Privacy & data

What is never stored

• Raw IP addresses. The IP is converted to salted, non-reversible HMAC hashes the instant it arrives. The plaintext value is never written anywhere.
• Message content and browsing history. Vidar reads neither.
• Raw device data. Client facets are hashed in the browser and again on the server; only hashes are kept.

What is stored

• Your Discord user ID and username.
• Coarse account metadata: account age, default-avatar flag, public badges.
• Anonymized identity hashes: an exact-IP hash, a coarse network (/24 or /48) hash, an ASN hash, and a device fingerprint hash.
• The decision, risk score, and the reasoning behind it (for moderator audit).

Retention

• Exact-IP hashes are purged on a short schedule (default 14 days).
• Coarse network hashes and the global sighting index are pruned on a longer schedule (default 90 days).
• Decisions are retained for audit until you delete them or remove the bot.

Cross-server checks

When a server enables cross-server checks, Vidar may consult a network-wide sighting index of hashes only to catch accounts already flagged elsewhere. No server sees another server's members, messages, or raw identifiers — only whether a hash matches.

Your rights

Server owners are the data controllers for their communities. Members can request deletion of their verification data through the server's moderators. See the Privacy Policy for the formal statement.