Privacy policy
Last updated 08 September 2026
Aegis is a Discord bot and web dashboard. This page explains what it stores, why, and how to get rid of it. It is written to be read, not to be survived.
The short version: Aegis stores Discord IDs and the settings you choose. It does not store your messages, it does not sell anything to anyone, and removing the bot from your server lets you delete everything it kept.
What is stored
| Data | Why |
|---|---|
| Server, channel, role and user IDs | To apply your settings to the right places and know who is trusted |
| Your configuration | The settings you pick in the dashboard |
| Security events and incidents | So the log and audit history mean something afterwards |
| Warnings issued | To apply your own escalation rules |
| Channel and role snapshots | So a deletion can be undone. Structure and permissions only |
| Your Discord username and avatar | Shown in the dashboard while you are signed in |
What is not stored
- Message content. Aegis reads messages in memory to apply filters and spam checks, then discards them. Nothing is written to disk.
- Direct messages. A bot cannot read other people's DMs, and Aegis does not try.
- Voice. Aegis never joins or records voice channels.
- Payment details. Purchases happen on the storefront or through Stripe. Aegis only ever sees whether a licence key is valid.
Verification
If a server switches on browser verification, the verification page sees the IP address of the person verifying and, when a captcha is enabled, sends that address to Cloudflare Turnstile to check the result. The address is used for that check and for rate limiting. It is not written to disk and not linked to a Discord account afterwards. Signing in with Discord at the end of that flow uses the identify scope only, which returns an account ID and nothing else.
Signing in
The dashboard uses Discord OAuth with the identify and guilds scopes: who you are, and which servers you are in. Aegis never posts, never reads your messages, and never acts on your behalf. Your session is a signed cookie holding your account ID and expiring after seven days. Whether you may change a server's settings is re-checked against that server every single request, not trusted from the cookie.
Who else sees it
Nothing is sold, rented or shared for advertising. Data passes through:
- Discord — unavoidably, since that is where the bot runs.
- Railway — the host the bot and its storage run on.
- Cloudflare — only if a server enables the verification captcha.
- Stripe — only if you pay through the dashboard. Aegis never receives your card details.
How long it is kept
Configuration lives as long as Aegis is in your server. Warnings decay on the schedule you set. Incidents and audit history are kept so they remain useful later. Snapshots stay until they are overwritten or deleted. Remove the bot and the data stops being used immediately; ask and it will be deleted.
Getting your data removed
Remove Aegis from the server, then ask in the support server for that server's data to be deleted. Deletion is permanent, including snapshots, so there is no undo afterwards. If you are in the EU or UK, this is your right of erasure and it is honoured without argument.
Children
Discord requires users to be at least 13, or older where local law says so. Aegis is not intended for anyone below that age and does not knowingly store their data.
Changes
If this policy changes in a way that matters, it will be posted in the support server rather than quietly edited here.
Contact
Questions, or a deletion request: the Aegis support server.