Privacy Policy

Last updated: 9 November 2026

This policy explains what Zyric (the Discord bot and this website) collects, why, how long it is kept and what you can do about it. The bot is run by Matthew Emerick-Law (“we”). Contact: (enable JavaScript to show the contact email) or Report an issue (log in needed).

What we collect

The bot only sees servers it has been added to. What it stores depends on which features each server's staff turn on.

• Discord IDs and names of members, channels and roles in those servers, so events can be logged and shown.
• Message content and attachment links, kept for a short time (30 days by default; each server can choose 1–365 days) so that edits and deletions can be logged. Messages sent before the bot joined are not collected.
• Audit log events: joins, leaves, bans, role and channel changes, edits, deletions, voice activity and similar, with who did them. Each server chooses how long to keep these.
• Moderation records: cases, warnings, strikes, watch-list notes, reports, ban appeals and anti-nuke incidents.
• Feature data, only where turned on: tickets (form answers and messages in ticket channels), suggestions, event sign-ups, XP and levels, economy balances and items, birthdays you enter, reminders, AFK status, who invited whom, saved roles for members who rejoin, and daily activity counts (messages and voice minutes per member per day).
• Website login: when you log in with Discord we receive your user ID and name only (the identify scope, no email). These are kept in a signed session cookie for up to 7 days. This cookie is strictly necessary to keep you logged in. We use no other cookies, no analytics and no advertising.
• Issue reports you send with the “Report an issue” link, with the page you were on.
• Technical logs: errors kept in memory and removed when the bot restarts.

Who is responsible for your data

There are two roles. Which one applies depends on the activity.

• Zyric Dev is the controller for website login, bot security and operational logs, and abuse prevention. We decide why and how that data is used.
• Zyric Dev is a processor for each server for moderation records, audit logs and the server's feature data, including tickets. The server's owner and staff decide what is recorded and how long it is kept. We process it on their instructions.

Why we use it

To provide the bot's features to the servers that use it: logging, moderation, safety and community features, and the dashboard where server staff see this data. We don't sell data, use it for advertising, or share it with anyone except as described here.

Who can see it

• Server staff with dashboard access to a server can see that server's data. Each server's owner decides who has access.
• The bot's operators can see all data, to run, fix and protect the service.
• You can see your own ticket pages, your appeals and your issue reports on this website.
• Discord receives everything the bot posts, as part of using Discord.

Where your data is stored

Our database and bot run on Oracle Cloud in the UK. Oracle is our processor. Discord, which is based in the US, receives what the bot posts, under its own privacy policy.

How long we keep it

• Message content: 30 days by default (set by each server, up to 365).
• Audit events: kept until the server deletes them, or 30 days after the bot leaves. Forever by default, so server staff can review past events when deciding on moderation actions. Each server can set a shorter period.
• Closed tickets: 30 days by default (set by each server).
• Everything else for a server: until the server's staff delete it, or 30 days after the bot leaves the server, when all of that server's data is deleted.
• Database backups: up to 7 daily copies, so deleted data can remain in a backup for up to about a week.

Your rights

Depending on where you live (for example under the UK or EU GDPR), you have the right to:

• see the data we hold about you (access);
• have it corrected (rectification) or deleted (erasure);
• restrict how it's used;
• object to processing based on legitimate interests (Art. 21 UK GDPR);
• get a copy in a portable format, where it applies;
• withdraw consent, where consent is the basis (birthdays).

Contact us at (enable JavaScript to show the contact email) or Report an issue (log in needed). Some data belongs to a server's moderation records (such as bans and warnings); we may ask that server's staff before deleting it, or keep it where it is needed to protect a community. You can also complain to your local data protection authority, including the Information Commissioner's Office (ico.org.uk/make-a-complaint).

Server owners can remove all of their server's data by removing the bot (it is deleted 30 days later), or ask us to delete it sooner.

Contact

Matthew Emerick-Law
(enable JavaScript to show the address)
Email: (enable JavaScript to show the contact email)

Leaderboards

If a server turns on levels, its leaderboard shows members' usernames, avatars and ranks to other logged-in members of that server. This is based on the server's legitimate interest in running its community.

Discord support server

Messages you post in our Discord support server (discord.gg/WAQVmrDVf2) are handled by Discord under its privacy policy. We use them only to answer support questions.

Children

The bot and this website are for people aged 13 and over. If you are under 18, you need consent from a parent or guardian.

Changes

We may update this policy. The date at the top shows the latest version.

Terms of Service