Data & privacy

What we collect and why

From you, when you sign in

Your Discord user ID, username, display name and avatar, to identify you. No email address, no server list, no password. Sessions record the browser's user agent and IP address so you can recognise and end them.

For your organization

• Moderation cases from your VRChat group's audit log and your Discord server's audit log: the affected account's ID and display name, the action, time, the moderator where the platform names them, and the platform's reason field.
• Reasons, notes and evidence your staff enter.
• Instance records (times, peak observed player count) and estimated staff attendance for linked staff accounts.
• Your settings, staff memberships and an audit trail of administrative actions.

Retention and deletion

Your organization sets a retention period. Exports expire after 15 minutes. When an Owner deletes an organization, it becomes inaccessible immediately and its records are purged from the live database after a waiting period. Encrypted backups age out on their own schedule (documented for operators), so deleted data can persist in backups until they expire; it is not restored into live service except to recover from an incident.

Not collected

No advertising trackers, no browser fingerprinting, no data sold or shared between customer groups.

Questions: contact support.