Privacy Policy

1. Who is responsible

Sentinel is operated by the Sentinel project maintainers ("Sentinel," "we," or "us"). This policy covers the Sentinel Discord bot and this website. Discord and the payment and analysis providers described below also process information under their own privacy terms.

2. Information we process

• Discord identifiers and configuration: server, user, channel, role, and message IDs; selected language; watched channels; moderation settings; role assignments; automation rules; and monthly feature usage.
• Tribunal and appeal records: case and appeal IDs, the reported member and reporter IDs, relevant channel and message IDs, the submitted reason, automated category/severity/confidence results, votes and voter IDs, verdicts, status, and timestamps.
• Message content for requested checks: Sentinel does not continuously store ordinary server messages. When a configured anti-spoiler check or a user-requested tribunal/context-menu check needs analysis, relevant message text may be processed; the automatic anti-spoiler request is limited to the first 4,000 characters of that message. A reason or appeal text entered by a user may be stored as part of its case record.
• Subscription metadata: server and Discord user IDs associated with checkout, plan/product, billing customer and subscription IDs, subscription period, cancellation status, and feature usage. Creem handles payment card information and checkout details; Sentinel does not receive or store full card numbers or security codes.
• Operational information: service events and error details needed to operate, secure, and troubleshoot the bot. The website host may process standard request metadata such as IP address, browser, and request time in its access logs.

3. Where information comes from

Information comes from Discord when Sentinel is invited and used, from server owners and members who configure or invoke its commands, from the moderation activity they initiate, and from Creem when a subscription is purchased or updated. Sentinel only automatically checks messages in channels an administrator has configured for monitoring; commands and message context actions may be used outside those channels.

4. How information is used

• Provide moderation, tribunal, appeal, anti-spoiler, automation, and server configuration features.
• Store case history, apply role and message actions requested by server settings, and show plan usage and renewal alerts.
• Classify relevant message text when an enabled AI-assisted check is triggered.
• Process subscriptions, prevent payment abuse, respond to support requests, keep the service secure, and meet legal obligations.

Where privacy law requires a legal basis, processing is based on providing the requested service, legitimate interests in security and service operation, consent where required, or compliance with legal obligations. Server owners are responsible for ensuring they have an appropriate basis and provide any notices required before enabling message monitoring.

5. Message analysis and service providers

When a message passes the anti-spoiler keyword filter, or when a user explicitly requests a tribunal or spoiler check, Sentinel may send the relevant text to OpenJEV for classification. OpenJEV receives the text and the classification instructions needed to return a decision. The bot keeps classification results in a short-lived in-memory cache for up to ten minutes; this cache is not a transcript store. OpenJEV processes requests under its own terms and privacy practices.

Sentinel also relies on:

• Discord to deliver commands, messages, roles, and server interactions.
• Creem to host checkout and billing management and to send signed subscription status events.
• Hosting and infrastructure providers to run the bot and website and store operational data.

These providers receive only information needed for their service, but their own policies govern their processing. Provider systems may be located in a different country from you.

6. Storage and retention

Bot configuration, automation rules, moderation cases, appeals, and subscription metadata are stored in the bot's operational database so they survive restarts and support server history and billing. Monthly usage counters roll over when the usage month changes. Case and appeal records may remain available to the server for moderation history until they are removed from the service or deletion is requested.

There is currently no self-service command that permanently deletes all server records. A server owner may contact support to request deletion of data associated with that server. We will verify the request and delete or anonymize data we control where technically possible, subject to security, dispute-resolution, and legal retention requirements. Backups and provider logs may persist for a limited period according to the relevant provider's retention cycle.

7. Disclosure and sale

We do not sell personal information. We disclose information to the providers listed above, to the server members and moderators who can see the relevant Discord channels or records, and when disclosure is reasonably necessary to protect users, investigate abuse, enforce these Terms, or comply with law. We do not use moderation data for targeted advertising.

8. Security

We use reasonable measures appropriate to the service to protect stored information. No online service, database, or transmission is completely secure, and we cannot guarantee that unauthorized access will never occur. Server owners should limit bot permissions and restrict access to private tribunal and appeal channels.

9. Your choices and privacy rights

Server owners can change Sentinel's settings, disable monitoring, remove watched channels, or remove the bot. Members can contact the server's administrators about records maintained for that server. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a privacy authority.

To make a request, contact support and identify the server and relevant record. We may ask for information to verify your identity or authority. We will respond within the period required by applicable law. Removing Sentinel or deleting a Discord message does not automatically remove a case record already stored by the bot.

10. Children

Sentinel is not directed to children below the minimum age required by Discord or applicable law. We do not knowingly ask children to provide information through this website. If you believe a child has provided personal information to Sentinel, contact support so we can review the request.

11. International transfers and policy changes

Sentinel and its providers may process information in countries other than yours. Where required, appropriate safeguards for international transfers will be used by the responsible provider. We may update this policy as the service changes; the effective date above identifies the latest version. Material changes will be posted here and, where appropriate, announced through the service.