Privacy Policy
Effective date: November 1, 2026 Last updated: November 1, 2026
This Privacy Policy explains what information Mana Bar ("we", "us") collects through the Nobody Discord bot (the "Bot") and the Nobody dashboard at https://dashboard.anotherverse.space (the "Dashboard"), together the "Service", why we collect it, how long we keep it, and the choices you have. By adding the Bot to a server, being a member of a server that uses the Bot, or logging in to the Dashboard, you acknowledge this policy.
Summary
- We collect only what the Service needs to work: Discord IDs and profile details, server structure, and reputation votes.
- We store the text and first image link of messages that receive votes, for 90 days after the last vote, so server administrators can see them on the Dashboard. We do not store other messages, your email address, or any password.
- We do not sell your information, show ads, or build advertising profiles.
- Most activity records are deleted automatically after 90 days.
- You can ask us to access or delete your information at support@anotherverse.space.
Information we collect
Information about servers that use the Bot
When the Bot is in a Discord server, it keeps a copy of some of that server's information so the Dashboard can show it without contacting Discord on every request:
- Server: server ID, name, icon, and whether the Bot is still in it.
- Server structure: channels, roles, and custom emojis, including their IDs and names.
- Members: Discord user ID, username, display name, avatar, the roles you hold in the server, when you joined the server, when your Discord account was created, whether the account is a bot, and when you left the server, if you did.
Reputation activity
The Bot's main feature is Reputation: members vote on messages by reacting with the server's upvote and downvote emojis. For each counted vote the Bot records:
- Vote events: the server, channel, and message IDs, who cast the vote, who received it, whether it was an upvote or downvote, whether it was added or removed, and when.
- Totals: each member's total upvotes and downvotes received, and each message's upvote and downvote totals, with the message's channel and author IDs.
- Role rewards: which reward role a member's score qualifies them for.
Reactions that do not count as votes (for example, other emojis, or votes on messages older than the server's cutoff) are not recorded.
Message content
To count votes, add automatic reactions, and publish ranked-message posts, the Bot reads messages in the channels it can see. For each message that receives a counted vote, it stores a snapshot: the message's text and the link to its first image (spoilered images excluded), with its server, channel, author, and when it was sent and edited. The snapshot is updated when the message is edited, deleted when the message is deleted, and deleted 90 days after the message last received a vote. It does not store other messages or attachment files. When a server has ranked messages turned on, the Bot reposts the text and first image of the top-ranked messages, with a link to the original, in a channel of the same server chosen by that server's administrators. To show a GIF from Tenor, Giphy, or Klipy, the Bot may fetch that public GIF page; the request comes from our server and contains no information about you.
Dashboard login
The Dashboard uses "Log in with Discord" (OAuth2) with the identify and guilds permissions only. We do not request your email address. When you log in we store:
- Session: your Discord user ID, username, display name, and avatar as they were when you logged in, a one-way hash of your session ID, and when the session was created, last used, and expires.
- Discord tokens: the access and refresh tokens Discord gives us, encrypted, used only to read your list of servers so we can tell which ones you may manage.
Your list of servers is held in memory for up to 60 seconds and is not saved to our database.
Configuration and administrative activity
When administrators or dashboard access role holders use the Dashboard or the Bot's commands, we store:
- Configuration: each server's Bot configuration, role rewards, automatic-reaction channels, and dashboard access roles, with the ID of the user who added each access role.
- Audit log: who changed what and when, with the old and new values, whether the change came from the Dashboard or a command.
- Saved views: saved statistics views, including the ID of the user who created each one.
Technical information
Our servers record limited technical information for security and troubleshooting, such as the time of a request, the page requested (without query strings), the response status, and your IP address. IP addresses are also used in memory to limit repeated login attempts. Our logs never contain session IDs, Discord tokens, or login codes.
Information we do not collect
Apart from the message snapshots described above, we do not collect message text. We do not collect your email address, passwords, voice activity, direct messages, precise location, or payment information. If we introduce paid plans, payments will be handled by our payment processor (see "Who we share information with").
How we use information
We use the information above only to:
- Provide the Service: count reputation, award reward roles, publish ranked messages, and show configuration and statistics on the Dashboard.
- Decide who may use the Dashboard for each server.
- Keep the Service secure, prevent abuse, and fix problems.
