Privacy Policy
Dungeon Keeper is a Discord bot run by the operator of the Discord server it is installed in (“the server operator”) for that server’s own community. It is not a public service run by a company. This page says what the bot stores about members, why, how long it is kept, who else handles it, and what you can do about it.
The short version: the bot does not keep the text of your channel messages. It keeps a record that you posted, where and when. Text you type into a bot feature itself (a bio answer, a whisper, a submission) is kept by that feature, as listed below.
Who is responsible
The server operator decides what the bot collects and why, and is the controller of the data it holds. No representative or data protection officer has been appointed. Questions and requests go to the server’s moderators, by opening a ticket in the server; the server operator answers them.
What the bot stores
The bot’s records fall into these categories. Each says what is kept, why, how long for, and what happens if you ask for it to be deleted.
Your messages
A record that each message happened: which channel you posted in and when, who you were replying to, who you @-mentioned, the reactions it received, an automatic sentiment score, and whether it carried an image or video. The bot does not keep the text of your messages, or the files and links in them — it stopped storing them in September 2026 and erased what it had. A message you delete in Discord has its record marked deleted, with the time, rather than removed.
Why it is held. This record powers the server's activity and XP features, the moderation record, and features like quotes and the starboard.
How long it is kept. Mixed — some is deleted automatically, the longest after 365 days; some is kept permanently, for the reason given below; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: Nothing — the whole record goes. A moderator handling a narrower request (one about your profile and activity only) can choose to leave the bare activity log in place; that is the most that could remain, and it is never any text.
Your activity and levels
A running record of the XP you have earned — from messages, from reactions, and from time spent in voice channels — plus the daily totals it rolls up into, and your current level. Also each time you bumped the server on a listing site in the last 7 days, which ranks the Bump Tracker's Top bumpers list.
Why it is held. This is what the levelling system is: without it your level could not be calculated or shown on a leaderboard.
How long it is kept. Mixed — some is deleted automatically, the longest after 7 days; some is kept permanently, for the reason given below.
If you ask for your data to be deleted, all of this is erased.
Your coins and purchases
Your wallet balance and every transaction behind it: coins earned, spent, gifted and won, daily login streaks, quests you completed, items you bought, and any custom shop items or themes you own.
Why it is held. A currency needs a ledger. Both sides of every transfer are kept so balances stay correct and disputes can be settled.
How long it is kept. Mixed — some is deleted automatically; some is removed once it is no longer needed; some is kept permanently, for the reason given below; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: The transaction ledger, and the records of why coins moved: prizes, raffle and jackpot wins, auction bids, bounties, claimed drops, rentals paid for someone else and community payouts. A transfer has two sides, and deleting only yours would corrupt the balance of the person you traded with. It is kept as a financial record, not as a profile of you.
Games you have played
Records from the games you have taken part in — rounds played, hands dealt, results, scores and rankings across the casino, duels, Mahjong, Guess, Risky Rolls, Survivor and the other game features.
Why it is held. Game history keeps scores, leaderboards and statistics working, and lets a game resume rather than restart.
How long it is kept. Mixed — some is deleted automatically, the longest after 30 days; some is removed once it is no longer needed; some is kept permanently, for the reason given below; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: Records of completed games where a result involved other players, so that their own game history and scores stay intact. Guess Who is the exception: a round you submitted, or one whose answer was you, is deleted whole — the photo, its post in the Guess channel, the text of a confession round, and every guess made on it. If you solved somebody else's round, that round stays but stops naming you as the solver. You can clear your Guess Who data yourself at any time from the Guess Who button under My Data on the Help & Settings panel. Wheel of Flash keeps which rounds you spun, what they paid and the ids of your proof posts (never the posts) for one day after a round closes; you can clear your finished rounds sooner from the Wheel of Flash button under My Data, though the time your last round closed stays a day so the cooldown still applies. The coins you were paid stay in the ledger. Battleship is the other exception: your photo is kept only while a game is being played and is deleted when the game ends. The record that you agreed to the photo terms is kept. You can clear your Battleship data yourself from the Battleship button under My Data.
Who you interact with
Moments where you and another member were publicly linked: @-mentions that earned an award, messages you starred or that were starred, quote cards saved from something someone said, and role pings you sent. The bot no longer keeps a general map of who talks to, replies to or reacts to whom, or who follows whom between voice channels — those records were removed in September 2026.
