BARBoard Privacy Notice

Discord Sign-In

Discord shares your account ID, username, display name, avatar information and server list. BARBoard stores the server IDs and basic profile details to show which settings you can reach. It stores an encrypted Discord access token for the session. BARBoard sends the relevant bot your account ID, the access token and the settings request so the bot can check your Discord permissions and handle the request.

BARBoard uses cookies for Discord sign-in, your signed-in session and your light or dark theme preference. Your browser can load avatar images directly from Discord.

Security and Hosting

BARBoard uses IP addresses to limit sign-in attempts and stores them in short-lived rate-limit records. Session and audit records use a keyed hash of the IP address when one is recorded. Security records can also include the browser user agent, Discord account and target IDs, request IDs, outcomes and relevant before-and-after settings. These records help investigate changes and misuse. The bot handles its own settings storage. When a change requires another Discord sign-in to confirm it, BARBoard temporarily stores the details of that change in encrypted form.

Cloudflare carries public web traffic to the dashboard hosted by Hetzner. The operator can access dashboard records for support and security. If you email support, Google processes that correspondence through Gmail.

How Long Records Are Kept

A session ends after 24 hours of inactivity, when the Discord token expires or after 30 days, whichever comes first. Session rows are normally removed seven days after their recorded expiry or revocation, or after 31 days without activity if that comes first. Scheduled cleanup removes expired sign-in and confirmation records and day-old rate-limit records.

Audit records currently have no scheduled expiry. The database backup schedule normally keeps the latest 30 daily and 12 monthly copies. Removed records can remain in backups until those copies rotate out.

Your Choices and Data Requests

Sign out to close your current BARBoard session. You can also remove the dashboard’s access in Discord under User Settings → Authorized Apps. To access, correct or request deletion of your BARBoard data, email [email protected]. Include your Discord username or account ID so the operator can locate your records. The operator may ask you to verify the account before responding.