This policy explains what data BumpMyServer (“the bot”) stores and why.
Data we store
About servers that use /setup:
- server ID, chosen bump channel ID and invite channel ID
- your ad: description, category, language, banner URL and colour
- the ad’s invite code
- bump history (time, delivery counts) and reminder settings
About users:
- the user ID of whoever runs
/bump, plus their bump points, for leaderboards - the user ID and reason of anyone who reports an ad
We don’t track individual members who join through ads. /stats only reads the total use count of the ad invite. We don’t read or store message content, and we don’t store DMs or personal information beyond Discord IDs.
How we use it
Only to run the bot: delivering ads, enforcing cooldowns, reminders, stats, leaderboards and moderation. We never sell or share data with advertisers, data brokers or anyone else.
What other servers see
Ads are public. Your server name, icon, member and online counts, ad text, banner and invite are shown in other servers’ bump channels.
The website and dashboard
When you log in with Discord, we ask for the identify and guilds scopes only. We store:
- your Discord ID, display name and avatar
- the list of servers you can manage (servers you’re only a member of are discarded straight away)
- your Discord access token, encrypted, so we can re-check your permissions. It’s deleted and revoked when you log out.
We use one cookie, a session cookie that keeps you logged in (7 days, HttpOnly, Secure). There are no analytics, ads, trackers or third-party scripts on the site.
Servers only appear in the public directory if a server manager turns on website listing in the dashboard. It’s off by default. Clicks on a listed server’s Join button are counted as an anonymous total; nothing about the visitor is stored.
You can download a server’s data, delete a server’s data, or delete your own data at any time from the dashboard.
Retention and deletion
Data is kept while the bot is in your server. If you remove the bot, your server stops receiving and sending ads. Login sessions expire after 7 days. You can delete your server’s data or your own data instantly from the dashboard, or ask us in the support server and we’ll remove it within 30 days.
Changes
We may update this policy. The date at the top shows the latest version.