file 02 / 04 · legal register
Privacy Policy.
doc/privacylast updated 2026-05-25lang en
1. Information We Collect
Through Discord OAuth we only receive:
- Discord user ID
- Username + global name
- Avatar URL
- Email (for sign-in)
We never access your Discord servers, messages, or DMs.
2. How We Use Data
- Account authentication and session management
- Tier tracking (free/premium)
- Query quota (5/day for free)
- Audit log (who queried what — for security)
3. Data Retention
Data is kept while your account is active. Upon deletion request, all data is removed within 30 days. Audit logs are auto-purged after 90 days (GDPR compliance).
4. Third-Party Sharing
Your data is never shared with third parties except under legal obligation — and you will be notified in such cases.
5. Your Rights
- Request access to your data (via Discord contact)
- Correction / deletion of your data
- Object to processing
- Data portability (JSON export)
6. Security
All traffic is TLS 1.3+. Sessions are httpOnly + secure cookie. CSRF, helmet, rate-limit active. We don't store passwords (OAuth-only). VDS hardened with fail2ban + UFW + daily updates.
7. Records Held About You Even If You Are Not a User
The sections above describe account holders. Argos also holds records about accounts that are publicly visible in monitored communities — those people do not need an Argos account. What is held:
- Discord ID, username and name history, avatar history
- Memberships in monitored servers and the roles carried there
- Ban records shared by co-operating servers
- Ticket metadata (who, when, which category — not the contents)
- Signals extracted from public messages in monitored servers (invite links, keywords)
- FiveM connection identifiers (Steam, license, Xbox Live and similar)
IP addresses and hardware identifiers that arrive with ban records are never sent to the client — they are only counted. We have no access to your private messages, your DMs, or servers we do not monitor, and nothing is scanned on your computer.
The basis for this processing is legitimate interest: letting server owners recognise people recorded as harmful by other communities. If you believe a record about you is wrong, you can contest it at /ban-appeal; the request is routed to whoever filed the record and reviewed.
8. International Transfers
The infrastructure is hosted abroad: content delivery and attack filtering on Cloudflare, web hosting on Hostinger, and the application server on a virtual server abroad. Authentication runs through Discord. Using the service necessarily transfers data to the countries these providers operate in. If you live in Turkey, our KVKK notice also applies to you.
9. Age Requirement
You sign in to Argos with a Discord account, so you must meet Discord’s own minimum age (13 in most countries, higher in some). We do not knowingly offer Argos to anyone below that age. If we learn an account belongs to someone under it, we delete the record.
10. Changes to This Policy
This policy may be updated as the service changes. Meaningful changes are announced in the announcements channel of our Discord community server. Continuing to use the service after a change means you accept the current text.
end of recorddoc/privacy