Privacy Policy

When you use ENC and its associated services (including the web dashboard and verification portals), we may collect and store limited data necessary for bot functionality and server security. This may include:

• Discord User IDs, Usernames, and Avatar Hashes
• Server (Guild) IDs, Channel IDs, and Role IDs
• Message IDs & Audit Metadata (for moderation and security logging purposes)
• Basic server configuration settings and automod rules
• 18+ Age verification & NSFW consent status (boolean flag and timestamp for DM access control)
• IP Addresses: Collected solely during Web Verification sessions to protect Discord communities against automated raid attacks, bot nets, and malicious proxies.
• Hardware Device Fingerprints: Technical client-side browser/hardware characteristics (e.g. screen resolution, GPU render context, WebGL components, and platform metadata) generated during Web Verification to identify duplicate accounts on the same device.

We do not collect sensitive personal information such as passwords, real names, phone numbers, or credit card details.

The data collected is processed strictly for the following operational and security purposes:

• Bot Core Features: Executing moderation, anti-nuke, automod, leveling, custom embeds, and server management workflows.
• Anti-Alt & Raid Defense: Correlating hardware fingerprints and IP addresses within individual Discord servers to flag alt accounts and prevent malicious raid bots.
• Ban Evasion Prevention: Automatically preventing previously banned users from re-entering protected servers through new accounts on the same hardware or network.
• Audit Logging: Providing authorized server administrators with audit streams to maintain server safety and review security filter triggers.

Device fingerprinting and IP verification data are treated with strict confidentiality:

• Cryptographic Storage: Device fingerprints are stored as one-way cryptographic hashes and are never shared across unrelated external applications.
• Discord Embed Privacy: IP addresses and raw device hashes are strictly redacted from Discord embeds and message channels to prevent public exposure.
• Restricted Staff Access: Telemetry data is only accessible to authenticated server managers via the secure web dashboard for active server defense.

Data is stored securely in encrypted databases and retained only as long as necessary to enforce server security policies. When a member is unverified by staff or server data is purged, associated device records for that server are removed.

We do not sell, rent, trade, monetize, or share your data with advertisers or third parties, except:

• When required by applicable legal process or law enforcement
• To comply with Discord’s Terms of Service and Developer Terms of Service
• To defend against critical infrastructure attacks or widespread platform abuse

Users and server administrators maintain full control over their data:

• Server administrators can remove ENC at any time to delete all associated server data and settings.
• Server staff can reset a member's verification and device records at any time using the ,unverify command or via the dashboard.
• Users can revoke their 18+ NSFW DM consent at any time via ,nsfw revoke or /nsfw optout.
• Users may request full personal data deletion by reaching out to our official support server.

We employ modern encryption, token authentication, and strict access controls to safeguard all stored records against unauthorized access, loss, or disclosure.

This Privacy Policy may be updated periodically. Notice of significant changes will be published in our official support channels. Continued use of ENC following updates constitutes acceptance of the modified policy.