We store the minimum Discord identity needed to authorize access and operate community reports. Saved alert ZIPs remain private and are never returned by member APIs.
Discord OAuth tokens are used only during sign-in and are not exposed to browser JavaScript or stored in local storage. The existing bot token and all database credentials remain server-side.
We use strictly necessary, secure cookies to keep members signed in for up to 30 days, protect forms against cross-site requests, and verify Discord access. We do not use these necessary cookies for advertising or cross-site tracking.
We use Google Analytics to understand page visits and general website usage. Analytics runs without analytics or advertising cookie storage, Google signals, or advertising personalization. We do not send your Discord identity, report contents, saved ZIP code, or the encrypted IP stored in your account record.
For account security and abuse prevention, successful sign-ins record the connecting IP address and an approximate city, state or region, and country when available. IP addresses are encrypted in the database and visible only to administrators. Recent sign-in records are automatically removed after 90 days; the first and latest sign-in details remain with the member account for security review. IP-based locations can be inaccurate and are not treated as precise physical locations.
For account security, sign-ins may be marked for staff review when the network or approximate region changes unexpectedly or one network is used by several accounts. These signals do not automatically ban a member. Older website sessions are automatically ended when the active-session limit is reached.
Members may receive a Discord direct message after a website sign-in and can disable these messages from their settings. New-account and unusual sign-in alerts, including the connecting IP address and approximate location, may also be delivered to a private staff security channel. Automated reporting and voting patterns may be flagged for staff review, but these alerts do not automatically suspend or ban a member.
Moderation and authorization events are retained for safety and auditing. Historical restock reports are not automatically deleted.