- Respond to your requests and communicate with you about the Service.
- Comply with the law.
We do not sell or rent your information, use it for advertising, or use it to train machine learning models.
Legal bases for processing
If you are in the European Economic Area, the United Kingdom, or another place with similar laws, we rely on these legal bases:
- Performance of a contract: to provide the Service you or your server's administrators asked for.
- Legitimate interests: to operate, secure, and improve the Service, and to provide reputation features to the servers that chose to use them. We have weighed these interests against your rights, and you may object at any time (see "Your rights").
- Legal obligation: where the law requires us to keep or disclose information.
Who can see your information
- Server administrators and dashboard access role holders of a server can see that server's configuration, audit log, and member statistics, including each member's reputation, votes cast and received, roles, and the snapshots of voted messages. They can export statistics as a CSV file. Once exported, that file is under their control, not ours.
- Members of a server can see reputation scores, leaderboards, and ranked-message posts through the Bot's commands and posts in that server.
- Information from one server is never shown to administrators of another server.
Who we share information with
We share information only with service providers that help us run the Service, under their own privacy and security commitments:
- Discord, which provides the platform the Bot and login run on. Discord's own Privacy Policy applies to your use of Discord.
- Oracle Cloud Infrastructure, which hosts our servers and database.
- Cloudflare, which provides our domain name and DNS.
- Stripe, if and when we offer paid plans, to process payments. We will not receive or store your full card details.
We may also disclose information if required by law, to protect the rights, safety, or property of our users or the public, or as part of a merger, sale, or transfer of the Service, in which case this policy will continue to apply to the transferred information.
How long we keep information
| Information | How long we keep it |
|---|---|
| Vote events | 90 days |
| Message snapshots | 90 days after the message's last vote, or until the message is deleted |
| Audit log | 90 days |
| Dashboard sessions and encrypted Discord tokens | 7 days from login, or until you log out |
| Member details for a server you left | 90 days after you leave |
| All information for a server the Bot left | 30 days after the Bot leaves (except reputation totals, below) |
| Reputation totals and role rewards | While the Bot is in the server, and afterwards so they return if the Bot is added back, until a server administrator asks us to delete them |
| Server configuration and dashboard access roles | Until changed, or until the server's information is deleted |
| Saved views | Until deleted by a server administrator or access role holder |
| Server logs | 30 days |
Deleted information may remain in encrypted backups for a limited time until those backups are overwritten.
Cookies
The Dashboard uses only cookies that are strictly necessary for it to work:
- A session cookie that keeps you logged in for up to 7 days.
- A short-lived login cookie that protects the Discord login from forgery and expires after 10 minutes.
We do not use analytics, advertising, or tracking cookies.
Security
We protect information with measures appropriate to its sensitivity, including encrypted connections (HTTPS), encrypted Discord tokens, storing only a one-way hash of session IDs, protection against cross-site request forgery, rate limits, and restricted access to our servers. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your information, to object to or restrict how we use it, and to complain to your local data protection authority. You can also:
- Log out of the Dashboard, which deletes your session and revokes our Discord token.
- Remove the Dashboard's access at any time in Discord, under User Settings, Authorized Apps.
- Leave a server, after which your member details for that server are deleted within 90 days.
- Ask a server administrator to remove the Bot from a server.
To make a request, email support@anotherverse.space from any address and include your Discord user ID. We may ask you to confirm that you own the Discord account, for example by sending a message from it. We will respond within 30 days. Deleting your votes may change other members' reputation totals; where that would be the case we may keep the totals and delete or anonymize the records that identify you.
Children
The Service is not directed to children. You must meet the minimum age to use Discord in your country (at least 13). We do not knowingly collect information from children under 13, or under the minimum age in their country. If you believe a child has provided us information, contact us and we will delete it.
International transfers
Our servers are located in the United States (Oracle Cloud US East, Ashburn, Virginia). If you use the Service from another country, your information will be transferred to and processed there. Where the law requires it, we use appropriate safeguards for these transfers.
Changes to this policy
We may update this policy as the Service changes. We will change the "Last updated" date above and, for significant changes, announce them in the Anotherverse Discord server before they take effect. Continuing to use the Service after a change takes effect means you accept the updated policy.
Contact
For questions or requests about this policy, contact Mana Bar at support@anotherverse.space.