Why it is held. These drive features such as Mention Awards, the starboard and quote cards, and the report on how a role ping landed. A record of a role ping you sent is deleted after 365 days. That deletion is on for a server the bot joined after this change; a server it was already in keeps those records until an admin switches it on.
How long it is kept. Mixed — some is deleted automatically, the longest after 365 days; some is removed once it is no longer needed; some is kept permanently, for the reason given below.
If you ask for your data to be deleted, most of this is erased. What is kept: If you set up a Mention Award rule yourself, the record that you created it stays — it is the account of who opened a coin faucet, kept alongside the ledger entries it produced. Any award rule that only your announcements could trigger is deleted.
Voice channels
Time spent in voice, the rooms you own or are trusted in, and your voice room preferences. Where a channel has transcription switched on, a voice note you post there is transcribed and the text posted into that channel as an ordinary message — the bot keeps no copy of the transcript of its own.
Why it is held. Voice time earns XP, and room ownership and trust lists are what let you manage your own voice channel.
How long it is kept. Mixed — some is removed once it is no longer needed; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: Where another member has blocked you from their own voice room, that entry stays. Your own block and trust lists are removed — those are your preferences about your room — but a block somebody else placed is their protection, and erasing it at the request of the person it excludes would defeat it.
Things you told us about yourself
Information you entered yourself: your bio and its answers, your birthday if you set one, your music preferences, reminders you set, and settings you have chosen for individual features.
Why it is held. You provided these so the server could show or use them. Nothing here was collected without you typing it in.
How long it is kept. Mixed — some is deleted automatically, the longest after 12 months; some is removed once it is no longer needed; some is kept permanently, for the reason given below.
If you ask for your data to be deleted, all of this is erased.
Anonymous posts you have made
Whispers, confessions and other anonymous posts. These appear to others without your name — but the server does keep the link between you and what you posted, so that abuse can be dealt with.
Why it is held. The link exists solely so an anonymous feature cannot be used to harass people with no accountability. The audit link is deleted after 90 days by default, and the record that routes replies to a confession after 14; whispers are kept until they are cleared.
How long it is kept. Mixed — some is deleted automatically, the longest after 90 days; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: Almost nothing. An erasure deletes your whispers, and you can clear them yourself at any time from the Whisper history button under My Data on the Help & Settings panel. The audit link between you and your other anonymous posts is erased with them, and so is the record that routes replies to your confessions. A report you filed about somebody else's whisper, and a guess somebody made naming you on a third party's whisper, stay because they are about another member's message, but your name is taken off both.
Pen Pals
Whether you opted in or out, who you were matched with, and any blocks you set.
Why it is held. Matching people needs a record of who is in the pool and who should not be paired.
How long it is kept. Mixed — some is removed once it is no longer needed; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: A block someone else placed against you, so that it continues to protect them. Your own blocks and your opt-out are erased, so re-block or opt out again if you rejoin the pool and do not want to be matched.
Wellbeing tools
Your use of the wellness features: whether you opted in, usage limits, streaks, quiet periods, weekly summaries, and a break you are taking (the roles held back to give you on your return).
Why it is held. These features are opt-in and their limits and streaks only work if your own usage is remembered.
How long it is kept. Mixed — some is deleted automatically, the longest after 30 days; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, all of this is erased.
Your moderation record
Warnings, mutes, jails, and tickets you opened or were named in.
Why it is held. A moderation record is the evidence behind decisions taken about your account, and the basis on which one could be challenged or reversed.
How long it is kept. Mixed — some is removed once it is no longer needed; some is kept permanently, for the reason given below.
If you ask for your data to be deleted, most of this is erased. What is kept: Warnings, mutes, jails and tickets. These are the evidence behind decisions taken about your account: if a decision were ever challenged, this is the record it would be judged on. It is kept for that reason and no other.
Roles and permissions
Roles you have been granted, role menus you have used, permissions given to you over particular features, your direct-message preferences, and requests to DM another member (with the reason typed), deleted once answered or once it expires unanswered.
Why it is held. The server needs to know what you have access to in order to grant or refuse it.
