Privacy Policy

Who we are

ModForge ("we") runs the ModForge Discord bot and this website. Contact us through a ticket in the official ModForge Discord server: discord.gg/npqjdwQqDP.

What ModForge stores

• Server settings – which modules are on, channels, roles and limits chosen by the server's staff.
• Warnings, cases and incidents – the Discord user ID, username, reason and time of actions ModForge or staff took (for example "phishing link removed"). Incidents are kept for the latest 300 per server; cases for the latest 3,000 per server; warnings expire after 30 days.
• Removed messages – ModForge does not keep a copy of messages. When it removes a message, a short preview is posted in that server's own log channel so its staff can review it.
• Ban fingerprints – for banned members of a server: user ID, username, display name, a perceptual hash of the avatar picture, the account creation date and the ban reason. Used only to recognise ban evasion on that same server. Removed when the member is unbanned.
• Verification – when you verify on our website, we store a one-way, salted hash of your IP address and of your browser/device details, linked to your user ID on that server. We never store your IP address itself. The hashes are only compared with members who were banned from the same server.
• Scam history – the user IDs of accounts ModForge itself caught posting scam links or malware, with the number of servers. Kept for 90 days, used to warn servers when such an account joins.
• Ban network (opt-in) – only for servers that turned it on: user IDs and reasons of their bans, shared as a count with other network servers. Server names are never shared.
• Ban appeals – the text you write, your user ID and username, delivered to the staff of the server you appeal to.
• Server backups – role and channel names, settings and permissions of a server (no messages). The latest 10 backups per server are kept.
• Uptime – minutes the bot was online per day, for the public status page.

The website and dashboard

• Logging in with Discord gives us your user ID, name, avatar and the list of servers you are in. We only keep the servers you can manage, in a signed cookie in your browser. Your Discord access token is revoked right after login and never stored.
• We use one essential, HTTP-only session cookie (3 days) and short-lived login cookies. No advertising, tracking or analytics cookies.
• Fonts are loaded from Google Fonts, and server/user images from Discord's CDN.

Why (legal basis)

We process this data to keep Discord communities safe from scams, malware, raids, spam and ban evasion – a legitimate interest of the servers that use ModForge and of their members (GDPR Art. 6(1)(f)). Servers choose which modules are on.

Where it is stored

The bot and its data run on a server hosted by Cybrancee in the EU. The website runs on Vercel. We do not sell or share data with anyone else.

Your rights

You can ask to see or delete the data ModForge holds about you, or object to its use, by opening a ticket in the ModForge Discord. Server owners can remove all of their server's data by removing the bot and asking us to delete it. Note that a server's staff may keep their own records of moderation actions.

Changes

If this policy changes, we update the date at the top and announce it in the ModForge Discord.