📝 What changed on October 10, 2026
Gallery images: where they're stored (Cloudflare R2) and that anyone with a link can see them
Everything else we keep, spelled out: sign-in sessions, Activity logs, feedback reports, agent login, achievements, and page-view counts
What your bot processes while it runs — messages and images — and what it doesn't keep
What happens to a bot's data when you delete it
Kit, our AI bot builder: what's sent to our AI provider (OpenAI) when you ask Kit for help, and the Soul Crystal records we keep
These changes take effect on October 17, 2026. Until then, the previous policy applies.
✨ The short version
We use your Discord account to log you in — ID, username, display name, avatar, and email.
Builder profiles are public by default. You can hide your profile, achievements, or individual published bots at any time.
We store your Bot Kits and your encrypted Discord bot token to run your bot.
Gallery images live on Cloudflare R2 behind public links — anyone with a link can see that image.
If you ask Kit, our AI builder, for help, your request and that bot's kit go to our AI provider, OpenAI. Your bot token and Vault rows never do.
No ads, no third-party analytics, and we never sell your data.
Delete your account and your data is gone within 30 days.
But please do read the details below.
Where your data lives
Your Discord account
User ID, username, display name, avatar, email — sign-in only
Your bot logic
Bot Kit JSON — versioned, owned by you, exportable
Your Discord bot token
AES-256-GCM at rest — never in Kit JSON, exports, or logs
Bot runtime data
Vault tables your flows save to, plus an Activity log (last 500 entries) — per-bot, isolated
Gallery images
Images you upload to a bot's Gallery — served from public links
Requests to Kit
Only when you ask Kit: your words + that bot's kit. Never your bot token or Vault rows
Deploy signals
Pub/sub + cached Kit JSON — deploy signals only, not your bot token
What we collect
💡 Only what we need to give you an account and run your bots.
Account information
When you sign in with Discord (we ask only for the identify and email scopes), we receive your Discord user ID, username, display name, avatar, and email address. We use this to create and identify your Kitcord account and to contact you about important service changes.
To keep you signed in, we store a session record — including the IP address and browser user agent it was created from, for security — along with the Discord sign-in tokens our login system needs.
Public builder profile
Your builder profile is public by default and may show your display name, Discord username, avatar, account age, unlocked achievements, counts of your bots, spells, and triggers, and summary cards for published bots. Draft bot content, email addresses, Discord application IDs, and bot secrets are never shown. Profile, achievement, and individual bot visibility can be changed from your profile settings.
Bot configuration
We store your Bot Kit definitions(the JSON files describing your bot's flows and logic), your bot's Discord application ID, your encrypted Discord bot token (from the Developer Portal — not your login), and optionally an interactions public key for interaction-only bots. The bot token is encrypted with AES-256-GCM before being written to our database and is never returned to any client interface.
Bot runtime data
Each bot has an isolated SQLite database file on our servers. It holds the Vault tables your flows save to (leaderboard scores, counters, anything your bot stores) and an Activity log of recent errors, warnings, and Log pieces — only the last 500 entries per bot are kept. This data belongs to your bot, and a full export ZIP with your SQLite snapshot is available from bot Settings.
Gallery images
If you use The Darkroom's Gallery, we store the images you upload along with their label, tags, size, and dimensions. The files are kept on Cloudflare R2 and served from public links so Discord can display them — anyone who has an image's link can view it.
Usage / energy data
We track per-bot ⚡ energy consumption (flow runs, piece types, hourly buckets, gateway upkeep for Full Bots, and Gallery storage) to power your usage dashboard and enforce your energy balance, plus a record of any energy codes you redeem. We do not record the content of messages your bot sends or receives for analytics.
Kit and Soul Crystals
When you ask Kit (our AI bot builder) for help, we keep the conversation — what you asked, what Kit answered, and the changes it proposed — so you can review, bind, or undo them. Snapshots of your kit taken for undo are kept for your 30 most recent requests. We also keep a ledger of the Soul Crystals you were given and spent, including how many AI tokens each request used.
Feedback, agent sign-in, and progress
If you send a report from the dashboard, we store its category, title, description, the page you were on, and the bot it's about (if any). If you use agent login, we store your email and a short-lived one-time code, which Kitcord's own Discord bot sends to your DMs. We also keep which achievements you've unlocked and which tutorial chapters you've finished.
Site analytics
We count views of our pages and tools per day — just the page and a number, with no names, IDs, or cookies — to learn which docs and tools are useful. We don't use any third-party analytics.
