Privacy policy

Who handles your data

Nightwatch is published by Achille. Contact: [to fill in: LEGAL_CONTACT].

Each Discord server that adds the bot chooses what it turns on (message history, for instance). Its administrators decide how they use these moderation tools.

What is kept

• Discord accounts seen by the bot: id, username, display name, avatar, and whether it's a bot.
• Membership of a server: nickname and avatar on that server, roles, join and leave dates.
• Message history, only if the server turns it on: message text, earlier versions of edited messages, deletion date, channel, and the name, size and type of attachments. Never the files themselves nor their links.
• Events: joins, leaves, nickname, role, username or avatar changes, voice channel joins and leaves and voice state (muted, deafened, streaming, camera). The bot never listens to voice channels: no sound is captured.
• Moderation: sanctions (reason, effects, durations, moderator, private note for the team only, messages attached as evidence) and their history, team notes about members, reports (reason and a copy of the reported message), appeals and answers.
• Community modules: tickets (answers to questions, messages exchanged) and suggestions with their votes.
• Dashboard: an encrypted session cookie (your Discord id, name and avatar, and a Discord token used only to list your servers), a language cookie, and the log of actions taken by the team in the dashboard.

Why

• Moderating and protecting servers (legitimate interest of the communities using the bot).
• Running the dashboard and the member space (providing the service you use).
• Message history helps understand the context before a sanction. It is only turned on by an explicit decision of the server's administrators, for a limited time.

How long

• Message history and events: 7 to 90 days depending on the server's setting (30 days by default), then deleted automatically. Never more than 90 days.
• Sanctions, notes, reports, appeals, tickets and suggestions: as long as the server uses the bot, since the sanction history is what moderation relies on over time. A server administrator can ask for their deletion.
• Dashboard session: 7 days at most.

Who can see it

• The moderation team of the server concerned, according to their Discord permissions and the configured roles.
• A private note is only visible to its author.
• Each member sees their own sanctions in their member space, without private notes, and without moderators' names unless the server chooses to show them.
• No resale, no advertising, no trackers. Data goes through Discord (the platform) and is stored at OVH SAS, 2 rue Kellermann, 59100 Roubaix, France.

Your rights

You can ask to access, correct or erase your data, object to its processing or ask to restrict it by writing to [to fill in: LEGAL_CONTACT]. For data specific to a server, you can also contact its administrators.

If you think your rights aren't respected, you can file a complaint with your data protection authority (in France, the CNIL: cnil.fr).

Security

Every dashboard action checks your rights on the server at the time it is made, the session is encrypted, and a server's data is only available to its team.