Privacy Policy
Last updated: June 10, 2026
This policy explains what data plonk ("the bot") processes, what it stores, and your options. The short version: plonk reads messages to find link spam, stores almost nothing, and what it does store exists so your moderators can review what happened.
What the bot processes
plonk receives every message in servers it's in (that's how spam detection works). Messages are analyzed in memory:
- Messages without links touch a short-lived in-memory counter and are never stored anywhere.
- Messages with links have the link normalized and remembered in memory for up to two hours, so repeat and cross-channel posts can be matched. Memory is wiped when entries expire or the bot restarts.
What we store
Infractions
When a detection fires (including would-have detections in monitor mode), we store: your Discord user ID, the server and channel IDs, the message ID, which rule fired, the action taken, a normalized fingerprint of the link, and the first 200 characters of the message so moderators can review the event. Infractions are kept for up to 90 days, then deleted.
Server configuration
Server ID and name, the enforcement mode, log channel, promo-channel designations, exemptions, and any detector settings your admins change. Kept while the bot is in the server.
Operational logs
Error logs and basic health metrics (memory use, uptime) for keeping the bot running. These can include server and channel IDs but not message content.
What we don't collect
- Full message content (only the 200-character snippet on actual infractions)
- Direct messages, voice, or media
- Anything from servers the bot isn't in
- Passwords, tokens, emails, or payment data: the bot never asks for any
Where data lives
The bot runs on a server in Germany (Hetzner). Data is stored in Turso (libSQL cloud database). This website is served by Cloudflare Pages and sets no cookies and runs no analytics.
Who sees it
Your server's moderators see infractions for their own server (in the log channel and via /plonk infractions). The bot operator can access stored data for debugging and abuse prevention. Data is never sold or shared with third parties beyond the infrastructure named above.
Your options
- Server admins: kicking the bot stops all processing for that server immediately. Configuration is retained briefly in case you re-add it; ask us to wipe it sooner via support.
- Users: to request deletion of infraction rows tied to your user ID, reach out via support with your Discord ID.
Changes
If this policy changes, the date above changes with it. Material changes get a note in the support server.