A shared conversation.
People with access to the participating Discord channels can read forwarded messages. Images hosted by linker can be opened by anyone who has their link. Treat Global Chat as a public conversation.
Safety & data
What happens to your information?
See what linker stores, who can access it, how it is protected, and what happens when you delete your bot profile.
THE SHORT ANSWERS
Who can see what?
Your account information.
You must sign in to see your account data. Other dashboard users cannot view it. People who own or help manage a server can see its supported settings after Discord confirms their permission.
The team can review them.
Support conversations and reports are available to the relevant linker team members. The operator also has access to the bot host and Cloudflare account for maintenance. These records are not public.
WHAT IS SAVED
Different information has different purposes.
Discord and Cloudflare keep their own service records under their policies. The periods below describe linker's own feature storage.
Information
Why it is needed
Where and how long
Your account and sign-in
Your Discord user ID, names, profile picture reference, and server list identify you. Sign-in records let you stay logged in and refresh your server access.
Stored on Cloudflare. Discord access and refresh tokens are additionally encrypted by linker. Deleting your bot profile does not delete these website sign-in records.
Your bot profile
Privacy choices, roles, activity statistics, and other values used by the features you choose.
Stored on the bot's phone and copied to the dashboard as needed. You can request deletion through Your Data, or use /profile and choose Delete my data.
Forwarded message records
The author's Discord user ID identifies the sender for moderation. Original and forwarded message IDs, channel IDs, and timestamps let moderators remove the copies of one message across servers. This record contains no message text.
Kept on the bot's phone for seven days. Expired records are removed during forwarding or periodic cleanup while the bot runs, and on startup. They are not copied to Cloudflare.
Global Chat images
Uploads, supported stickers, and public-link preview images are copied so they remain usable after the original post is removed. Supported animated APNG and Lottie stickers are converted to GIF. Up to four images per message, up to 25 MB each.
Hosted on Cloudflare with automatic expiry after fourteen days. A saved or downloaded copy elsewhere can remain. Expiry does not delete the Discord message.
Custom emojis
linker may copy an emoji from another server into its own Discord collection so it can display in forwarded messages. Recognized FakeNitro image links are treated as inline emojis, including animated ones, rather than large image uploads.
Stored by Discord for reuse. The copied emoji may be labelled as belonging to linker. It does not share the image-attachment expiry.
Custom message layouts
The layout fields, server and submitting administrator IDs, request times, moderator decisions and IDs, reasons, and DM delivery status let the team review custom changes for Premium servers before they appear in Global Chat. Server permissions and Premium eligibility are checked before custom changes are submitted, approved, and used. Restoring the standard layout needs neither Premium nor a review and cancels pending layout requests.
Requests pass through Cloudflare and are saved on the bot. The current layout and latest request are kept while needed. Older finalized or superseded bot requests are cleaned after 30 days. Private Discord review messages have separate retention.
Bans and mutes
The restriction, reason, and expiry let linker enforce Global Chat rules.
Stored on the bot and in the dashboard. Active restrictions remain when personal profile data is deleted.
Server settings and vote rewards
Chosen channels, message styles, and server information configure linker. top.gg sends a voting user ID; the Voter reward lasts twelve hours and survives bot restarts.
Stored on the bot and Cloudflare as required. The vote reward's twelve-hour expiry is separate from storage of the vote receipt.
ENCRYPTION
How your information is protected.
Encryption makes stored information or traffic harder to read without the right access. It does not mean that only you can read everything.
The website uses HTTPS.
The secure connection protects information travelling between your browser and the website. Cloudflare also protects connections to its dashboard database.
The dashboard database is encrypted.
Cloudflare automatically encrypts its D1 databases. linker also encrypts Discord access and refresh tokens before saving them. Authorized operators can still access data for maintenance. Cloudflare's database security explanation ↗
Bot files are ordinary files.
linker does not add separate encryption to its local data files. Someone with access to the phone's bot folder can read them. Protection of the device and its accounts matters.
LOGS & OTHER SERVICES
What gets recorded?
Global Chat message tracking lasts seven days. Server logs use the deletion period chosen by the server administrator, up to 90 days. Network incident, support, and service logs have separate retention.
Errors, reports, and support.
The bot records startup, connection problems, command errors, and website update failures. Console output is also sent to a private Discord log channel. Reports and blocked-message logs can include the message text, detected blocked term, user, channel, and server. Support staff can read support conversations.
Only in the originating server.
When an administrator enables /log setup, linker records message edits and deletions, member joins and leaves, and its own punishments in a private staff forum. Entries can contain user and channel IDs, cached message text, attachment links, staff, and reasons. Authorized staff with access to the forum can read them. These log contents are not uploaded to Cloudflare, another Discord server, or the console. The bot saves forum and post IDs and the deletion period locally. To let administrators configure logs on the dashboard, Cloudflare receives setup information, available forums, and enabled module names. It does not receive the log contents.
A deletion period is required because logs may preserve deleted messages and personal information. Automatic expiry reduces how long staff can access these records. Entries expire after the administrator-selected period of one minute to 90 days. Cleanup runs every five minutes while the bot is online; downtime, backlogs, or permission failures can delay deletion. Post headers and staff replies remain. Events missed while offline and uncached original text cannot be recovered.
Your account and conversations.
Discord handles login, server access, commands, forwarded messages, emojis, and support conversations. Its own records may include account, device, and connection information. Discord decides its own retention under its privacy policy.
Website traffic and storage.
Cloudflare hosts the site, dashboard data, and temporary images. Its systems may record IP addresses, requested pages, timing, errors, and database usage for operating and protecting those services.
Votes, assets, and external links.
top.gg processes votes. GitLab handles source and deployments. Image, font, and other asset providers can receive ordinary request information when their content loads. If linker fetches a public-link preview, that website receives a request from the bot. Each provider has its own policies.
YOUR CONTROLS
What does deleting bot data do?
It removes personal bot profile fields, settings, statistics, and acceptance of the chat rules after the bot processes your request. It keeps active bans and mutes. It does not erase messages already on Discord, incident reports, support conversations, or your website sign-in account.
01
View before deletingYour Data shows the bot information currently available about your own account.
02
Wait for the botIf linker is offline, website changes and deletion requests wait until it reconnects.
03
Ask about other recordsContact the linker team for questions or requests about records outside bot-profile deletion.
SECURITY CHECKS
Access is checked by the service.
Changing what a button looks like in your browser does not grant permission. linker checks your sign-in and server permissions before accepting protected requests.
Sign-in and changes.
Login responses must match a short-lived request from your browser. Sensitive changes have additional checks to reject requests from other websites.
Moderation actions.
Deleting forwarded messages and applying Global Chat restrictions require linker's Moderator or Owner role. Ordinary server administrator status does not grant that network role.
Links and usage limits.
Media downloads reject private network destinations and check redirects. Repeated dashboard requests are limited to reduce misuse. Free hosting still has daily limits; high traffic can affect availability.
Want the technical details?
The site uses HTTPS, protected sign-in cookies, encrypted Discord tokens, request checks, and fresh Discord permission verification. This page summarizes the implementation; the Privacy Policy and data-rights notice explain formal requests.