Privacy policy

Last updated 4 November 2026

Gildi is a Discord bot with a web dashboard, run by Kyzo Studios, a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce under KVK number 81481195, at Spuikreek 177, 3079 AG Rotterdam, the Netherlands. This page says what we store, why, for how long, and how to have it deleted. Questions go to hello@gildi.gg.

If you sign in to the dashboard

Signing in uses Discord. We ask for the identify and guilds scopes, which give us:

• your Discord ID, username, display name and avatar
• the servers you’re in, and your permissions there, so we can show the ones you manage

We keep your Discord access token encrypted so your server list can refresh, and your session lasts 7 days. We can’t read your messages or DMs through this sign-in. Signing in on an appeal page asks for identify only.

If you’re in a server that uses Gildi

Server admins choose which modules are on. Depending on that, Gildi stores:

• Copies of recent messages, only when edit and delete logging is on, so a log can show what a message said. That’s the latest 500 or so messages per server: author, content, embeds and attachment links. They’re kept in memory and never shown after 30 days. Switching logging off or removing Gildi deletes them straight away.
• The log viewer: events like edits, deletes, joins and role changes. Kept for 3 days on Free, 30 on Plus and 90 on Pro. What’s posted to the server’s own Discord channels stays there, under Discord’s control.
• Moderation cases: who was warned, timed out, kicked or banned, by whom and why, and the deleted message when a filter caught it. Kept while the server uses Gildi, and after it’s removed unless deletion is requested.
• Appeals: your answers and the team’s decision, kept with the case.
• Ticket transcripts: shown for 7 days on Free, 90 days on Plus and 1 year on Pro, then deleted 30 days later.
• Birthdays: the month, day and time zone you enter, and the year only if you add it. Deleted when you remove them with /birthday, or when you leave the server while Gildi and its birthdays module are on there. Otherwise they stay until deletion is requested.
• Levels and economy: XP, balances, purchases and what you own, per server.
• What you send through other modules: form answers, suggestions and votes, giveaway entries, who invited whom, and flow run history (the last 25 runs on Free, 7 days on Plus, 30 on Pro).

When a plan gets shorter limits, older logs and transcripts are hidden for 30 days and then deleted.

Removing Gildi from a server doesn’t delete this data, apart from the message copies. It stays, so that adding Gildi back restores the server’s history, until deletion is requested.

A server’s public page can show its leaderboard. When it does, anyone can see the display name, avatar, Discord ID, level and XP of the members on it, and their balance if the server uses Economy.

Web verification

If a server uses the web check, Cloudflare Turnstile checks that you’re a person, and your IP address goes to Cloudflare for that. We use it briefly to limit requests and don’t store it with your account.

Paying for a plan

Paddle sells our plans as merchant of record, and Discord’s store does once it’s enabled. They handle your payment details, and we never see your card. We keep which server has which plan, its subscription reference and its dates.

Custom bot tokens (Pro) are stored encrypted. Removing your custom bot in the dashboard deletes its token.

Cookies and analytics

We use only the cookies needed to sign in: sid keeps you signed in for 7 days, and oauth_state and oauth_next last 10 minutes during sign-in. There are no advertising cookies.

We use PostHog to see how the site and dashboard are used. It keeps nothing in cookies or browser storage. We use Sentry to catch errors, and an error report can include technical details like the page, your browser, and the server or user ID involved. Both are only active once we’ve configured them.

Who else handles data

• Discord: Gildi runs on its platform
• Paddle, and Discord’s store once enabled: payments and tax
• Cloudflare: the verification check, our status page, and forwarding email sent to us
• Google: the mailbox that receives that email
• Oracle Cloud, the Netherlands: the servers Gildi runs on
• Sentry: error reports
• PostHog: product analytics

We don’t sell your data, and we don’t share it with anyone else unless the law requires it.

Why we use it

We use this data to run the service you or your server’s admins asked for, to keep it safe and working, and to meet legal and tax duties. Where the GDPR applies, that’s performance of a contract, our legitimate interest in running and securing Gildi, and legal obligation.

Deleting your data

You can remove your own birthday with /birthday. An admin can switch off logging or remove Gildi, and that deletes the message copies straight away. Everything else stays after Gildi is removed: if it’s added back to a server, its settings and history return.

To have anything else deleted, for you or for a whole server, or to get a copy of what we hold, email hello@gildi.gg with your Discord ID or the server ID. We’ll reply within 30 days. We may keep what we must for tax or to deal with abuse. Moderation records belong to the server that made them, so we may check with its admins first.

Depending on where you live, you may also have the right to correct or restrict your data, to object to how we use it, and to complain to your data protection authority.

Age

You must be old enough to use Discord in your country, at least 13.

Report a problem

To report a bug, a security issue, a misused Gildi or anything else that worries you, email hello@gildi.gg.

Changes

When this policy changes we’ll update the date above, and we’ll say so in our Discord if the change matters.