Privacy Policy

DisDog is operated from the European Union and is the data controller for the processing described here. Contact for anything privacy-related: [email protected].

When you create an account we keep the strict minimum:

• Email address, to send verification and key recovery codes;
• A hash of your access key. We never store the key itself and there are no passwords;
• Usage counters (searches per day) to apply your plan's quota;
• Your searches: each result is kept for 1 hour so you can reopen it at its own address, then deleted. Only you can see it;
• Payments: plan, amount, status, dates and the OxaPay reference. We never see your wallet or its keys;
• Sessions: a hashed session token, its expiry and your browser's user agent;
• Messages you send through the contact form, with the email you give us to reply;
• Removal requests: the Discord ID to hide and the email that confirmed it.

Legal bases: performance of the contract (account, quota, payments) and our legitimate interest in securing the service (sessions, rate limits).

DisDog shows information about Discord accounts collected from public sources and third-party datasets: usernames and profile data, server memberships, messages posted in public servers, and linked Roblox, guns.lol and FiveM records. We process it on the basis of legitimate interest (security research, moderation, fraud prevention), with safeguards: an acceptable use policy, quotas, and a free opt-out.

If you are the person behind a Discord account, you can object at any time: the removal page hides your Discord ID from every search immediately.

One cookie only: the session cookie that keeps you signed in. It is strictly necessary, so no consent banner is needed. No analytics, no advertising and no tracking cookies. The bot check (ALTCHA) runs on our own servers and doesn't use cookies or third parties.

We don't sell personal data. We use a few processors, only for what they do for us:

• OxaPay: crypto payments (your email is passed so they can send a receipt);
• Our email provider: delivery of verification codes and replies;
• Telegram: contact form messages are forwarded to our private support chat;
• Cloudflare: network protection and delivery of the website;
• Our hosting provider in the EU.

• Account data, usage counters and payment records: as long as the account exists, deleted immediately when you delete it from your account page;
• Verification codes: valid 15 minutes, deleted after 7 days;
• Sessions: up to 30 days, deleted when you log out;
• Saved search results: 1 hour;
• Contact messages: 12 months;
• Removal requests: unconfirmed ones after 7 days; confirmed ones for as long as the removal applies.

Under the GDPR you can request access to your data, its correction or erasure, restrict or object to processing, and receive your data in a portable format. Email [email protected]; we answer within one month. Erasure of your own Discord account's data is instant through the removal page.

You can also lodge a complaint with your data protection authority (in France, the CNIL).

Keys, session tokens and codes are stored as keyed hashes. Traffic is encrypted end to end, the servers only accept connections through Cloudflare, and backups are encrypted with a key that is not stored on the servers.