Privacy Policy

Last updated: 2026-10-02

VC Servers is run by Jester Demi LLC ("we"), a US company, which decides how your personal data is used (the "controller"). This page explains what we collect, why, and what you can do about it. Questions: [email protected].

What we collect

• Account info: your username, email address and password. Passwords are stored as a one-way hash, so nobody (including us) can read them.
• Discord (if you use it): when you log in with Discord we get your Discord ID, username, avatar and email. When you list a server we also read the list of Discord servers you manage, only to let you pick one. That list is kept in your login session for up to 30 minutes, never in our database.
• Our Discord bot: in servers that add it, the bot sees the server's name, icon and member and online counts so the listing stays up to date. It doesn't read messages.
• Bumps: when someone uses /bump in Discord, our bot records their Discord ID and display name with the time, to enforce cooldowns and show bump leaderboards. Bumps from the website are linked to your account. Automatic VC Plus bumps aren't linked to anyone.
• Server listings: whatever you put in a listing (name, address, description, tags, links). Listings are public once approved. We also check listed servers regularly to show whether they're online and how many people are on.
• Query API keys (optional): if you add one to get verified, or to claim a TeamSpeak server, it's stored encrypted and only used to read the server's name and user count and to confirm you control it.
• Two-factor login (optional): your authenticator secret is stored encrypted, and recovery codes are stored as hashes.
• Votes and reports you make.
• Emojis you submit: the image, its name and tags, and that you sent it. Approved emojis are public and show your username. Emojis waiting for review stay private, and rejected ones are deleted.
• Custom bot look (Plus): the name, bio, picture and banner you pick for the VC Servers bot in your Discord server. We send them to Discord so the bot shows them in your server, and the pictures are stored on our site. They're deleted within a day after you change them or delete the listing or your account.
• Downtime emails (VC Plus, TeamSpeak): if your server is unreachable for 10 minutes we email you, and again when it's back. You can turn this off in your server's Share kit.
• Server logs: like any website, our host and Cloudflare record IP addresses, browser details and the pages loaded, including when someone opens a short join link or a status banner shown on another site. These logs are used for security and kept for a short time.
• Payments (only if you buy a paid feature): Stripe handles your card details, and we never see them. We keep your Stripe customer ID, what you bought, the amount and the date.
• Counts, not people: we count page views and join clicks per server per day, and clicks on sponsor and partner boxes. These are plain totals, not linked to you.
• Security data: we keep a scrambled (hashed) version of your IP address to stop spam, fake votes and brute-force logins, and a log of security events on your account (logins, password changes and similar).

Free tools

Most toolkit tools run entirely in your browser, and what you type or upload into them isn't sent to us. Two exceptions: the Invite Link Checker sends the invite code to our server, which asks Discord about it (we don't keep a record of what you checked), and the Embed Builder sends your message straight from your browser to the Discord webhook you enter. We never see that webhook link.

Why we use it

To run the directory, keep accounts secure, count votes fairly, stop abuse, process payments, and send you emails you need (confirming your email, password resets, security alerts and notices about a paid feature). We don't send marketing emails and we don't sell or rent your data. The legal bases are running the service you signed up for, our legal duties (for example keeping payment records), and our legitimate interest in keeping the site secure. Analytics only runs if you agree to it.

Cookies and browser storage

We use one essential cookie to keep you logged in. It's deleted when you log out or close your browser. Your browser also remembers a few settings on your own device, like light or dark mode, your analytics choice and your recently used emoji in the toolkit; these stay on your device and aren't sent to us.

Google Analytics (only if you say yes): we ask before loading it. If you agree, Google sets cookies (named _ga and _ga_...) that let us see things like which pages are popular, roughly where visitors come from and what device they use. We see totals, not who you are, and we don't use it for ads. You can change your mind at any time with Cookie settings, which also deletes those cookies.

We don't use advertising cookies, and sponsor boxes don't load anything from the advertiser.

Services we use

• Hosting: our web host stores the site and database. Our Discord bot and status checker run on a separate bot host.
• Discord for "Log in with Discord", the bot, invite checks, and server icons and member counts (loaded from Discord's servers).
• Cloudflare sits in front of the site to keep it fast and block attacks, and its Turnstile check makes sure sign ups and logins come from humans. Cloudflare processes your IP address and request details for this; see Cloudflare's privacy policy.
• Have I Been Pwned: when you pick a password we check if it has leaked in a known data breach. Only the first 5 characters of a hash of your password are sent, never the password itself.
• Google Analytics (Google LLC) measures how the site is used, only if you agree. Google processes data such as your IP address and device details; see Google's privacy policy.
• Stripe processes payments for paid features. When you buy something we send Stripe your username and email so your receipts reach you, and Stripe gets your payment details directly from you; see Stripe's privacy policy.
• Email: account emails are sent through our web host's mail service.

How long we keep it

• Account data stays until you delete your account. Deleting it removes your profile, listings, votes and emojis right away, cancels any Plus subscription and deletes your customer record at Stripe.
• Rate-limit records are deleted after 2 days. Security logs are kept for up to 12 months.
• Votes and bumps are deleted after 24 months. Bumps made in Discord are tied to your Discord ID rather than your account, so email us if you want them removed sooner.
• Finished ownership claims, including their query keys, are deleted after 30 days. Daily view and click counts are deleted after 13 months.
• Payment records are kept as long as the law requires for accounting and tax, even after you delete your account.
• Ownership claims you made are deleted within 30 days of being finished. Reports you sent stay on file without your name after you delete your account.
• Backups roll off within 30 days.
• Google Analytics data is kept by Google for 14 months, then deleted.

International transfers

We're based in the US, and our host, Stripe, Cloudflare, Discord and Google may process data in the US and other countries. When data leaves the EU, EEA or UK, we rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses.

Your rights

You can see, download and delete your data at any time from your account page, and change your email or password there. If you're in the EU/EEA or UK you also have the right to correct your data, object to or restrict how we use it, and complain to your local data protection authority. For anything else, email [email protected]. We answer within 30 days. We don't sell your personal information or share it for advertising, as those terms are defined in California law.

Security

We use HTTPS everywhere, hashed passwords, encrypted secrets, optional two-factor login, rate limiting and login alerts. No system is perfect, so if you think you found a security problem, please email us.

Children

VC Servers is not meant for children under 16. If you believe a child has made an account, contact us and we'll remove it.

Changes

If we change this policy in a meaningful way, we'll update the date above and, for big changes, let account holders know by email.