The Discord bot
Bot Privacy Policy
What the bot keeps when you use it, and what it does not keep.
Last changed 7 September 2026.
When you submit an image
The submission carries, and the site stores:
- Your Discord user id and your Discord username, so the administrator can see who sent it and so a refusal can reach you.
- A link to the message you sent it from, where there is one.
- The image itself, re-encoded.
- Once reviewed: the decision, when it was made, who made it, and the reason for a refusal.
If you are barred from submitting
A bar keeps your Discord user id, the reason, and when it ends. That is the whole record.
What it is allowed to do in the server
The bot is invited with the bot and applications.commands scopes and five permissions, which is the whole of what it can do:
- View Channels, Send Messages, Embed Links, Attach Files and Read Message History — permission integer 117760.
- It is not an administrator, cannot manage messages, members, roles or channels, and cannot kick or ban anyone in Discord.
- It also asks for the message content intent, which is what the next section is about.
Messages in the server
The bot can read messages in the channels it can see, which Discord calls the message content intent. It uses that for one thing: recognising when somebody asks how to upload an image or whether the bot is alive, so it can answer.
The text is looked at in memory as the message arrives and is not written down, not sent to the site, and not kept. Without that intent the bot still runs, with those two answers switched off.
What sits on the bot's own machine
The bot runs on a computer the group owns, not in the cloud. On it are its settings, a queue of calls that have not reached the site yet, a short-lived cache, counters for the /stats command, and any image still waiting to be delivered while the site is unreachable.
That store is snapshotted every six hours so a power cut does not lose a submission somebody was promised had arrived.
Who else sees it
Discord, because that is where the conversation happens, and the site's database at Neon in the United States, where an image and its submitter are stored. Nobody else.
How long it is kept
A refused image is deleted after 30 days. An approved one stays while it is in the pool, and is deleted 183 days after being retired from it. A bar is kept until it expires.
Everything queued on the bot's machine is deleted as soon as the site accepts it.
What you can ask for
Ask an administrator in the group's Discord to pull an image of yours out of the pool or to tell you what is held about you.
Changes
The date at the top says when this last changed.