privacy

bot usage stats

scraps records how it's used so we can see which commands people use and find what breaks. Each time you run a command or use a button, menu or form, it records what ran, the server's ID (none in DMs), how you ran it (slash, prefix or app menu), whether it worked and the kind of error if it didn't, how long it took, the names of the options you filled in and your Discord language. It also notes when it joins or leaves a server.

It never records your user ID, username, messages, what you typed into options, or channel names. Your ID is swapped for a code that changes every month, so we can count people without knowing who they are or following anyone from one month to the next.

We use this to keep the bot working and decide what to build, which is a legitimate interest under the GDPR. It stays on our server and is deleted after 13 months. We don't sell or share it.

bot features

Features keep what they need to work: your XP in each server for levels, warnings a server's moderators give you, and each server's settings, like its prefix and log channels.

To see or delete what scraps has about you, ask in the support server.

verification

When a server uses scraps to verify members, the link opens a page here with a captcha. Cloudflare runs the captcha, so it sees your IP address and browser details under its own policy.

If the server turned on alt detection, which looks for one person verifying more than one account, the bot also records your IP address and the network it belongs to, your country, whether the address looks like a VPN or proxy, your Discord account's age, and when you joined the server. The page adds your browser and operating system, time zone, languages, screen size, touch points, processor count, the name of your graphics card, a random device ID it keeps in your browser's local storage, and a fingerprint, which is a code worked out from how your browser draws graphics and sound and which fonts it has. To tell whether an address is a VPN or proxy, the bot sends it to an IP reputation service.

Your IP address, device ID and fingerprint are stored only as keyed hashes, so they can be compared but not read back. We compare them only with other members of the same server, never across servers. That server's moderators see which accounts look linked and which signals matched (device, network or fingerprint), never the IP address itself. What happens next is up to the server: it can let you through, hold you for a moderator, or kick or ban you. These checks can be wrong, for example on a shared network.

We use this to stop ban evasion and duplicate accounts, which is a legitimate interest under the GDPR. It stays on our server and is deleted after 90 days, or 30 days after you leave the server, whichever comes first. We don't sell or share it. To see or delete it sooner, ask in the support server, or ask the server's moderators, who can clear it.

site analytics

We run our own analytics. For each page you open, it records the page, the site that sent you, your browser, operating system, device, screen size and language, and your country, region and city from your IP address. It doesn't keep the IP.

We use this to see which pages people use, which is a legitimate interest under the GDPR. The data stays on our server. We don't sell or share it.

Turn on Do Not Track in your browser and we won't count your visits.

your browser

The commands page caches the command list and the embed builder saves your draft in your browser's local storage. Neither is sent to us.

The verify page keeps a random device ID there too. Unlike the others, it's sent to the bot when you verify (see verification above). Clear your site data and a new one is made.

last.fm

When you link Last.fm with fmlogin, Last.fm sends you back here with a one-time token. This site passes that token and your Discord ID to the bot, which swaps it for your Last.fm username and session. The site doesn't keep either.

other services

The embed builder's webhook test sends your embed straight to Discord. We never see the webhook URL.

The album cover and song preview on the homepage load from Apple, so Apple sees your IP address.

Discord's privacy policy covers the invite and support server links.