Privacy Policy
Last updated September 3, 2026
This policy explains what Brotherworks LLC ("ModDog", "we") does with data when you use the ModDog Discord bot, the dashboard at app.moddogbot.com, or this website. It is written to be accurate rather than reassuring, so where something is kept, this says so.
1The short version
- ModDog reads messages as they arrive, decides about them, and does not keep your chat history.
- A message only persists if it becomes something your moderators need: a flag waiting in the queue, an audit entry, an appeal, or a restorable copy of something ModDog removed. Each of those expires.
- We never use your community's messages to train models. Not ours, not anyone's.
- We do not sell data, and we do not share it for advertising.
- ModDog is text only. It does not analyse or store images.
2Who is responsible for what
The server owner decides what ModDog watches for, how sensitive it is, and what happens when it finds something. They control the purpose. We provide the tool and run the infrastructure, and we act on the owner's configuration.
If you are a member of a server that uses ModDog, the person to ask about why it is configured the way it is, or to ask for your data to be removed, is that server's owner or moderators. They have controls to do it. You can also write to us and we will help.
3What the website collects
This website is served by Cloudflare Pages. Cloudflare processes the usual request information, including your IP address, in order to serve and protect the site.
- Bot protection. The interactive demo is protected by Cloudflare Turnstile, which runs a check in your browser to tell people apart from automated traffic. Cloudflare's handling of that check is described in the Cloudflare Turnstile Privacy Addendum.
- Rate limiting. If you use the demo, we keep a short-lived counter keyed to your IP address so that one visitor cannot exhaust the demo for everyone. It holds no message text tied to you.
- Fonts. Pages load a web font from Google Fonts, which means Google receives your IP address as part of that request.
- No analytics. There are no analytics scripts, no advertising pixels and no tracking cookies on this site.
4What the bot processes in your server
ModDog receives every message in the channels it can see. Almost all of them are classified in memory and never written anywhere. What follows is everything that can outlive that moment.
| What | Contains | Kept for |
|---|---|---|
| Server settings | Your configuration, rules, mod roles and channels | Until you remove ModDog |
| Flag queue | The flagged message, the few messages before it for context, the author's Discord ID, the channel | Until a moderator resolves it. After 30 days the message text, the context and the author's ID are stripped automatically and only counts remain |
| Audit log | Actions taken, and the message text if the owner turned that on | The owner's retention setting, 30 days by default and at most 90 |
| Restorable copies | The body of a message ModDog removed, so it can be put back | 24 to 72 hours, set by the owner |
| Appeals | The message under appeal and what the author wrote in their appeal | Until the appeal is resolved, then the snapshot is dropped |
| Strike records | A salted hash of the user, points and category. No message text, no name | Until they expire under your strike settings or you clear them |
| Tuning examples | Message text a moderator approved as a teaching example, stored with no identity attached | Up to 8 per server, replaced oldest first, and expired after a year. Deletable by the owner at any time |
| Quality statistics | Category, tier, confidence and outcome. No message text and no user identifiers | Rolling window |
Two of these are worth being explicit about. The flag queue holds the author's real Discord ID, and the dashboard resolves it to their username so your moderators know who they are looking at. That is the point of a moderation queue, and it is why the entry expires on its own if nobody attends to it. Tuning examples hold message text with no identity attached, which means we cannot find them by user, which in turn is why they expire and why the owner can delete them directly.
5What the dashboard and billing collect
- Signing in. You sign in with Discord. We store your account, a session record, and which servers you are allowed to manage. The session holds your Discord user ID, encrypted, and expires.
- Billing. Paid plans run through Stripe. We never see or store your card details. We keep your Stripe customer and subscription identifiers, your plan, and your billing period so we know what you are entitled to.
- Notifications. Dashboard notifications are stored encrypted until you clear them.
6What we never do
- We do not train on your messages. Discord's Developer Policy prohibits it and we do not do it. The models ModDog runs are trained on separate data.
- We do not sell personal data, and we do not share it with advertisers or data brokers.
- We do not read your server's messages for our own purposes.
- We do not process images. ModDog is text only.
7Deleting data
A server owner or admin can run /moddog erase against any user, including one who has left. It removes that person from the flag queue, the audit log, the restorable copies, the appeal ledger, any queued work, and the pending notes cache. Strikes are kept by default as anti-abuse data and can be cleared with the same command.
Tuning examples are the one thing that command cannot reach, because they carry no identity to match on. An owner can see and delete them individually in the dashboard, and they expire after a year in any case.
Removing ModDog from a server marks all of that server's stored data for deletion after a short grace period, so an accidental removal followed by a re-add loses nothing.
8Who else processes data
- Discord, which is where the messages come from and where actions are taken.
- Cloudflare, for this website, for bot protection, and to carry traffic to the dashboard.
- Stripe, for payments.
- Google Fonts, which receives your IP address when this website loads its font.
The classification models run on our own hardware in the United States. Message content is not sent to any third-party AI service.
9Security, stated plainly
Server settings, the audit log, the flag queue, appeals and notifications are encrypted at rest with AES-256-GCM, under a key derived separately for each server. Backups are encrypted too.
To be clear about what that does and does not mean: we hold the keys. The encryption protects your data if a disk or a backup goes missing. It is not end-to-end, and it does not make it technically impossible for us to read what is stored. We do not read it, and access is limited to what running the service requires, but you should hold us to a promise rather than to mathematics.
If the key protecting your data is lost, that data is unrecoverable. There is no backdoor.
10Children
ModDog is not directed at children. You must be old enough to hold a Discord account under Discord's own terms. We do not knowingly collect data from anyone below that age, and if we learn we have, we delete it.
11Where ModDog is offered
ModDog is offered in the United States only. We do not market it or make it available elsewhere, and prices are in US dollars only. We reserve the right to end service to a server we determine to be outside the regions we support. See the Terms of Service.
12Changes to this policy
We may update this policy. The date at the top changes when we do, and for material changes we will notify account holders through the dashboard before they take effect.
13Contact
Brotherworks LLC, 8401 Mayland Dr, Suite S, Richmond, VA 23294. Email support@moddogbot.com. If you are a member of a server using ModDog and want your data removed, contact that server's owner or moderators, or write to us and we will help.