Visual

Privacy Policy

Last updated: 14 November 2026

This policy explains what Visual stores, why, for how long, and how you can see or delete it. Visual is a service that hosts Discord bots for their owners at https://visual.rocks and in the Visual Discord server.

Who is responsible

[to be added]
[to be added]
Email: [to be added]

For data about your own account and your bots, we are the controller. For data about members of servers where a hosted bot runs, the bot's owner decides what the bot does. We process that data on the owner's behalf and only on their instructions (see the Terms, "Hosting your bot").

What we store and why

About you, as a Visual user

  • Your Discord user ID, which links your bots, your Premium and your support tickets to you.
  • Premium status: until when it runs, whether it comes from a boost, and any codes you redeemed. If you bought Premium through Discord, Discord tells us that you have it. We never see your payment details.
  • Whether your account is blocked from Visual, and why.
  • Support tickets you open in the Visual server, including a transcript when the ticket closes.
  • A log of actions our staff take on your account or bots, so every staff action can be traced.

About your bots

  • The bot's token. It is encrypted (Fernet, AES-128 with HMAC) before it is stored and is only decrypted in memory to log the bot in. Staff can't read it and will never ask for it.
  • The bot's ID, name, prefix, status text, chosen modules, and whether it's running, stopped or suspended.
  • Every setting made for a server where the bot runs: channels, roles, messages, embed designs, custom commands, filters, feeds, panels and similar configuration.

About members of servers where a hosted bot runs

Depending on the modules the server uses, the bot stores:

  • Moderation cases and warnings: member ID, moderator ID, action, reason, time.
  • Leveling: member ID, XP and level.
  • Reminders and AFK status: member ID, the text they entered, the time.
  • Giveaway entries, suggestions and suggestion votes: member ID and what they entered.
  • Ticket records: who opened a ticket and when. Ticket transcripts are posted in that server's own log channel on Discord, not stored by us.
  • Sticky messages, scheduled messages, auto responses and custom command texts that staff of that server wrote.

When you use the website (visual.rocks)

  • When you log in with Discord, we get your Discord user ID, name and avatar, and the list of servers you're in with your permissions there. We use the list only to show which servers you can manage.
  • Your login session is stored on our server for up to 7 days after your last visit. The access token Discord gives us is kept only encrypted inside that session and is revoked when you log out.
  • One cookie keeps you logged in. It's needed for the site to work; we use no tracking, advertising or analytics cookies.
  • Our web server doesn't keep access logs with your IP address. To stop abuse it counts requests per IP address for one minute.

Message content

Hosted bots read messages to answer prefix commands, run automod filters, award XP and write the server's own logs. That content is processed in memory and is not saved in our database. The exceptions are the texts listed above that someone deliberately saves (for example a reminder or a suggestion). snipe keeps the last deleted message of a channel in memory for a short time and loses it on every restart. We don't use any message content to train AI models and we don't sell or share it.

How long we keep it

  • Your account data and your bots: until you delete them.
  • Data of a server: deleted 30 days after the bot leaves that server.
  • Website sessions: up to 7 days after your last visit, or until you log out.
  • Closed support tickets and the staff log: kept as long as needed to handle disputes and abuse.
  • If you are blocked for abuse, we keep your user ID and the reason so the block keeps working.
  • Backups of the database are kept for 14 days, then overwritten. Deleted data disappears from backups within those 14 days.

Your rights

Under the GDPR you can access, correct, export and delete your data, restrict or object to its processing, and complain to a data protection authority.

  • Export: run /data export in the Visual server. You get a file with what we store about you and your bots.
  • Delete: run /data delete. This stops and deletes all your bots and their settings and deletes your account data. It can't be undone.
  • Anything else: open a ticket in the Visual server or email [to be added].

If you are a member of a server that uses a hosted bot: ask that bot's owner or the server's staff first, since they decide what the bot does. You can also open a ticket in the Visual server or email us, and we will help.

Legal basis

  • Running the service you asked for (Art. 6(1)(b) GDPR): your account, your bots and their settings.
  • Our legitimate interest in a safe, working service (Art. 6(1)(f)): staff logs, abuse blocks, backups.
  • For member data in hosted bots, the bot's owner is responsible for having a legal basis. We process it for them (Art. 28 GDPR).

Who else is involved

  • Discord runs the platform the bots work on.
  • Oracle Cloud hosts our servers and database in Frankfurt, Germany (EU).
  • ZAP-Hosting manages the visual.rocks domain (DNS only, no user data).
  • Discord and Stripe handle Premium purchases made through Discord. We only learn that you have Premium.

We don't sell your data and don't use advertising or tracking.

Security

Tokens are encrypted at rest. The database is not reachable from the internet. Access to the servers is limited to the operator by SSH key. Staff tools only show what support needs.

Changes

If this policy changes in an important way, we post it in #updates in the Visual server and change the date at the top.

Contact

[to be added] or a ticket in the Visual server.