Privacy Policy
Mark Defender is a Discord bot and web dashboard operated by Corset Studio ("we", "us"). This policy explains what we process when the bot is in your server, when you use the dashboard, and when you complete a verification check.
What we collect
From servers the bot is in
- Server settings you configure: language, defense mode, role and channel IDs, thresholds, branding.
- Snapshots of channel and role settings: names, positions, topics, permission overwrites, role colors and permissions. Used only to rebuild them after deletion.
- Incident logs: the type of action, the Discord IDs of the user who did it and the target, a timestamp and a threat score.
- Whitelist entries and blacklist reports, including the reason and evidence link a reporter submits.
- Recent messages: the last 50 messages per channel (author name, avatar URL, content, attachment links) are held in memory only so a deleted channel can be restored. They are never written to disk and are gone when the bot restarts.
- Join metadata used for raid detection: account age, whether an avatar is set, and which invite was used. Held in memory only.
From the dashboard
- Through Discord login: your user ID, username and avatar, and the list of servers you can manage. Stored in a signed cookie in your browser, not in our database.
- Changes you make, which are recorded with your user ID in our internal activity log.
From verification
- Your Discord user ID, the server ID, the time you verified, and your IP address, which is passed to Cloudflare to run the Turnstile check. We do not store the IP address.
From Premium purchases
- Payment happens in our Discord support server. We store the license key, plan, your Discord ID as owner, the server it is active on, and the dates it was issued, activated and moved. We do not store card or bank details.
Why we use it
Only to run the service: detect and contain attacks, rebuild what was deleted, verify members, apply Premium to the right server, show you your dashboard, and investigate support requests and abuse. We do not sell data, use it for advertising, or train models on it.
Who else receives it
- Discord, which the bot runs on.
- Cloudflare, for Turnstile verification.
- Vercel, which hosts this website, and the server provider that hosts the bot.
We disclose data to authorities only when legally required.
How long we keep it
- Settings, snapshots, whitelist and incident logs: while the bot is in your server, and until deletion is requested.
- License records: for as long as needed for billing, support and fraud prevention.
- Global blacklist entries: until revoked after a successful appeal.
- Message and join caches: in memory only, cleared on restart.
Cookies
The dashboard sets two strictly necessary cookies: session_data (your login, 7 days) and oauth_state (protects the login flow, 10 minutes). No analytics or advertising cookies.
If you allow Functional storage in Cookie preferences, your browser also remembers your pricing currency (md_currency). Your cookie choice itself is stored as md_consent. Whether you have seen the dashboard tour on each server is stored as md_tour (only for the current tab if you did not allow Functional storage). Both stay on your device and can be changed any time from "Cookie preferences" in the footer.
Your choices
Server owners can remove the bot at any time. To have a server's data deleted, see what we hold about you, or appeal a blacklist entry, open a ticket in our support server. We reply as soon as we can.
Children
The service follows Discord's age requirements. We do not knowingly collect data from anyone below the minimum age to use Discord in their country.
Changes
If we change this policy we update the date above and announce material changes in the support server.