Privacy Policy

1. Who we are

DisForums is run by [Operator name] (“we”, “us”). It lets members of a Discord server browse and search that server’s forum channels on the web. This policy explains what personal information we handle when you use DisForums or when a server you’re in uses it.

We are not affiliated with or endorsed by Discord Inc. Discord’s own Privacy Policy covers how Discord handles your data.

2. What we collect

When you sign in with Discord

We ask Discord for the identify and guilds permissions. We never see your Discord password or email address. We store:

• your Discord user ID, username, display name and avatar;
• when you last signed in;
• the Discord access and refresh tokens that let us list your servers, encrypted (AES-256-GCM) in our database.

We use your tokens to fetch the list of servers you’re in. We keep that list in memory for a few minutes to show you your servers, and don’t store it.

When a server adds DisForums

• the server’s ID, name and icon;
• who added the bot, and when;
• the server’s DisForums settings: which roles can read, which forums are enabled, and how often they refresh.

To check who may see what, we also read role and channel permission information from Discord. We hold this briefly in memory and don’t store it.

Forum posts we index

For each post in a forum the server’s admins have enabled, we store:

• its title, tags, and whether it is pinned, archived or closed;
• when it was created and last active, and how many messages it has;
• the text of its opening message (up to 4,000 characters), the number of attachments, and reaction counts;
• the Discord user ID, display name and avatar of whoever posted it.

Replies we show but don’t keep

When you open a post, we fetch its replies from Discord to show you. Replies are never written to our database; they pass through our servers’ memory for up to about 30 seconds.

Stored in your browser

We set cookies that keep you signed in and protect sign-in against forgery. Your browser also stores your theme, list or grid preference, and any posts you’ve chosen to hide. Those preferences stay on your device.

Analytics

Our pages load Google’s tag (gtag.js). It lets Google collect information about your visit, such as the pages you view, your browser and approximate location, and sets Google cookies. Google handles that data under its own privacy policy. You can block it with your browser’s privacy settings or a content blocker; DisForums works the same without it.

3. How we use it

• to sign you in and show you the servers and forums you can access;
• to build the search index that makes forums fast to browse;
• to enforce access: checking your roles and Discord permissions on every request;
• to keep the service secure, fix problems and prevent abuse;
• to understand how the site is used, through analytics;
• when paid plans are available, to manage your subscription.

4. Who can see indexed posts

Nothing on DisForums is public. A post is only shown to someone who is signed in, is a member of that server, has a role the server’s admins allowed, and can see that forum in Discord. Anyone who can see a post in DisForums could already see it in Discord.

We don’t sell personal information, and we don’t use forum content for advertising or to train AI models.

5. Who we share it with

We use a few providers to run DisForums:

When paid plans are available, payments will be handled by a payment provider or by Discord, who will process your payment details; we won’t see your full card number.

We may also disclose information if the law requires it, to protect people’s safety, or as part of a sale or transfer of DisForums, in which case this policy continues to apply.

6. How long we keep it

7. Security

Traffic is encrypted with HTTPS, Discord tokens are encrypted in our database, and every request is checked against the viewer’s Discord permissions. No system is perfectly secure, but if we learn of a breach affecting your information, we’ll tell you as the law requires.

8. Your choices and rights

• Disconnect: remove DisForums under Discord’s User Settings → Authorized Apps. We can then no longer read your server list.
• Delete a post: delete it in Discord and it drops out of our index as described above.
• Remove a server: an admin can disable forums or remove the bot; the index is deleted 30 days later.
• Access, correct or delete: email [contact email] and we’ll send you a copy of what we hold about you, correct it, or delete your account and remove your name and avatar from our index.

Depending on where you live, for example in the EU, UK, New Zealand, Australia or California, you may have further rights, such as to object to processing or to complain to your data protection authority. We rely on providing the service you asked for, and on our legitimate interest in running a useful, secure service for servers that have added us, as the legal bases for this processing.

9. International transfers

Our providers may process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

10. Children

DisForums is for people old enough to use Discord in their country (at least 13). We don’t knowingly collect information from younger children; contact us if you believe we have.

11. Changes to this policy

We’ll update the date at the top when this policy changes, and tell you in advance through the site or Discord if a change significantly affects how we use your information.

12. Contact

Questions or requests about privacy: [contact email]. See also our Terms of Service.