Skip to content
Open dashboard

DRAFT — pending legal reviewThis text describes how Garita works today, but no professional has reviewed it yet. It may change before launch.

Privacy policy

Garita is a Discord bot with a web dashboard. It runs inside the servers where their admin team adds it and stores only what it needs to provide the modules that team enables.

Last updated:

Who is responsible

Garita is a project in development. The identity of the data controller and their contact details will be published here before launch.

Pending review: Define the controller entity, country and privacy contact.

What data we store

  • Discord identifiers: IDs of servers, channels, roles, messages and users that modules need in order to work.
  • Each module’s configuration as chosen by the server’s staff.
  • Moderation cases and incidents: action type, reason, who applied it (a person or Garita), dates and state.
  • An audit history of configuration changes and automatic actions.
  • Ticket transcripts, which include the content of the ticket’s messages, kept for 30 days (Free), 365 days (Pro) or 730 days (Network).
  • If you use the dashboard: the data Discord shares at sign-in (ID, username and avatar) and the list of servers where you have permissions.

What we do not do

  • We do not collect IP addresses: Discord does not give them to bots and the dashboard does not store them in its database.
  • We do not sell data or use it for advertising.
  • We do not use data obtained from Discord to train AI models.
  • The website uses no tracking cookies and no third-party analytics. It only stores one functional cookie with the language you choose (garita_locale) and, if you sign in to the dashboard, the session cookies it needs.

Pending review: Confirm that the HTTPS proxy’s technical logs keep no IP addresses, or set and publish their retention period.

Message content

Only enabled modules that need it process it, such as automod or tickets. The honeypot does not read content: it only needs to know that a message was posted in the trap channel.

Access to message content is a privileged Discord permission used solely for those features.

What we use it for

  • Providing the modules each server’s staff configure.
  • Protecting servers and the service itself against abuse.
  • Handling support requests and appeals.

Pending review: Specify the legal basis for each purpose.

How long

Ticket transcripts are kept according to the server’s plan. Other server data is kept while Garita is in that server.

Pending review: Set the deletion period for a server’s data after the bot is removed, and the maximum retention for cases and incidents.

Deletion and your rights

You can request access to or deletion of your data, and a server’s staff can request deletion of their server’s data, through the channels on the Support page.

Pending review: Define the response time and the identity verification procedure.

Providers

  • Hosting on an OVHcloud virtual private server (VPS).
  • Discord, as the platform the bot runs on.
  • If you enable the AI assistant in the future, the provider processing those requests will be named first.
  • Once payments exist, the payment provider will process billing data; nothing is charged today.

Pending review: State the hosting region and the data processing agreements.

Discord policies

Garita uses the Discord API in line with Discord’s Developer Terms of Service and Developer Policy. To use Discord you must meet its minimum age.

Changes to this policy

We will publish changes on this page and in the changelog, with their date.