Prismy Privacy Policy
Last updated: [DATE]
This is a translation. The French version prevails in case of discrepancy.
This policy explains what data Prismy collects, why, how long it is kept and what your rights are. It applies to the Prismy Discord bot, its website and its management dashboard.
1. Who is responsible for your data?
The data controller is the publisher of Prismy:
- Publisher: CAESAR, a private individual publishing Prismy on a non-professional basis (their full identity is provided to the hosting provider and upon legitimate request)
- Contact for any question about your data: [TO COMPLETE: dedicated email address, e.g. privacy@domain]
The administrators of each Discord server choose which modules are enabled and how they are configured (for example, whether the content of deleted messages is recorded). They are responsible for how they use the information shown in their log channels and in the dashboard.
2. What data is collected?
2.1. Discord data
When Prismy is on a server, it processes:
- members' Discord IDs, usernames, nicknames, avatars and account creation dates;
- their roles on the server;
- server events: joins and leaves, nickname and role changes, voice connections, channel and role creation and changes, invites used;
- sanctions and staff notes (warnings, mutes, kicks, bans), with their reason and any evidence (screenshots, links, logs; evidence may include the content of a message, even if message content recording is not enabled);
- activity statistics per member (number of messages, time in voice) and, if the administrator enables it, a public activity leaderboard visible to the server's members;
- message content, only for real-time auto-moderation analysis, to generate a ticket transcript when the ticket is closed (without keeping it, section 2.2 bis) and, if the server administrator has enabled it, to record deleted or edited messages in the logs.
2.2. New member verification
- the member's verification history (success, failure, kick) and, if the server uses them, their answers to verification questions and their manual approval request;
- if the server uses verification on the Prismy website with multi-account detection (disabled by default): an irreversible fingerprint of the member's connection (keyed hash) and a check for VPN or proxy use. The IP address is never stored in plain form. The member is informed before verifying.
2.2 bis. Tickets, giveaways, voice hub and suggestions
If the administrator enables these modules:
- Tickets: information about each ticket (number, category, member, staff, dates, closing reason), your rating and feedback comment, and any ban from opening tickets. The messages, form answers and transcript of a ticket are never stored by Prismy: the transcript is generated when the ticket is closed, sent on Discord (by direct message and to a log channel of the server), then erased from Prismy's servers.
- Giveaways: your entry, the winners and, to check entry requirements, how long you have been on the server and your message count.
- Voice hub: the temporary voice channel you own and the members you allow or block, deleted along with the channel, and any ban from using the hub.
- Suggestions: the suggestions you submit with
/suggest, your votes and staff replies.
2.2 ter. Abuse prevention
A blocklist of servers and users who seriously abused the Service (ID and reason).
2.3. Management dashboard
When you log in to the dashboard with Discord:
- your ID, username, avatar and list of servers;
- a Discord access token, encrypted, used only to operate the dashboard;
- a session cookie (see the cookie policy);
- the history of your configuration changes, visible to the server's other administrators.
2.4. Technical data
For security and reliable operation: technical logs (date, IP address, browser type, errors) and the data needed to limit abuse.
To improve Prismy: aggregated usage statistics (number of servers, modules and commands used, dashboard pages visited, device type), measured by Prismy itself, without cookies or third-party tools, and without identifying anyone.
2.5. What Prismy does not do
- Prismy does not sell or rent your data.
- Prismy uses no advertising trackers and no third-party analytics tools.
- Prismy does not use your data to train artificial intelligence models.
- The website's fonts are hosted by Prismy: your IP address is not sent to Google.
3. Why is this data used?
| Purpose | Legal basis |
|---|---|
| Providing the bot and dashboard features requested by administrators | Performance of the service |
| Moderation, protection against raids and malicious accounts | Legitimate interest: security of servers and their members |
| Sanction history | Legitimate interest: enabling staff to moderate fairly and consistently |
| Server statistics (aggregated figures) | Legitimate interest: helping administrators manage their community |
| Security, abuse prevention, technical logs | Legitimate interest and legal obligations |
| Management of the premium subscription (when available) | Performance of the contract |
4. How long is data kept?
| Data | Retention |
|---|---|
| Detailed logs (dashboard log) | 7 days (90 days for premium servers) |
| Message content recorded in logs | Same as logs, only if the option is enabled |
| Server statistics (figures that identify no member) | No limit |
| Per-member activity statistics and leaderboard | 90 days (1 year for premium servers) |
| Sanction history | As long as the server uses Prismy, unless deleted by an authorized staff member |
| Evidence attached to a sanction | Duration of the sanction |
| Data of a member who left (roles to restore, remembered verification) | 180 days after leaving |
| Roles removed by anti-nuke protection | Until restored, 90 days at most |
| Verification answers and manual approval requests | 90 days |
| Connection fingerprints (verification) | 90 days |
| Configuration change history | 90 days |
| Suggestions and votes | As long as the server uses Prismy, unless deleted by staff or at your request |
| Ticket information, ratings and feedback comments | 90 days (1 year for premium servers) |
| Ticket messages, form answers and transcripts | Never stored by Prismy |
| Giveaways (prize, winners) | 90 days after the end (1 year for premium servers) |
| Giveaway entrants | 30 days after the end |
| Temporary voice channels | Deleted along with the channel |
| Blocklist | As long as the entry is active |
| Data of a server that removes Prismy | Deleted 30 days after removal |
| Technical logs | 30 days |
| Backups | Automatically overwritten after 3 months at most |
5. Who has access to the data?
- Authorized administrators and staff of the server concerned, according to the access set in the dashboard. A server's data is never visible from another server.
- The publisher of Prismy, only for maintenance, security and handling your requests.
- Technical service providers, who use the data only to provide their service:
| Provider | Role | Location |
|---|---|---|
| Hostinger International Limited | Hosting of the bot, website and database | France (European Union) |
| Cloudflare | Website protection, verification captcha | United States and European Union |
| Discord | Platform on which the bot runs | United States |
| [TO COMPLETE: error tracking tool] | Detection of technical errors | [TO COMPLETE] |
| Scaleway SAS | Encrypted backups | France (European Union) |
| [TO COMPLETE: VPN detection service] | VPN and proxy detection during verification (if enabled) | [TO COMPLETE] |
| Proton | Contact and support email | Switzerland |
| Stripe (once premium exists) | Payment of premium subscriptions | European Union and United States |
When data is transferred outside the European Union, these transfers are covered by the safeguards provided by the GDPR (adequacy decision or standard contractual clauses).
6. Security
Prismy protects data with appropriate measures: encrypted communications, encryption of sensitive data, restricted access, encrypted backups, monitoring and security updates. In the event of a data breach presenting a risk, the publisher notifies the French data protection authority (CNIL) within 72 hours and, where necessary, the people concerned.
7. Your rights
Under the GDPR, you have the following rights:
- access to your data;
- rectification of inaccurate data;
- erasure of your data;
- objection to processing based on legitimate interest;
- restriction of processing;
- portability of the data you provided.
To exercise your rights, write to [TO COMPLETE: email address] stating your Discord ID. You will receive a reply within one month.
Special case of sanctions: to prevent a member from erasing their moderation history, an erasure request from a sanctioned member keeps only their Discord ID and the type and date of their sanctions, as long as the server concerned uses Prismy. All other data is deleted.
You may also lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.
8. Minors
Discord is reserved for people who meet the minimum age set by its terms in their country. Prismy does not knowingly collect more data about minors than the service requires to operate.
9. Changes
This policy may change. In case of a significant change, administrators are notified on the official Discord server and in the dashboard. The date of the last update appears at the top of this page.