Privacy Policy

Last updated 25 October 2026

This policy explains what data the Wardn Discord bot, its dashboard at dash.wardn.tech and this website collect, why, and what you can do about it. Wardn is run by impto.tech ("we", "us"), based in the United Kingdom. We are the controller of the data described here.

1. What we collect

When Wardn is in your Discord server

• Discord identifiers: server, channel, role and user IDs, usernames and avatars, needed for every feature.
• Server settings: how the server's admins configured Wardn, and the server's plan (Free or Premium).
• Feature data per server: levels and XP, message counts, economy balances, warnings and other moderation records, invites, birthdays you choose to add, suggestions, giveaway entries, reaction roles and application answers.
• Server activity totals: how many members joined and left and how many messages were sent each day, per channel and per hour, plus the member count. These are counts only, with no user IDs or message content, kept for up to 400 days for the server's stats dashboard.
• Tickets: ticket details and, on Premium servers, transcripts of the ticket channel's messages.
• Message content: Wardn reads messages to run commands, auto-moderation and levelling. It does not store message content, except in ticket transcripts and in log channels that a server's admins set up.

When you sign in to the dashboard

• Your Discord ID, username and avatar, via Discord sign-in, and a session token in a cookie so you stay signed in.

When you verify with web verification

• Your Discord ID, to check it's you and give you the server's verification roles. If you don't agree to be added back, we don't keep anything from your sign-in.
• If you choose to be added back (optional, on any server, by ticking the box before you sign in): your Discord ID and username, the server you verified in, when, and the Discord sign-in tokens Discord gives us with the "join servers for you" permission (guilds.join). The tokens are stored encrypted (AES-256-GCM) and used for one purpose only: adding you back to that community's server if its owner restores it after the original is lost.

When you pay for Premium or a plugin

• Payments are handled by Stripe. We never see or store your card details. We store the Stripe customer and subscription IDs, the server they apply to, and the plan.
• If you open a referral partner's link, we keep their code in a cookie for 30 days so it can be applied at checkout. If you subscribe with a partner's code, we record the code against the subscription and the server's payments (amount, date and Stripe invoice ID), and any refunds or disputes, to work out the partner's commission. We don't give partners your card details or your Discord account.

If you're a referral partner

• Your name, your partner code, your Discord ID if you give it, and the payout details you give us (for example a PayPal address or bank details).
• Your earnings: the payments, refunds and disputes on servers that subscribed with your code, the commission on each, and the payouts we've made to you.
• Only Wardn's owners can see these records.

When a server uses the Commerce plugin

• Freelancer profiles you choose to fill in: bio, skills, rates, portfolio links and availability, plus your rating and number of completed commissions.
• Commissions and orders: what was requested, the agreed price, who claimed it, its progress, and the reviews customers leave.
• Earnings records for freelancers: completed commissions and payouts that admins record.
• Payment details: the server's own crypto wallet addresses, the coin and amount a buyer chose, and when the buyer said they paid and staff confirmed it. We don't see or store anyone's wallet keys, bank or card details, and we can't see the payment itself.
• PayPal invoices: if a server connects its own PayPal account, we store its PayPal app Client ID and Secret (the secret encrypted) and the ids of invoices we create. An invoice holds the item, price and a reference to the commission or order; it is created in the server's PayPal account, and the buyer pays PayPal directly.
• Store purchases: if a server connects a Tebex, Sellix or CraftingStore shop, the store sends us each purchase. We keep what was bought, the amount and currency, the transaction ID, the in-game name and Discord account if the store gives them, the roles given, and a one-way hash of the buyer's email (never the email itself) so the buyer can claim the purchase. We also keep the store's webhook secret, encrypted. Payment happens in the store; we never see card or account details.
• To show crypto amounts we ask a public price service (CoinGecko) for current prices. No personal data is sent with that request.

