sends one welcome message with the setup steps to that server and one direct message to its owner. It uses the owner’s ID only for that message and sends no other direct messages.

If you buy a subscription, Discord processes the payment: we receive from Discord only the subscription’s status (the server, the plan and its validity), never your payment details.

Technical data: our web server and Cloudflare, which protects and delivers the site, process IP addresses and request data to deliver pages and prevent abuse.

Why we process it

• to record and display server events and post them to the log channels chosen by the administrators;
• to let authorised people sign in to the dashboard and manage their servers;
• to keep the service secure, prevent abuse and enforce these terms;
• to apply the plans and Discord subscriptions of each server.

Under the GDPR the legal basis is the legitimate interest of server administrators and of the operator in moderating communities and running a secure service (Art. 6(1)(f)), and the performance of the service requested by dashboard users (Art. 6(1)(b)).

How long we keep it

• Server events and message snapshots: for the retention period chosen by the server’s administrators, within the limit of the server’s plan (15 to 90 days), then deleted automatically.
• If the bot is removed from a server, all the data and settings of that server are deleted 30 days later, unless the bot is added back in the meantime.
• Dashboard sessions: 8 hours.
• Panel change log: for the same retention period as the server’s events.
• Database backups: up to 14 days.

How we protect it

Message content, attachments, embeds, event details and summaries, and the names of message authors are encrypted at rest with AES-256-GCM; database backups are encrypted with a key kept off the server. Session tokens are stored only as hashes. The bot cannot perform moderation actions, and each component has its own database permissions. The code is open source, so these measures can be verified on GitHub.

Sharing

We do not sell data and we do not use it for advertising or profiling, or to train artificial intelligence or machine-learning models. Data is shared only with the providers needed to run the service: Discord (the platform the bot works on), Cloudflare (network delivery and protection) and our hosting provider. Log messages are posted only in the channels configured by each server’s administrators.

Cookies

We use only strictly necessary cookies: a session cookie when you sign in, and short-lived cookies (10 minutes) that protect the Discord sign-in and remember your language. There are no analytics or advertising cookies.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing and to receive a copy of it, by writing to [email protected]. Server administrators can also delete all data about a user from the dashboard. You have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Sentinel is meant for Discord users who meet Discord’s minimum age requirements.

Changes

We will update this page when the way we process data changes, and the date at the top will change accordingly.

The service

Sentinel is a Discord bot and web dashboard that records server events and posts them to log channels. The hosted service is provided by Haxurus. The source code is published under the AGPL-3.0 licence; these terms govern the hosted service, not your use of the code.

Your responsibilities

• You must comply with Discord’s Terms of Service, Community Guidelines and Developer Policy.
• If you add Sentinel to a server, you must be authorised to manage it and you are responsible for how you configure logging, including informing your members that the server is logged where required.
• Do not use Sentinel to harass, stalk or unlawfully monitor people, or to collect data for purposes other than moderating your server.
• Do not attempt to disrupt, overload, reverse-engineer the hosted service or bypass its limits and security measures.

Plans and payments

The Free plan is available to everyone. Paid plans (Plus, Pro, Brand) are sold only as Discord subscriptions, through Discord’s Premium Apps: Discord is the seller, processes the payment and handles taxes, renewals, cancellations and refunds under its own terms. A subscription applies to the server chosen when buying it and stays active until the end of the period paid. The operator may grant free trials or complimentary plans at its discretion. When a paid plan ends, the server returns to the Free plan: features outside it are switched off and its limits apply, but your configuration is not deleted.

If we reduce what a paid plan includes, for example by lowering a limit or removing a logger, we tell subscribers in advance, through the support server, the website and the dashboard, so that they can cancel or change their subscription before the change takes effect. Additions and improvements can apply at any time.

For any problem with a subscription, contact us at [email protected] or on the support server and we will try to solve it with you; refund requests are decided by Discord under its refund policy.

Availability

We work to keep Sentinel available and reliable, but the service is provided “as is” and “as available”, without guaranteed uptime. Discord outages, missing bot permissions or maintenance can delay or prevent logs.

Suspension and termination

You can stop using Sentinel at any time by removing the bot from your server. We may block a server or user, or make the bot leave a server, if these terms or Discord’s rules are breached or to protect the service and its users.

Liability

To the extent permitted by law, the operator is not liable for indirect damages or for the loss of data or logs. Nothing in these terms limits liability that cannot be limited by law, including your rights as a consumer.

Changes and governing law

We may update these terms; the date at the top of this page shows the latest version, and continuing to use the service means you accept it. These terms are governed by Italian law, without prejudice to the mandatory consumer protection rules of your country of residence.

Questions: [email protected].