Privacy policy

Last updated 9 November 2026

Vandal is a Discord bot made by TriMe, UnadoptedTurkey and Pablo for any server that adds it. This page says what Vandal can see, what it keeps, why, for how long, and how to have it deleted. "We" means the people who run Vandal.

What Vandal sees

In a server it's been added to, Discord sends Vandal what it needs to work: the messages people post, members and their roles, channels, who joins and leaves voice channels, invites, and the server's settings. It reads messages to answer commands and to run the features the server turns on, like AutoMod, levels, counting and autoresponders. It never hears what's said in voice channels.

Vandal also sees direct messages people send it. It uses them for modmail (forwarded to the staff of the server you choose), confessions sent from DMs, ban appeals and commands.

What Vandal keeps about you

These are tied to your Discord user ID. Most stay until you delete them; reminders and lottery tickets go once they've been used. If you won a server's last lottery draw, the win is kept - your ID, the tickets you held and what you won - until that server's next draw, or until you delete your data. An AFK note also goes when you next talk in that server.

• Your economy in each server: coins and bank, items, chests, gear, pets, quests and achievements, market listings, and when you last collected daily rewards and incomes. Your farm: what's growing and when it was planted, your barn and seed tin, your farm level, the upgrades you've built, whether you asked for a DM when your crops are ripe, and whose crops you've watered today. The shares you own and what you paid for them. While you're playing a game of Last Card with a buy-in, the buy-in you paid, and whether it came from your cash or your bank, until the game ends. While you're playing a casino game or a hand of blackjack for coins, the coins you bet, which come from your cash, are kept as held for that game until it ends, and given back to your cash if Vandal restarts before it does. The same goes for rock paper scissors, Connect 4 and tic-tac-toe played for coins against another member: your stake is taken from your cash when they accept the challenge, and held until the game ends. The roles you've bought in the server's shop and what you paid for each. If Vandal restarts while it's giving you one, the purchase is kept until it's settled: the role recorded as yours, or your coins given back.
• Your level and XP, and the rank card styles you've bought and wear, which follow you between servers.
• Your daily word games: your guesses on the latest two days' words and on your practice word, your stats and streak, and whether you play in hard mode or with colour-blind colours. These follow you between servers. Nobody else sees your guesses.
• Your Last Card stats: how many games you've played and won, how many cards you've played, and your winning streak now and at its best. These follow you between servers. Nobody else sees your hand, and nothing is kept of it once a game ends.
• Your birthday, if you save one: the day and month, never the year.
• Your time zone, if you save one, so others can see what time it is for you.
• Your weather home and units, if you save them from a !weather card: the place's name, region and country, and its map coordinates and time zone as GeoNames lists them - the town's, never where you are - and whether you want metric or imperial. One home, the same in every server, until you forget it or delete your data.
• Reputation and marriage, AFK notes and reminders you set, lottery tickets, and how many times you've bumped a server on Disboard.
• Whether you've asked Vandal not to react to your messages in a server, until you use !noreact there again. Deleting your data leaves this, so Vandal still doesn't react.
• Giveaways: the running giveaways you've entered and the ones you host. Once a giveaway ends, who hosted it, who entered, who won and any coins it paid are kept for 30 days after it ended, so it can be rerolled without paying anyone twice, and then deleted.
• Whether you asked to be left off the website's leaderboards, and when.

What servers keep for their own moderation

When a server uses Vandal's moderation tools, Vandal keeps that server's records, which its staff can see:

