Privacy Policy

The controller for the processing of personal data in connection with Stage (the Discord bot, the dashboard and this website) is:

[LEGAL_NAME not set]
[LEGAL_CITY not set]
E-mail: [LEGAL_EMAIL not set]

Stage is a private project and is not affiliated with Discord Inc.

When you open this website, our hosting provider technically processes your IP address, the requested page, the time and your browser's user agent so the page can be delivered and attacks can be detected (Art. 6(1)(f) GDPR — legitimate interest in a secure, working service).

We do not use analytics, advertising, tracking pixels or social media plugins. Fonts, scripts and images of this website are served from our own server.

Inside the dashboard, Discord profile pictures and server icons are loaded directly from Discord's image server (cdn.discordapp.com), so your browser connects to Discord and transmits your IP address there — just like when you use Discord itself.

We only set cookies that are strictly necessary for signing in. No consent banner is required for these, and there are no other cookies.

• stage_oauth_state — protects the Discord sign-in against forgery. Deleted after 10 minutes.
• stage_session — keeps you signed in to the dashboard. HttpOnly, expires after 7 days or when you sign out.

The dashboard uses Discord OAuth2 with the scopes identify and guilds. We receive and store your Discord user ID, username, display name and avatar. Your server list is fetched from Discord when you use the dashboard to decide which servers you may manage; it is only kept briefly in memory. Your e-mail address is never requested.

The OAuth access and refresh tokens are stored encrypted (AES-256-GCM) and only used to talk to Discord on your behalf. Legal basis: Art. 6(1)(b) GDPR — providing the dashboard you asked to use.

When a server adds Stage, we process the following to provide the bot's features:

• Server data: server ID, name, icon, owner ID, the server's Stage settings, configured channels and authorized roles, and banner images uploaded by server staff.
• Stage sessions: for members who are in a configured voice channel while a session is live — Discord user ID, username, avatar, join and leave times, whether they muted themselves, raised hands, speaker times and the mutes the bot set.
• Audit log: actions taken in Stage (e.g. who accepted or removed a speaker), including the names and IDs of the people involved.

Stage never records, listens to or stores audio, and it does not read message content in the servers it is used in. Legal basis: Art. 6(1)(b) GDPR for the operating server, and Art. 6(1)(f) GDPR (legitimate interest of the server and its members in a moderated, orderly voice session and a traceable audit log) for the members of that server.

If you open a ticket on our support server, we store the ticket details you enter (category, description, optional server ID) together with your Discord ID and username. When a ticket is closed, a transcript of the ticket channel is posted to our private staff log channel and sent to you by direct message. Legal basis: Art. 6(1)(b) and (f) GDPR — answering your request.

An automated Stage Assistant may reply in your ticket with answers from our documentation. These suggestions are generated on our own server; no ticket content is sent to third parties for this.

• Railway Corporation (USA) — hosting of the website, bot and database, as our processor. Data transfers to the USA are based on the EU Standard Contractual Clauses included in Railway's data processing agreement.
• Discord Inc. (USA) — Stage runs on Discord. Everything you do on Discord is also subject to Discord's Privacy Policy.

We never sell personal data and do not share it with advertisers.

• Ended Stage sessions (participants, speakers, raised hands): deleted 90 days after the session ended.
• Audit log entries: deleted after 90 days.
• Server data: deleted 30 days after Stage was removed from the server.
• Closed support tickets: deleted after 180 days. Transcripts in Discord stay as long as the respective message exists.
• Dashboard sign-ins: sessions expire after 7 days; your account record is deleted after 90 days without a sign-in.
• You can delete your dashboard account at any time from the dashboard (your avatar menu → Delete my data).

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). Write to us at [LEGAL_EMAIL not set] — please include your Discord user ID so we can find your data.

You can also lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Stage can only be used through Discord. You must meet Discord's minimum age requirement for your country to use Stage.

We update this policy when Stage changes. The date at the top always shows the current version.