Privacy Policy

Last updated: October 2026

Overview

Toaster ("the Bot") is an automated anti-scam moderation bot for Discord. It processes message content solely to detect scam and NSFW content (such as fake giveaway scam images). This policy explains what is processed, where it goes, how long it is kept, and how to have it removed.

What the Bot processes

Message content: images (attachments, embeds, linked images) in servers where the Bot is active. Images are fetched with strict limits (size, time, public addresses only) and validated before processing.
Message metadata: message IDs, channel IDs, timestamps.
Author metadata: Discord user ID and username of senders whose messages are checked, punished, or found by history scans.
Server configuration: punishment choice, durations, log channel, custom DM template, whitelist.
Vote data: if you vote for the Bot on top.gg, your Discord user ID is stored together with the server you bound via /vote, to grant the vote rewards.
Dashboard sessions: when you log into the web dashboard, a session cookie and your Discord ID, username and avatar are kept until you log out or the session expires.
Aggregate counters: detections, deletions, punishments per server.

Why it is processed

To detect scam and NSFW content (protecting the servers the Bot serves), to execute the moderation actions configured by server administrators, to provide the vote rewards you requested, and to maintain the detection database.

Third-party processing

Discord API: receiving messages, deleting them, applying punishments, sending DMs and log entries, and the dashboard OAuth login.
top.gg: receiving vote webhooks and checking whether a user voted.
Image matching runs on the Bot's own server with local embedding models; image content is not transmitted to any third-party AI service.

The Bot does not sell data and shares it with no other third parties.

Storage and retention

Message content is processed in memory for matching and is not stored.
Detected scam images awaiting an administrator's decision are stored for a limited period (default: 7 days) and purged automatically if unused.
The site event feed keeps small snapshots of detected images and event summaries for DASH_LOG_TTL_DAYS days (default 14), then they are purged automatically.
Approved scam/meme reference images stay in the detection database until an administrator removes them.
Vote bindings and counters live in the Bot's own database while the Bot serves the reward system.
Dashboard sessions are stored until logout or expiry (default 7 days).
Configuration and aggregate counters live in the Bot's own database, retained while the Bot serves the server.
Technical logs may contain message IDs, user IDs and match scores for debugging, rotated by the operator's log policy.

Direct messages

Punished users receive one DM explaining the action. Users who vote or go AFK may receive functional DMs (thanks, reminders). Delivery depends on the recipient's own privacy settings, and the recipient can always block it.

Your rights

Removal: server administrators can remove the Bot (stopping further processing); the operator can delete stored review images, site feed events and database entries on request.
Access: administrators may request the metadata the Bot holds about their server.
Complaints: contact the operator through the support channel listed below.

Children

The Bot operates only inside Discord, whose Terms set a minimum age. No deliberate processing of children's data takes place.

Changes

This policy may be updated as features change. Material changes will be announced in the support server.

Contact

Support: https://discord.gg/wCZsphvWVr