• Warnings and cases (including timeouts, kicks and bans) and private staff notes, with who they're about and which moderator made them, until the server's staff remove them. Temporary bans and temporary roles, until they run out and Vandal lifts them.
• The roles you had when you left, if the server turned on !keeproles, for up to a year.
• Who the server's owner trusts with anti-nuke, until the owner changes that, and the roles anti-nuke took from anyone it stopped, with when and why, for the last 30 people it stopped, until their roles are given back.
• Whether you're still waiting to pass the server's captcha (and, if Vandal couldn't remove you when you ran out of time or tries, when it first tried, so it tells you only once), and when you got it wrong in the last day (so a script can't keep rejoining for fresh guesses).
• Who joined on whose invite: for each member who joins, when they joined, the invite link they used and who made it, whether their account was under a week old, and whether they've left since. These are kept with no time limit, as is when the staff last started someone's invite count again.
• Tickets, modmail conversations and ban appeals, with transcripts posted to the server's mod log. A closed ticket's transcript is also sent to whoever opened it. Vandal keeps the open ones, the last 500 closed tickets and 500 closed modmail conversations of each server, with who opened each, who closed it and why, and the last 500 appeals it decided, with who decided them. Each person's latest appeal stays, with their answers and the staff's decision, with no time limit, until they appeal again. Who the staff have blocked from modmail, by whom, why and when, until they're unblocked.
• Confessions and anonymous replies, with who sent them, for the server's last 1,000 confessions. Other members never see who sent one; the server's staff can. Who the staff have stopped from confessing, by whom and when, until they're let back.

What else stays with a server

Some of what you take part in belongs to the server it happens in:

• Suggestions you post, with your ID and name, and everyone's votes on them, kept with no time limit.
• Polls: who made each one and who voted for what. A poll is kept for a week after it's made, and then until Vandal next starts or someone, in any server, starts a new poll.
• Tags, the server's saved replies, with no record of who made them.
• Birthdays: who's been wished a happy birthday today, and who has the birthday role, until it's taken back the next day.
• Counting: who counted last, until someone counts next.
• Temporary voice rooms: whose each open room is, until it empties and is deleted.
• Sticky messages and repeating posts: who set each one, while it stands.

Deleting your data with /privacy doesn't remove any of these, or the moderation records above. They're the server's records: ask its staff. They stay if the server removes Vandal; only its message log goes then.

Message logs

In a server with a mod log, Vandal keeps a week of messages and their attachments so it can show the staff a message that was deleted or edited. Anything older than a week is removed within the hour. What Vandal posts to a mod log, a channel or your DMs is a Discord message, and stays wherever it was posted.

The dashboard

A server's owner, and anyone with Administrator or Manage Server there, can sign in at vandalbot.dev with Discord to change that server's Vandal settings in a browser. Vandal checks who may change what itself, in the same way its Discord panels do.

Signing in keeps a session on the website, at Cloudflare: your Discord ID, name and avatar, so you stay signed in. When you sign in, Discord tells the website which servers you're in; the session keeps only the ones you own or can manage, with their names and icons, so the dashboard can offer to add Vandal to the ones that don't have it. A session lasts seven days from the last time you used the dashboard, and never more than 30 days from when you signed in; signing out deletes it. Discord's access token is used for that sign-in only, and isn't kept.

The website sets two cookies, which only the site itself can read: one for the ten minutes a sign-in takes, and one that holds your session. To stop abuse, Cloudflare also counts each address's and each signed-in person's requests, a minute at a time.

Every change made on the dashboard is written in that server's mod log, with who made it and what changed, before and after, so the server's staff can see it. A server can switch that entry off in its mod log settings ("Dashboard changes"); switching it off is itself written in the log.

The leaderboards

vandalbot.dev/leaderboard shows the top 100 by level across every server Vandal is in. A server's own boards, at vandalbot.dev/leaderboard/ and the server's ID, show its members by level and by coins (cash and bank together), but only once its staff turn them on. Each place on a board shows your name as Discord shows it, your avatar, your level and prestige, and the XP you've earned or the coins you hold. Anyone can see these pages without signing in. Someone Vandal no longer shares a server with isn't listed.

To stay off every board, use /privacy and press Hide me from leaderboards. You're left off straight away, though a page the website already made can take up to five minutes to catch up. Show me on leaderboards puts you back.

What Vandal doesn't do

We don't sell or share your data, show ads, or track you outside Discord. Vandal isn't connected to anything that knows who you are apart from your Discord account.

