Privacy Controls

Guardy provides member-facing controls for public leaderboard identity, data export, and data deletion requests.

Public leaderboard identity

Use /privacy leaderboard off to show as Anonymous on the public web leaderboard. Your name and avatar are hidden there, but your XP and position still count. It also leaves you out of /levels and /coins leaderboard in your server. Your XP, level and rank card stay the same.

Use /privacy leaderboard on to show your name and avatar again. This setting is per server.

Export and deletion

Data export explains how to request your personal data file.
Data deletion explains the one-server and all-server deletion choices.

Forms and applications

Discord form answers stay in the private dashboard review workflow, not in Discord notification messages. Unfinished two-page drafts expire within 24 hours. Pending submissions expire with answer deletion after 30 days, and approved or declined answer content is deleted 90 days after the decision. A member withdrawal or data-rights erasure can remove form content earlier.

Server administrators should explain the form's purpose, reviewer audience, and retention before publishing it. See Forms & Applications for the complete setup and review path.

Starboard

Starboard copies a bounded excerpt of an eligible public Discord message into the public destination channel selected by the server owner. Guardy does not store the message body, attachment URLs, author identity, or reactor identities in its database. It stores Discord message and channel IDs, the eligible reaction count, delivery state, and timestamps needed to keep the mirror synchronized and clean it up.

Private, restricted, age-restricted, thread, forum, bot, webhook, and system messages are excluded. Removing the source removes its mirror. If a moderator deletes a mirror directly, Guardy keeps a content-free suppression record so it does not immediately repost the message.

Creator Alerts

Creator alerts store a public provider creator ID and refreshed display identity, the configured Discord destination and optional role IDs, provider event identifiers, content-free delivery status, and timestamps needed for duplicate prevention and repair. Guardy does not store video or stream descriptions, viewer counts, Discord alert bodies, or member-level alert analytics.

For Kick, Guardy stores the public channel identity, stream identifiers and timestamps needed to avoid duplicate alerts. It does not store stream titles, categories, thumbnails or avatars.

For RSS, Guardy saves the public feed URL and display name, plus hashed entry identifiers and timestamps to prevent duplicate alerts. Entry titles and links are cached for 30 seconds to prepare delivery. Raw feed documents and article bodies are not retained.

Public YouTube API data is refreshed or deleted within 30 days. Removing the last Guardy configuration for a creator or feed starts cleanup of unreferenced provider data and subscriptions after in-flight work is settled. See Creator Alerts for the administrator workflow and provider-specific recovery limits.

Invite Tracker

When a server turns on Invite Tracker, Guardy stores the joining member's Discord ID, the inviter's Discord ID, the invite code, the join source, and the join and leave times. Rows are deleted after 30 days on Free or 90 days on Premium. Your data export includes rows where you joined or invited someone. An erasure request deletes your own join rows and removes your ID from joins you invited. See Invite Tracker for how attribution works and why some joins are unknown.

The current legal disclosure is published separately. Read the canonical Privacy Policy and Terms for the complete legal terms. This documentation does not replace them.