Privacy Policy

Effective November 11, 2026

StattoBotto turns a Discord server’s activity into stats pages. It is run by an independent operator (“we” in this policy). This page says what it keeps, who can see it, and how to get out of it.

The short version

• It only watches Discord servers whose owner or admins set it up, and only the channels they pick.
• It keeps message details, and the message text when the server has that turned on.
• Stats pages are public. Names and activity can show there.
• Nothing is sold or shared for ads. There is no tracking on the public pages.
• Message content is never used to train AI or machine-learning models.
• You can opt out or ask for removal at any time.

What it keeps

A server’s owner or admins choose which channels and extras are collected; StattoBotto provides the tool.

About each message (the “metadata”): who sent it, which channel, when, whether it was edited or deleted, which message it replied to, who and what it mentioned, and counts of words, characters, links, images and similar. This is kept even when the text is not.

The message text itself is kept only if the server has text turned on and the author has not opted out. When a message is deleted in Discord, its text is removed here too. Attachments and files are not downloaded. Private threads and direct messages are never read.

About members: your Discord user ID, username, display name and server nickname (plus earlier names), your server roles, whether you boost the server, and when you joined or left. If a server turns them on, it also keeps reactions, voice-channel joins and leaves, and a reference to your profile picture and banner.

StattoBotto never asks for your password, email address or payment details.

What the public can see

Depending on the server’s settings, a page can show member names and pictures, message and activity counts, roles, Server Booster status, short message quotes, and a profile card for each member. Dashboards may show short quotes, including the full text of a short message.

Who else can see it

The stored data is not public. Only StattoBotto’s operator can open the stored message data, by logging in to the server or through a private admin site (see below). Server owners, and admins they name, can sign in to that admin site to manage their own server’s collection settings, but the admin site does not display message text. Logs and monitoring alerts do not contain message text or member names.

Message content is used only to build the server’s stats (counts, word lists and optional short quotes). It is never used to train or fine-tune AI or machine-learning models, and it is never sent to an AI service.

We use the data only to provide these stats. We do not use it to decide whether anyone is eligible for a job, housing, insurance or any other benefit, or to treat anyone differently because of who they are. We do not use it to send advertising, and we do not contact members outside Discord with it, except to answer a request you sent us.

We share data only with the service providers below, where the law requires it, or when you ask us to. Nothing is sold, rented or handed to advertisers. The only outside companies involved are the ones that keep the service running: Oracle Cloud (servers, backups), Namecheap and Cloudflare (the public website), Discord, and Google Fonts. Namecheap and Cloudflare see visitors’ IP addresses, as any web host does.

Where it is stored

The data lives on a server at Oracle Cloud, in the United States. A backup is made every night. The server keeps only the newest 3 copies. Each copy is also sent to a second Oracle server, which likewise keeps only the newest 3, and to Oracle Object Storage (off-site), where copies are kept until they are deleted by hand, not on a fixed schedule. Backups are not public. The data and backups stored on Oracle Cloud are encrypted at rest by Oracle, which encrypts its disks and its backup storage.

How long it is kept

There is no automatic expiry while a server uses StattoBotto. The collected data stays for as long as the server uses it, because all-time stats need the full history. When the bot is removed from a server, that server’s data is deleted after 30 days (see below). Stats pages are rebuilt from recent messages plus saved totals for older months; nothing older is deleted. Message text goes away when the message is deleted in Discord or when you ask us to delete it. Opting out stops future message text from being stored; deleting text already stored is a separate request. We also delete data when it is no longer needed for the stats, when Discord asks us to, and if we stop running StattoBotto. The server and the second server each keep only the newest 3 nightly backup copies, so an older copy there is gone within a few days. Copies in Oracle Object Storage are not deleted automatically: they are kept until they are deleted by hand, not on a fixed schedule.

If the bot is removed from a server

If StattoBotto is removed from a Discord server, collection stops at once. Thirty days after the removal, all the data stored for that server is deleted: its messages, reactions, voice activity, member details (including opt-out records) and settings. A few records are kept on purpose, with IDs, times and outcomes only, and no message text or names: that the server was added or removed, pause and deletion records, and a log of admin actions (who did what to which server ID). Its public stats page is taken down within a day after that. If the bot is added back to the server within those 30 days, nothing is deleted and the 30 days start over if it is removed again.

Deletion covers the live system. Backups are whole-database copies, so one person’s data cannot be taken out of a single backup; it leaves each backup when that backup is deleted. That happens within a few days on the server and the second server (they keep only the newest 3 nightly copies). Copies in Oracle Object Storage are kept until they are deleted by hand, so data there can remain longer. The same applies when a member asks for deletion.

Opting out and removal

Ask your server’s moderators, or contact us (below) with your Discord username and the server name. Opt-out commands you can use yourself inside Discord (slash commands) are coming soon; until then, ask by email. After you opt out:

• your name, picture, quotes and profile card stop appearing on pages, and messages that @-mention you are hidden. One limit: if another member types your name as plain text in their own message and that message is shown as a quote, the name they typed can still appear;
• your message text is no longer stored, though your messages still count toward the server’s totals without your name;
• text already stored for you stays unless you ask us to delete it; that is a separate request, and we will delete it from the live system when you ask.

Pages refresh on a schedule, so the change appears at the next update. Copies already in backups are cleared as they expire (see “How long it is kept”). A server’s owner can ask for all of that server’s data to be deleted at any time, without waiting for the 30 days.

Your rights

You can ask us what StattoBotto holds about you, ask us to correct it, ask us to delete it, and object to how it is used. Email us (below) with your Discord username and the server name, and we will act on your request promptly. We may first ask you to confirm that you control the Discord account. We do not sell personal information.

The admin site

admin.stattobotto.com is a private site run by StattoBotto’s operator. It has its own small set of data:

• Who can sign in. The operator signs in with Discord, which gives the site only your user ID and username (the “identify” permission). A server’s owner, and anyone with the Manage Server or Administrator permission on a server StattoBotto is in, can also sign in. For them the site also asks Discord for the list of servers you are in (the “guilds” permission) and uses it only to check that you hold that role on a server StattoBotto is in. It keeps only the IDs of the matching servers and why they matched, not the full list. Anyone else who tries gets no session; their Discord ID and the reason are recorded.
• What each can do. The operator manages every server. A server owner can choose which of their own server’s channels are collected, turn threads, reactions and voice on or off, pause and resume collection, and read that server’s change history. People with only Manage Server or Administrator see the server’s status. Admins an owner names can be given some of these rights for that server only. None of these accounts sees message text through the admin site.
• Session cookie. After login you get a secure cookie that expires automatically (the operator’s lasts at most 4 hours). Only a hash of its token is stored. The public pages set no cookies.
• Passkeys. The operator can register a passkey, which can be required as an extra check on risky changes. The site stores its public key and hashes of one-time recovery codes. The private key stays on the operator’s device.
• Records. A log of admin changes and sign-in events. Login-session rows are left out of backups.

If something goes wrong

If we learn that someone got into data StattoBotto stores without permission, we will tell Discord, and tell the people affected where the law requires it, and we will work on fixing the cause.

Children

Discord requires users to be at least 13 (older where local law says so). StattoBotto is not meant for anyone younger. If you believe it holds data about a child under that age, contact us and it will be deleted.

Changes to this policy

If this policy changes, the new version goes up here with a new effective date.

Contact

Email [email protected] for privacy questions, opt-outs, removal and deletion requests, and to report a problem or misuse of StattoBotto.