Other services

• Discord carries everything Vandal does, and Discord's privacy policy covers what Discord does with it.
• Cloudflare serves vandalbot.dev, keeps the dashboard's sessions, and carries the dashboard's requests to Vandal. Like any web host it handles your IP address and what your browser sends in order to deliver the pages, and Cloudflare's privacy policy covers that. The website has no analytics and no tracking, the only cookies it sets are for signing in to the dashboard, and the avatars and server icons it shows are loaded from Discord.
• FishFish provides the list of scam sites AutoMod blocks. Vandal downloads the list; nothing about you is sent.
• YouTube and Twitch are asked about the channels a server follows for alerts, and nothing about you.
• Open-Meteo gives the weather for !weather. Vandal sends it the place name you type, to find the place, and that place's map coordinates, for its forecast - nothing about you. Open-Meteo keeps its server logs, which can include those coordinates, for 90 days (its terms and privacy notice).
• MyMemory, run by Translated S.r.l. in Italy, translates for !translate, Apps → Translate and flag reactions. It's sent the words being translated - what you typed, or the message you picked or reacted to, whoever wrote it - and the language to put them into: never who wrote them, your name or your ID. MyMemory keeps the text it's sent for the long term and uses it to improve its services, as its terms say. If the people running Vandal switch on Microsoft's Azure AI Translator instead, the text goes there and not to MyMemory, and Microsoft doesn't keep it (Microsoft's note on Translator's data). Vandal keeps a translation in memory for up to an hour, so the same one isn't asked for twice, and writes none down.
• A server can let its members translate a message by reacting to it with a country's flag. That's off unless someone who manages the server turns it on; a translation it posts in a channel is a message from Vandal, and goes in that server's mod log, with who asked for it.
• Avatars and attachments are downloaded from Discord to draw welcome, rank and quote cards, and to keep deleted pictures for the mod log.

Where it's kept

On a rented server, in a database and in files that only Vandal's own account can read. The database is backed up every hour, and each backup is kept for three days. A copy of everything but the message log and the copies of attachments kept for the mod log may also be taken by hand before an update; it's kept until it's deleted by hand. If the database can't be reached when Vandal stops or reloads part of itself, what it couldn't save there is written to a file, to be put back into the database when it can be. Once put back, or set aside, that file is deleted 30 days after it was written, but for a file of the message log's: once put back, it's deleted a week after it was written (within the hour), as the messages in it would be.

Until Vandal moved to its database, it kept everything in files. Those files still hold what Vandal knew on the day of the move, and they're still copied every hour, as before. About a week after the move, the files and all their hourly copies are deleted, but for one archive of the files, which is deleted 30 days after that. Nothing writes to those files any more, so deleting your data doesn't change them or their copies: what they hold about you is deleted when they are.

Deleting your data

Use /privacy in any server with Vandal, or in a DM with it. It shows what Vandal keeps about you, and Delete my data removes your economy in every server and the roles you've bought in each server's shop, your level, XP and rank card styles, daily word games and stats, Last Card stats, birthday, time zone, weather home and units, reputation and marriage, AFK notes, reminders, lottery tickets, any lottery draw you won, your entries in running giveaways and bump counts, straight away, along with your choice to stay off the leaderboards: if you'd still like that, press Hide me from leaderboards again. If Vandal's database can't be reached at that moment, what you see says which of these it still has to write there: they're gone from what Vandal holds, and written at its next save, or when Vandal stops. The database's hourly backups that still hold them are gone within three days. The files from before Vandal's database, their copies and their archive, and any copy taken by hand before an update, keep what they held until they're deleted, as Where it's kept says. A giveaway you host keeps running, and its coins go back to you if nobody can win. Ended giveaways stay as they are, with who entered and won, until they're deleted 30 days after they end. To end a dashboard session, sign out of the dashboard.

You can also stop Vandal reacting to your messages in a server with !noreact, and leave any server it's in.

Age

Vandal is only for people who can use Discord, which means being at least 13, or older where the law where you live says so.

Changes

When this policy changes, this page changes with it, along with the date at the top.

Contact

Use /privacy and press Message the developer. Your message goes straight to the people who run Vandal, and the answer comes back in your DMs with Vandal.