How long it is kept. Mixed — some is deleted automatically; some is removed once it is no longer needed; some is kept permanently, for the reason given below; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: The record of permissions granted to you over server features, kept as the counterpart to whatever those permissions were then used to do; and records of direct-message consent between you and other members, which are often the other person's evidence.
Joining and onboarding
When you joined, how your onboarding progressed, greeting checks, and records relating to periods of inactivity.
Why it is held. Onboarding has to remember where you got to, and inactivity handling needs to know when you were last seen.
How long it is kept. Mixed — some is deleted automatically, the longest after 30 days; some is removed once it is no longer needed; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: The fact that a join or an inactivity sweep happened, with your identity removed from it. Your own welcome card is deleted along with it. If you greeted somebody else, your name stays on their card as the person who did.
How you use the bot
Which commands and dashboard panels you have used, and when.
Why it is held. Usage figures show which features are worth keeping and which are not working. They are about the features, not about judging you.
How long it is kept. Permanently. This is a deliberate decision rather than an oversight, and the reason is given just below.
If you ask for your data to be deleted, all of this is erased.
Server administration
Records created because of things you did as a moderator or admin — settings you changed, items you configured, tasks you signed off — along with small internal records that do not fit the categories above.
Why it is held. These are the record of who configured a shared server surface, and the counterpart to whatever that surface then did.
How long it is kept. Mixed — some is removed once it is no longer needed; some is kept permanently, for the reason given below; and for some of it no deletion date has been set at all.
If you ask for your data to be deleted, most of this is erased. What is kept: Records of settings you changed as a moderator or admin. These are about the server's configuration rather than about you, and they are the counterpart to whatever that setting then did.
Who else handles it
Almost all processing happens on the bot’s own machine and local network. These outside services receive some data, each under its standard terms. Where one is outside the UK and EU, the safeguard for that transfer is named.
| Service | What it does | Located | Transfer safeguard |
|---|---|---|---|
| Discord Inc. | Hosts everything the bot reads and writes | US | EU–US Data Privacy Framework (+ UK extension); SCCs |
| Anthropic PBC | AI assistant (/ask and the dashboard's Ask); LegitLibs template prep; the Calendar's Suggest (moderator-written planning text only, newsletter section drafts included); the DK MCP claude.ai connector's todo and bug lists | US | SCCs |
| Cloudflare, Inc. | Dashboard tunnel. It terminates TLS, so dashboard traffic (session cookie, ids in requests, each panel's data) passes through it decrypted. The same tunnel carries the DK MCP connector's traffic to claude.ai | US | EU–US Data Privacy Framework; SCCs |
| Google LLC (YouTube) | Music search text and video loads, under the bot's own Google account; oEmbed title lookups | US | EU–US Data Privacy Framework (+ UK, Swiss extensions) |
| Spotify AB | Track, album and playlist lookups (including a pasted personal playlist's id) and search text; playlist add/remove by track id | Sweden (EU) | None needed |
| SoundCloud | Fallback search (track title and artist) when a YouTube track fails, and playback of pasted SoundCloud links; no member identity | Unverified: check SoundCloud's terms | Unverified: check SoundCloud's terms |
| cipher.kikkia.dev | YouTube player signature code only: no track, no search, nothing about a member | Unknown | Not needed: no personal data |
Your rights, and how to use them
You can do any of the following at any time, free of charge:
- Delete things yourself. Press My Data on the server’s Help & Settings panel. From there you can delete your messages from the server, clear a feature’s records (such as your whisper history or your Guess Who data), or use Delete everything to start over.
- See your data. Ask a moderator, through a ticket, for a copy of everything the bot holds about you. You receive a readable summary and a full machine-readable file.
- Have it erased. Ask a moderator for a full erasure. Most of it is deleted; what is kept, and why, is listed under each category above.
- Correct it. Bios and birthdays you can edit yourself; for anything else, ask a moderator.
- Read more. Sign in to the server’s dashboard and open Help → Your Data & Privacy for the full account, feature by feature.
- Complain. If you are unhappy with how your data is handled, raise it with the server operator through a ticket. You can also complain to the data protection authority where you live (in the UK, the Information Commissioner’s Office at ico.org.uk).
Discord itself holds your account and everything you post. That is Discord’s data, under Discord’s own privacy policy, and requests about it go to Discord.