KolibriPrivacy
Short and without legalese: what Kolibri knows about you, why, how long it keeps it and how to delete it.
The main thing. Kolibri does not store the text of your messages, neither in its database nor in files. For levels and statistics it counts only facts: a message was sent, a minute passed in voice.
What is stored
- Discord IDs — of servers, members, channels and roles. Without them the bot cannot tell one member from another.
- Activity counters — how many messages and minutes in voice per hour and day, and whom you overlapped with. Numbers only, and only on servers where a system that uses them is on («Statistics», «Quests», «Clans», «Giveaways»).
- What you gave the bot yourself — your birthday, profile background, clan description, quiz questions, message templates, the server's tags and sticky messages, the text of feedback and ideas (
/feedback,/bug,/idea), reminder text (/remind), suggestions to the server and votes on them (/proposal), polls and poll votes (/poll), ticket form answers and close reasons, the name and size of your voice room. - The state of the systems — balance and transfer history, level, reputation and its reasons, family, achievements, clans, purchases, quests.
- Moderation cases — who punished whom, for what and for how long.
- Server settings — everything set in
/settings. - A technical log — which commands were used and which errors happened, so they can be fixed. No message text.
- The server log (if its admins turned it on) — who edited or deleted a message, where and when, members joining and leaving, moderators' actions. To name the author of a deleted message, the bot keeps IDs (message → author, channel, time) in memory for up to 12 hours and never writes them to disk. Only if the server's admins separately turned on «Message text», the bot also keeps that server's message text and file names and links in memory, likewise for up to 12 hours and never on disk, and shows them in the log channel when a message is edited or deleted; it re-posts the pictures of a deleted message there too. Turn the setting off, and the bot forgets everything it kept at once.
- Server protection (if on) — counters of dangerous actions from Discord's audit log for the check window, and the roles removed by a quarantine, so they can be given back.
- Feeds — the addresses of public YouTube, Telegram, Boosty, VK and RSS channels added by admins, and the IDs of posts already published. No member data here.
- Invites (if tracking is on) — who joined the server, through whose invite (ID and invite code), when, and whether the invite counted.
- Signing in to the website (if you sign in to the panel at kolibri-bot.org) — your Discord ID, name, avatar and the list of servers where you can manage settings. This is needed to show your servers. The Discord access key is used once at sign-in — the site and the bot use it to confirm it is really you — and is not stored anywhere. The browser keeps only a random session ID in a secure cookie.
- Starboard (if on) — the IDs of messages that reached the board, their authors and channels, and the reaction count. The board shows the message as a Discord forward: the bot neither reads nor stores its text. If the author deletes the message, its copy on the board is deleted too.
- The entry check (if a server turned on «Verification» and you passed it at kolibri-bot.org) — to find second accounts and ban evasion. For this the site uses technical data about your connection, browser and device. The site neither stores your address nor gives it to the bot: the bot gets only encrypted fingerprints made with a key the bot does not have — separately for each server, so they cannot be turned back into an address or link you between servers. In your browser the site keeps a random ID (in a cookie and in the browser's storage). The bot keeps the fingerprints and the outcome; the server's staff see whether the check matched other accounts of that server — not your address. Protection against automated programs on the check page is provided by Cloudflare Turnstile, which processes data under the Cloudflare privacy policy. To sign in, the site asks Discord only for your name and avatar, without the list of servers.
- Server analytics (premium servers only) — numbers: how many messages per hour and day, how many joined, left and were online. To count how many newcomers stay, the bot remembers who joined and left and when. No message text.
- Settings history (premium) — copies of the server's settings and a log of changes in the panel: which of the managers changed what.
- Ban appeals (if a server turned them on) — the appeal text, who wrote it, the moderators' decision and who made it.
- The server list (if a server turned on «Server list») — the description, tags, server language, the banner (if the staff uploaded their own picture, the bot keeps it) and the invite the bot makes. A vote in the list — who voted for which server and when. A review — your ID, your Discord name and avatar at the time of the review, the stars and the text; the site shows the name, avatar, stars and text (the avatar as a link to Discord's image server). To vote or review, you sign in with Discord with your name and avatar only.
What the bot does not do
- It does not save message text to its database, files or technical logs. For
!commands the text is visible to the bot only at the moment of the call; text reaches the server log only if its admins turned that on themselves (see above). - A direct message to the bot (if your server accepts requests by DM) is kept in memory for up to 15 minutes to fill in the request form; it is saved only if you send the form yourself — as a ticket form answer.
- It does not sell or share data with third parties and shows no ads.
- It does not track you on this website: there are no counters, trackers, ads or external fonts here. There are only two cookies: the sign-in session — set when you sign in — and a random browser ID for the entry check — set when you pass it (it is also kept in the browser's storage). The browser's storage also remembers the site language if you switched it. The only third-party code is Cloudflare's bot protection on the check page.
- It does not ask for Administrator permission on a server.
How long it is kept
- Hourly activity — 60 days, daily — 400 days.
- Command usage statistics — 90 days.
- Ended giveaways — 30 days, quest history — 60 days.
- A reminder — until it is sent or cancelled (a repeating one — until it is cancelled).
- Who voted how in a poll — 30 days after it ends, then only the results. In an anonymous poll — erased the moment it ends.
- Server protection counters — no longer than 4 hours.
- The server log's memory of recent messages — no longer than 12 hours, in memory only.
- A panel sign-in — 7 days, 3 days without use, or until you press «Sign out».
- Entry check fingerprints — 90 days from the last check; deleted at once when the bot leaves the server. The check's ID in the browser — up to 400 days in the cookie and until the site's data is cleared in the browser's storage; you can simply delete it.
- Server analytics: hourly — 35 days, daily — 400 days, who joined and left when — 60 days.
- The settings change log — 90 days, settings copies — the last 30.
- Ban appeals — 180 days.
- Votes in the list — 30 days. A review — until you delete it (with the button on the server's page).
- Premium payment records — as long as they are needed for accounting and refunds.
- Database backups — the last 7, a few days.
- Everything else — while the bot is on the server. After the bot is removed from a server its settings are kept, to restore them if it is added again.
Your choices
/privacy hide:true— the bot stops counting your activity and your joins and leaves for server analytics, and deletes what it collected. You will not be in any report./dm state:false(or!dm off) — the bot stops sending you direct messages./birthday remove,/profile reset— remove your birthday and background./remind list— cancel your reminders.- The «Delete» button on the server's page deletes your review in the list.
- A server's staff erase its entry check data about you (
/verify forget) — or write to us. - To have everything about you on a server deleted, write to us with
/feedback— we will answer and delete it.
How the data is protected
The database is kept only on the bot's server and is closed to outsiders; the bot token is stored separately and never gets into logs. Every action checks the permissions of whoever performs it — buttons too. More on protection is in the project's repository.
Changes
If something changes, we will update this page. Last updated: September 26, 2026. The Russian version is at kolibri-bot.org/privacy.