Privacy Policy

You sign in with Discord, using the identify and guilds permissions, so Stained can see who you are and which servers you're in. Stained never sees your Discord password. Your login is kept in an encrypted cookie in your own browser for up to 7 days and isn't saved in our database. Signing out ends it and cancels the login with Discord.

Stained reads message content when a feature needs it, such as commands, filters, anti-spam, moderation, logging, tickets and other features a server has set up. Stained does not use ordinary Discord conversations for advertising. Something is only kept when a feature needs a record of it, such as a moderation case, a ticket, a saved message or a security event.

When a ticket closes, its messages, attachment links and reactions are saved as a transcript. Only the server's owner, its antinuke admins and the people who opened, claimed or closed that ticket can open it. Server staff decide how long their server keeps using ticket records.

A backup saves a server's role and channel setup (names, colors, permissions, topics and channel settings), its emojis and stickers with their images, the server's name, icon and owner, and who made it. It doesn't include messages or who has which role. Up to 10 backups are kept for each server. They stay after a server is deleted or removes Stained, so they can still be used, until the server's owner or an antinuke admin deletes them on the dashboard. Anyone with a backup's code can load it into a server they run, so keep codes private.

When you use an AI command, what you send is passed to Google's Gemini service to create the reply. Don't send anything private through these commands.

If you link Last.fm or Spotify, Stained keeps the key that service gives it so the feature keeps working. You can disconnect at any time with the feature's commands, which removes the link.

If you buy Stained Premium, we keep a record of who bought it, the plan and the server it applies to. Payments go through the payment service you choose, and Stained never stores your card details.

Our website and infrastructure process technical information such as IP address, request time, page, browser or device information and error details. It's used to run, secure and diagnose the service, including limiting how many requests one visitor can send.

We use information to execute commands; authenticate dashboard users; display and modify authorized server settings; provide moderation, ticketing, role, logging, automation, security, and other bot features; prevent abuse and raids; investigate technical or security problems; maintain service integrity; and improve Stained.

The website only uses cookies needed for signing in and keeping that sign-in safe. Your browser may also keep drafts from the embed builder on your own device. There are no advertising or tracking cookies.

Information is handled by Discord and by the providers Stained runs on: Cloudflare for the website, Supabase for the database, a hosting provider for the bot, and Google for AI features. We may also disclose information when required by law or when reasonably necessary to protect users, Stained or our systems. Stained does not sell personal information to anyone.

How long something is kept depends on the feature. Server settings stay while they're needed to provide the service. Security, moderation and diagnostic records may be kept for abuse-prevention, operational or legal reasons. Data that's no longer needed may be deleted or de-identified.

Website traffic is encrypted, sign-ins are encrypted in your browser, and the database can only be reached by Stained's own servers. Requests are rate limited, and the dashboard checks your access on every action. No online system can guarantee absolute security, so please protect your own Discord account too.

You can stop future use by removing Stained from your server, and end a dashboard session by signing out. To ask for your data to be accessed, corrected or deleted, contact the Stained team in the support server. Some records may have to be kept for security, legal, fraud-prevention or operational reasons.

Stained is intended only for users who satisfy Discord's applicable minimum age requirements. We do not knowingly provide the service to users who are not permitted to use Discord.

We may update this Policy as Stained's functionality or data practices change. The timestamp at the top identifies the current version.

Privacy questions and data requests can be directed to the Stained team through the official support server.