Privacy Policy

What AuditCore does

AuditCore scans Discord server configuration to help server owners identify risky permissions, overpowered bot roles, dangerous webhooks, unexpected staff permissions, and channel-specific permission overwrites.

Information the bot may access

To perform audits, AuditCore may access server roles, role permission values, channel names, channel permission overwrites, webhook metadata, member IDs, bot account IDs, and audit-related server configuration. This information is used to create security findings and explain why a permission or webhook may be risky.

Information stored by AuditCore

AuditCore stores server configuration needed for its features, such as the server ID and trusted role IDs configured by server administrators. Trusted roles are stored so future audits can avoid reporting expected permissions as unexpected risks.

Webhook handling

AuditCore checks webhook metadata to identify old or unclear webhooks. The bot should not store webhook URLs or webhook tokens. Webhook access is used only to help server owners find risky or forgotten posting access.

Message content

AuditCore is designed as a permission and configuration auditor, not a message-scanning moderation bot. It does not need to store normal message content for the audit features described on this site.

Why this data is used

The data is used to generate security reports, export audit findings, remember trusted role settings, and help server owners understand which roles, bots, users, channels, or webhooks may create risk.

Data deletion

Server owners can request deletion of stored AuditCore configuration for their server. Removing the bot from a server may stop future collection, but stored configuration may remain until deleted.

Contact

For privacy questions, contact the AuditCore owner through the official support server or the contact method listed on the bot profile.