Legal
Privacy Policy
Draft describing the data handling identified in the bot’s source code, and what this website does.
This is an editable draft. It has not been reviewed by a lawyer and is not legal advice. Highlighted placeholders must be completed by the site owner before publication.
Last updated: 16 October 2026
1. Who is responsible
The Sentinel bot is operated by
zxdac_. Contact: [email protected].2. Data the bot may process
This list comes from reading the source code. Which data is actually created depends on the modules each server enables. Data is written to local files and databases on the machine that hosts the bot.
| Category | What | Where |
|---|---|---|
| Server configuration | Server, channel, role and message IDs; module settings, welcome texts, panel messages | Local JSON files and SQLite databases in the bot’s data folder |
| Moderation records | Warnings per member (with reasons and moderator), AutoMod incidents and statistics (capped at 2,000 incidents per server) | storage.json, automod.json |
| Member activity | Leveling XP, message and voice activity counters, economy balances and transactions, missions, user statistics, polls and reminders | leveling.json, userstats.json, SQLite databases |
| Tickets | Ticket metadata, events, staff notes, ratings, participants and generated transcripts (which can contain the messages exchanged in the ticket) | tickets.sqlite3 |
| Verification and giveaways | Verification configuration and logs, giveaway entries and winners | verify.json and module data |
| Member-provided content | Social profile links, saved profile pictures, movie watchlists and history, subscriptions to social accounts, content you submit to commands | Module JSON files |
| Server backups | Structure of a server (roles, channels, settings) when an admin creates a backup or snapshot | Backup files created on demand |
| Messages read in real time | With the Message Content intent, the bot reads message content to run AutoMod, leveling, the honeypot, counting and Flow triggers; whether content is stored depends on the module | Processed in memory; see module data |
| Direct messages | Optional welcome and verification DMs; support requests started with /support (issue type, subject, description) | Sent to Discord / the support server |
| Website login (optional) | When you use “Login with Discord” on the website: your Discord ID, username, display name, avatar and the list of servers where you are owner or have Manage Server/Administrator. They are kept for up to 24 hours under a random session cookie, so the page can show them. The Discord access token is revoked right after login and is not stored. If you use this, requests pass through Cloudflare (Workers and KV), which acts as a processor. | Cloudflare Workers KV (only if the login is enabled) |
| Logs | Technical logs written with Python logging; the destination and retention of these logs depend on how the bot is hosted | Host-dependent |
3. Retention and security
The code does not define general retention periods: most data stays until a server administrator removes it or the files are deleted, with exceptions such as the AutoMod incident cap. The bot does not implement encryption at rest; protection depends on the hosting environment.
In practice, the operator does not delete stored data on a schedule: it stays until a server administrator or the operator removes it. Updates to the bot can temporarily disable some functionality. The bot is hosted in France by DisHost (dishost.fr) on a Pterodactyl panel.4. Third parties that receive data
- Discord — All interaction with Discord (messages, members, voice state). Governed by Discord’s own privacy policy.
- Lavalink node (music) — Search queries and track identifiers are sent to the configured Lavalink node, which by default is a public third-party node set in the code.
- OpenRouter (AI) — Prompts you send to AI chat, and prompts used by AI server generation, are sent to OpenRouter and the underlying model provider.
- Image generation — Prompts for AI image generation are sent to the public Pollinations endpoint.
- Lookup & content services — Queries typed into commands may be forwarded to services such as TMDB, MusicBrainz, OpenStreetMap/Nominatim, ArcGIS, GitHub, IP/RDAP/DNS lookup services, public SearXNG instances and image APIs, YouTube and TikTok.
5. Your choices and rights
Depending on where you live, you may have rights of access, correction and deletion. Ask the operator through the contact above, or on the support server. Server administrators can also remove their server’s data by removing modules’ configuration or the bot.
Requests are answered within one month. Write to [email protected] or use the support server.6. Children
Sentinel is intended for Discord users aged 13 or older, in line with Discord’s minimum age. We do not knowingly target younger children.
7. This website
This static site has no accounts, forms or analytics of its own; the optional Discord login on the Dashboard page is described below. It stores your language choice in your browser’s local storage, and loads the two team avatars from Discord’s CDN, which may receive your IP address as a normal part of loading an image. Links to Discord leave this site.
8. Changes
This policy may change; the update date is shown at the top.