Privacy Policy

Last updated October 13, 2026

The short version

• Protostar stores only what it needs to run its features.
• It never asks Discord for your email address.
• It doesn't sell data, show ads or use tracking cookies.
• A server's data is deleted 30 days after Protostar is removed from it.

What Protostar stores, and why

When Protostar is in your server, it stores:

• Your server's settings, as you set them in the dashboard or with commands.
• XP, levels and message counts for each member, for leveling. Counts only: message text isn't stored.
• Moderation cases: who was moderated, by whom, the action, the reason given and when.
• Connected streaming accounts: the platform, account name, public display name and picture, and who connected it.
• Live alert records: which alert messages to update when a stream ends, kept for up to 7 days.
• Social post alerts: the accounts and feeds a server follows, and which of their public posts were already announced, so nothing is posted twice.

Protostar reads messages to apply your automod rules and award XP, then forgets them. Deleted and edited message logs are posted to your own log channel, where Discord stores them, not Protostar.

Signing in to the dashboard

The dashboard signs you in with Discord and asks only for your Discord ID, username, display name, avatar, and the servers you're in with your permissions there, so it can show the servers you manage. It doesn't ask for your email address.

If you tick Keep me signed in, a sign-in record is kept on our server for up to 30 days. The key Discord gives us to keep you signed in is stored encrypted, and only your browser's cookie can unlock it.

When you connect a Twitch or Kick account, Protostar keeps the account's name, display name and picture. It doesn't keep the access granted by signing in.

Connecting TikTok

TikTok only lets apps see a creator's videos after the creator signs in and agrees. When you choose Connect with TikTok, you're asked to let Protostar see your basic profile (your display name, username and profile picture) and your public videos.

• Protostar uses this only to announce your new public videos in the servers where you connected your account, with each video's link, description and cover picture.
• It keeps your TikTok username, display name and picture, and the sign-in TikTok gives it, stored encrypted. It never sees your password and can't post, comment, like or change anything on your account.
• It doesn't keep copies of your videos. It remembers only which videos were already announced, so nothing is posted twice.
• Removing the connection from every server deletes the sign-in straight away and asks TikTok to cancel Protostar's access. You can also remove Protostar's access at any time in the TikTok app's settings, where it lists the apps and services you've given permission to.

Cookies

The website only sets cookies when you sign in to the dashboard: one keeps you signed in while you use it, and, if you tick Keep me signed in, another remembers your device for 30 days. Logging out removes them. There are no advertising or analytics cookies.

Website logs

Like most websites, our hosting provider keeps standard server logs, such as IP addresses, browser types and the pages requested, to keep the site secure and fix problems. Protostar doesn't use them to track people.

Who else is involved

• Discord, which runs the platform Protostar works on.
• Cybrancee, our hosting provider, which runs the bot and the website.
• Streaming platforms (Twitch, Kick, YouTube, Trovo, Picarto, Rumble, Owncast servers and, if switched on, TikTok) receive the account names Protostar checks for live streams.
• TikTok receives requests for the profile and public videos of creators who connected their account by signing in.
• Social platforms and websites (YouTube, Bluesky, Mastodon servers and the sites whose feeds a server adds) receive requests for the public posts of the accounts and feeds a server follows.
• Our donation service (such as Ko-fi), if you choose to donate. It handles the payment, and we never see your card or bank details.

We don't sell or rent anyone's information.

How long it's kept

• Settings and records: for as long as Protostar is in your server, and deleted 30 days after it's removed.
• Live alert records: up to 7 days.
• Keep me signed in records: up to 30 days after you last used them.
• TikTok sign-ins: until the account is disconnected from every server, or 30 days after Protostar is removed from the last server it was connected in. A sign-in TikTok hasn't renewed for a year stops working by itself.

Keeping it safe

Connections between the website and the bot are signed and checked, sign-in keys are encrypted, the website uses HTTPS only, and Protostar asks Discord only for the permissions it uses. No system is perfectly secure, but we take care to protect what we keep, and we'll tell affected servers promptly if something goes wrong.

Your choices

Server admins can remove Protostar at any time, and change or delete connections and settings in the dashboard. Anyone can ask to see or delete the information Protostar holds about them by emailing achouck@comcast.net. Depending on where you live, you may have more rights over your data, and we'll honour them.

Children

Discord requires users to be at least 13, or older in some countries. Protostar isn't meant for anyone younger.

Changes

If this policy changes, this page and the date at the top will be updated.

Contact

Questions about privacy? Email achouck@comcast.net.