Skip to content
Ceceli

Privacy Policy

Last updated 7 November 2026

This policy explains what Ceceli collects when it runs in a Discord server or when you sign in to the dashboard, and what it does not.

What Ceceli stores

  • Dashboard sign-in: your Discord user ID, username, avatar hash, and the list of servers you belong to with your permissions in them (from Discord OAuth2, scopes identify and guilds). Sessions expire after 7 days. We do not request your email address.
  • Server configuration: the settings administrators choose, plus an audit log of who changed what.
  • Moderation records: cases (user ID, moderator ID, reason, time), staff notes, appeals and honeypot events, which include up to 500 characters of the triggering message.
  • Engagement data: XP and level per member with their display name, the name you last gave your temporary voice room in a server, reminders, giveaway entries, poll and suggestion votes, ticket records.
  • Your birthday: the day and month you give with /birthday, never the year. It is kept once for your account, not once per server, so Ceceli can greet you in every server you share with her that has birthdays switched on. You can limit that to the servers where you set it. Ceceli also keeps which servers those are, and the last year each server greeted you.
  • Statistics: daily counts of messages, joins, leaves and voice minutes, per-channel message counts and an hour-of-week activity grid. These are counts only; message content is not kept for statistics.
  • Web verification (only in servers that turn it on): when you verify on Ceceli's website, Ceceli stores one-way fingerprints (keyed hashes) of your IP address, your network range and your browser, together with your Discord ID, username, account age, locale and whether you use two-factor authentication. The fingerprints cannot be turned back into your address. Inside the server they are used to detect ban evasion and are deleted after the period the server chooses (7 to 730 days, 180 by default). They are also added to Ceceli's own cross-server record described below, which keeps them for 12 months.
  • Ceceli's cross-server record: Ceceli keeps one internal record per Discord account, shared by every server she is in, so that a bad actor removed from one community can be recognised in the next. It holds your Discord ID, usernames, account age, the servers you have been seen in and when, the one-way fingerprints above, and a short list of events (bans, scam messages caught, honeypot hits, raid joins) with a few words of detail. This record is internal to Ceceli and is never shown to server staff. Staff only ever see an anonymous risk band (low, medium or high) for an account, never another server's name, notes or reasons. Events are deleted after 24 months. Server owners can switch off sharing their bans and scam hits into this record in the Shield settings.
  • Reports and confessions: who filed a report or confession is stored so staff can handle abuse. Revealing a confession author is logged.
  • Account preferences: your dashboard appearance and server folders, so they follow you between devices. You can download or delete them from Account settings.
  • Backups: server structure (roles, channels, permission overwrites, emoji, stickers) and Ceceli's settings, plus the Discord IDs of the members at that time (IDs only). Never message history. The ID list exists so that, if a server is deleted or taken over and its owner has switched recovery on, Ceceli can send each member one message with the new invite, slowly and once. Ceceli never uses it for anything else.

What Ceceli reads but does not keep

To run automod, commands, leveling and logging, Ceceli receives message content in real time. Content is evaluated in memory and discarded, except where a feature above says otherwise. If an administrator enables logging, edited and deleted message text is posted to the log channel they choose, which is inside their Discord server.

Why

Only to provide the features a server administrator turns on. We do not sell data, show ads, or build profiles for advertising.

Where it lives and who can see it

Data is stored in a managed PostgreSQL database. Server data is isolated per server: dashboard access requires Manage Server or Administrator permission in that server, checked on every request. The operator of the hosting deployment can access the database.

Retention

Server data is kept while Ceceli is in the server. When Ceceli is removed, an administrator can ask for the server's data to be deleted; sessions expire automatically after 7 days. Automatic backups follow the retention count set in the dashboard.

Your choices

  • Ask a server administrator or contact us to remove your XP, notes or other records.
  • Change your birthday with /birthday set, keep it to the servers where you set it with /birthday private, or delete it everywhere with /birthday remove.
  • Revoke the dashboard's access at any time in Discord, under Settings, Authorized Apps.

Children

Ceceli is not directed at children under the minimum age required by Discord, and we do not knowingly collect their data.

Contact

Privacy requests: use the contact details on Ceceli's Discord application page.

This document describes how Ceceli works as built. Have it reviewed for your jurisdiction (for example GDPR) before launch.