Privacy Policy
Last updated: March 2, 2026
This privacy policy explains what data unfurl ("the bot") collects, how it's used, and your options regarding that data.
What we collect
When the bot processes a link
When someone posts a supported social media link in a channel the bot can see, we log:
- The original URL
- Which platform was detected (e.g. Twitter, Instagram)
- What cleaning was applied (tracking removal, AMP unwrapping, etc.)
- Which tracking parameters were found
- The Discord user ID and username of the person who posted the link
- The guild ID, channel ID, and channel name
- A timestamp
We do not store message content. Only URLs that match supported platforms are extracted and logged.
Server information
When the bot joins a server, we store:
- Guild ID, name, icon, and owner ID
- Member count and server features
- Channel structure (IDs, names, types)
- Server settings configured through
/settings
Reactions and DM forwarding
If DM forwarding is enabled (on by default), reacting to a bot message sends you the cleaned URLs via DM. We log the user ID, which emoji was used, and whether the DM was delivered successfully.
Error and performance data
We log errors (with context like guild ID and channel ID) and basic system metrics like memory usage and response times. These are used for debugging and keeping the bot running smoothly.
What we don't collect
- Message content (only URLs from supported platforms)
- Direct messages
- Data from channels where the bot doesn't process links
- Voice or media data
- Passwords, tokens, or authentication data
Third-party services
The bot may send URLs to these external services:
- Google Safe Browsing API - to check URLs for malware and phishing (paid tier only)
- Short URL services - to expand shortened links by following redirects (paid tier only)
No user data beyond the URL itself is shared with these services.
Data retention
| Data type | Retention |
|---|---|
| URL replacement logs | Indefinite |
| Server settings | Indefinite |
| Aggregated statistics | Indefinite |
| Error logs | 30 days (auto-deleted) |
| Performance metrics | 7 days (auto-deleted) |
When the bot leaves a server
If the bot is removed from your server, we mark the server as inactive and stop collecting new data. Historical logs and statistics are retained. If you want all data associated with your server deleted, contact us (see below).
Your rights
You can:
- Remove the bot at any time to stop all data collection
- Disable specific features (DM forwarding, embed suppression, individual platforms) via
/settings - Use channel whitelisting/blacklisting to control where the bot operates
- Request deletion of your server's data by contacting us
Data security
Data is stored in a managed database with encryption at rest. Access is restricted to the bot operator. We don't sell, share, or monetize user data.
Children's privacy
The bot is not directed at users under 13. We don't knowingly collect data from children. If you believe a child's data has been collected, contact us for removal.
Changes to this policy
We may update this policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the bot after changes constitutes acceptance.
Contact
For questions, data deletion requests, or concerns about this policy, reach out via the bot's support server or email privacy@unfurl.bot.