What we never collect
Discord message content stored for marketing or analytics
Personal data about your Discord server members (unless your bot saves it to its own Vault)
Browsing behaviour outside of Kitcord
Third-party tracking or advertising cookies
Anything beyond what's needed to run the Service
Your bot may process messages in memory when your flows need them to respond — that's your bot working, not us snooping. We don't sell your data.
What your bot processes while it runs
💡 Your bot sees what Discord sends it. Kitcord only keeps what your flows save.
To run your flows, our Engine receives what Discord sends your bot: who used a spell and what they typed into it, button clicks and form answers, and — for Full Bots with message triggers — the text of messages in your server. This is processed in memory while the flow runs and isn't stored by Kitcord, unless your flow saves it to the bot's Vault or writes it to its Activity log.
The Darkroom downloads the images your flows ask for — avatars, server icons, attachments, and links — so it can read or edit them. They're held in memory (cached for at most 10 minutes to avoid downloading the same picture twice) and never written to disk. Only images you upload to the Gallery are stored.
How we use your data
💡 To run your account, host your bots, and fix things when they break.
We use your data exclusively to:
Authenticate your account via Discord OAuth (or a one-time agent login code)
Run your bots on Discord on your behalf
Meter energy usage and enforce your energy balance
Show your public builder profile — unless you hide it
Track your achievements and tutorial progress
Send you essential service notifications (never marketing without consent)
Answer your reports, debug issues, and investigate potential abuse — only when needed
How we protect your data
💡 Encryption in transit and at rest. Each bot's data is isolated from every other bot.
Encrypted at rest with AES-256-GCM before being written to our database. Never included in Kit JSON, exports, or any API response.
User accounts, bot metadata, and kit versions stored in MongoDB Atlas. At-rest encryption enabled at the cluster level.
Each bot's runtime database is a separate file on our servers, inaccessible to other bots or users.
Stored on Cloudflare R2 under unguessable file names and served over HTTPS. They're public to anyone who has the link.
Pub/sub bridge between app and engine. Deploy signals and hot-cached Kit JSON pass through — not your bot token.
All connections between your browser, our app, and our services use TLS encryption.
Who we share your data with
💡 Only the services we need to run Kitcord. We don't sell it. Ever.
Discord
Required to operateTo connect your bot to Discord and handle interactions, and to send agent-login codes from Kitcord's own bot. Without this, your bot doesn't work.
MongoDB Atlas
Required to operateOur database provider, where user accounts, Bot Kits, and encrypted credentials are stored.
Cloudflare R2
Required to operateStores the images you upload to a bot's Gallery and serves them so Discord can display them.
OpenAI
Powers Kit, our AI bot builder — only when you ask Kit for help. We send your request, the recent messages in that conversation, and the bot's kit (its spells, triggers, pieces and Vault table layout), with response storage switched off. Never your bot token, Vault rows, or Gallery images.
Our hosting infrastructure
Required to operateThe servers that run kitcord-engine (our bot runtime) and store SQLite files. Self-operated.
Law enforcement
Only when we receive a valid legal request and are required by law to comply.
We don't use third-party analytics or advertising services, and we don't take payments yet. If that changes, this list will say so first.
Export & data portability
You can download your Bot Kit JSON anytime, for free — no secrets inside. A full self-host ZIP (Kit + SQLite snapshot + Mini Engine) is available from Settings; export stays free. Mini Engine use is subject to LICENSE.md in the bundle.
This is a core commitment, not a premium feature. We believe you should always be able to leave with what you built, whether you've ever paid us or not.
Data retention and deletion
💡 Active account = data kept. Deleted account = data gone within 30 days.
We keep your data for as long as your account is active. If you delete your account, we will delete your user record, your public profile, all associated Bot Kits, Gallery images, feedback reports, achievements, and all runtime SQLite files within 30 days.
Deleting a single bot removes its Kit versions, its encrypted token, and its Gallery images straight away. Its runtime database (Vault tables and Activity log) is cleaned up when you delete your account — or sooner, if you ask us.
We may retain aggregated, non-identifying usage statistics (like daily page-view counts) for internal analytics for up to 12 months.
To request deletion of your account and data, email privacy@kitcord.com.
Children
💡 Kitcord is not for users under 13.
Kitcord is not directed at children under 13 years of age (or the minimum digital consent age in your jurisdiction, if higher). We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us at privacy@kitcord.com and we will delete it promptly.
Changes to this policy
💡 We'll give you 7 days notice before any material change takes effect.
If we make material changes to this policy — changes that affect what we collect, how we use it, or who we share it with — we will notify you via email and/or an in-app banner at least 7 days before they take effect.
Minor clarifications (fixing typos, improving plain-English explanations without changing the underlying commitments) may be made without notice.
Privacy questions?
Data requests, deletion, questions about what we store — we're a real team and we'll respond.