Privacy policy
Chaffline checks messages in the Discord servers that sign up for it. This page sets out what it collects, why, and for how long.
- In force since
- 19 September 2026
- Applies to
- The Chaffline bot and chaffline.com
- Questions
- [email protected]
Who is responsible
Chaffline is operated from Denmark. For anything on this page, contact [email protected].
For messages posted in a server, the people who run that server decide to use Chaffline and how. They are the data controller and we act as their processor, on their instructions. Server operators can request a data processing agreement from us.
For the account that registers a server, pays for a plan or contacts support, and for visitors to chaffline.com, we are the controller.
What we collect, and for how long
| What | Why | How long |
|---|---|---|
| Message content | Checked against the server’s settings as it is posted | Not stored |
| Moderation records: an extract of a flagged message, the account and channel it relates to, and the result | So moderators can review decisions, and so the service can be corrected | 30 days |
| Server account: settings, registration, acceptance of these terms, and changes to settings | Providing the service to the server | While the bot is in the server; changes to settings up to 90 days |
| Billing: customer, subscription and payment records | Providing the plan you paid for, bookkeeping, and preventing payment and refund abuse | 5 years |
| Support correspondence | Answering your enquiry | 2 years |
| Usage statistics | Measuring plan allowances and running the service | Retained; contains no personal data |
We do not sell personal data, use it for advertising, or use it to train models.
Legal basis
- Checking messages — the server operator’s legitimate interest in keeping its community safe, Article 6(1)(f) GDPR.
- Your account and plan — performance of a contract, Article 6(1)(b).
- Payment records — a legal obligation under the Danish Bookkeeping Act, Article 6(1)(c).
- Security and preventing abuse — our legitimate interests, Article 6(1)(f).
Some of what Chaffline checks for, such as hate speech or self-harm, can touch on special categories of data. We do not seek that information or draw conclusions about anyone from it, and moderation records are deleted after 30 days. The server operator, as controller, is responsible for the condition under Article 9 that applies to its server.
Who else handles it
Data is stored in the European Union. We use service providers for hosting, content analysis, website security and email, each bound by contract to act only on our instructions. Payments are handled by Polar, in the United States, which acts as the seller and holds your payment details under its own privacy policy; we never see them. Discord hosts the servers and messages themselves, under its own privacy policy.
Where data is transferred outside the EU or EEA, it is protected by the European Commission’s standard contractual clauses. A list of our current providers is available on request.
Your rights
You have the right to access, correct, erase or export your personal data, to restrict its use, and to object to processing based on legitimate interests. Requests are free and answered within one month; we may ask you to confirm which Discord account is yours first.
For messages in a server, ask that server’s admins first, since they are the controller. You may also contact us directly with your Discord user ID and the server concerned. If you believe a moderation decision about you was wrong, raise it with the server’s admins, or with us to have a person review it.
Server operators can remove the bot at any time; the server’s settings and registration are deleted when it leaves. Messages Chaffline posts in a server’s channels are held by Discord and can be removed by that server’s moderators.
Cookies
chaffline.com uses only the cookies needed to keep you signed in and to complete setting up a server. They require no consent and are cleared when you sign out. There is no advertising or tracking on the site.
Children
Discord requires users to be at least 13. We do not knowingly hold data about a child under 13; if you believe we do, contact us and it will be deleted.
Changes and complaints
We may update this policy. Material changes are announced before they take effect, and the date at the top shows when it last changed.
If you have a concern, please contact us first. You may also complain to the Danish data protection authority, Datatilsynet, or to the supervisory authority where you live.
Version 1.8. Previous versions are available on request.