When you visit this website

• No analytics, trackers or advertising cookies. Our hosting provider and Cloudflare process technical data such as IP addresses to deliver the site and protect it from abuse.
• When you press an Add to Discord button, we record which button it was and when, so we know which pages help people find Wardn. This record holds no IP address, browser details or anything else that identifies you. If you then add Wardn to a server, we also store which button it was added from against that server, with the date and, if Discord shows it, the account that added it.

2. Why we use it (legal bases)

Purpose	Legal basis
Running the bot, dashboard and features a server has enabled	Contract, and our legitimate interest in providing the service the server's admins chose
Moderation, security and preventing abuse	Legitimate interests
Storing your sign-in for member restore	Your consent, given by ticking the box when you verify. It's optional, you're verified either way, and you can withdraw it at any time
Billing and accounting	Contract and legal obligation
Running the referral partner program and paying commission	Contract with the partner, legal obligation for payment records, and our legitimate interest in knowing which partner referred a subscription

3. Member restore and your choices

Restoring is only possible for people who verified and agreed. It can only add you to a replacement server chosen by the original server's owner, who must hold that server's private restore key. You can stop it at any time:

• Run /restore forget in any server with Wardn. This deletes every stored verification for you, in every server.
• Or remove Wardn under Discord User Settings → Authorized Apps. Your stored sign-in stops working, and we delete it the next time it would be used.

4. Who we share data with

We do not sell data. We only share it with the services needed to run Wardn:

• Discord, which Wardn runs on;
• our hosting provider (Hostinger), where the bot, database and backups run;
• Cloudflare, which delivers and protects our websites;
• Stripe, for payments;
• Twitch and Kick, for servers using Social alerts: we ask them whether the streamers a server follows are live (only the channel names are sent);
• PayPal, only for servers that connect their PayPal account to Commerce, to create and check their invoices;
• the staff of a server using Commerce, who see the commissions, orders, reviews and earnings records in their own server;
• an encrypted backup storage provider, if off-site backups are enabled.

Some of these providers process data outside the UK. Where they do, they use safeguards recognised under UK data protection law, such as standard contractual clauses.

5. How long we keep it

• Server data is kept while Wardn is used in that server. A server's admins, or you for your own data, can ask us to delete it.
• Restore sign-ins are kept until you run /restore forget, remove Wardn's access, or we find they no longer work. The same rules apply on every plan. If Wardn is removed from the server you verified in, they are kept for 6 months so the server can still be restored, then deleted, unless Wardn is added back to that server first.
• Restore sign-ins stored before 21 October 2026, when agreeing was part of verifying rather than a separate choice, are deleted 60 days after this change unless you verify again in that server and tick the box to be added back.
• Billing records are kept as long as tax law requires.
• Partner records (your details, earnings and payouts) are kept while you're a partner. After that, your payout details are deleted once everything owed has been paid, and the earnings and payout records are kept as long as tax law requires.
• Commerce records (profiles, commissions, orders, store purchases, reviews, earnings) are kept while the server uses Wardn and deleted 30 days after Wardn leaves it. They can also be deleted on request by the server's admins or, for your own profile and reviews you wrote, by you.
• Backups are kept for up to 14 days on our server and up to 6 months in encrypted off-site storage. Then they are deleted.

6. Security

Data is stored on a firewalled server. Dashboard and website traffic uses HTTPS. Restore sign-ins are encrypted with a key kept separately from the database, and dashboard access is limited to people with the right permissions in that server.

7. Your rights

Under UK data protection law you can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy in a portable format. Email privacy@impto.tech from an address you can verify, together with your Discord ID. We will reply within one month. If you're unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk).

8. Children

Discord requires users to be at least 13 (or older where local law requires). Wardn is not intended for anyone below Discord's minimum age. Purchases must be made by an adult or with a parent's or guardian's permission.

9. Changes

If we change this policy we'll update the date above. For significant changes we'll also announce them in our Discord server or on this website.