Privacy policy
Privacy-conscious giveaway protection.
Effective July 14, 2026
AltGuard processes only the information needed to verify giveaway entrants, calculate server-specific risk, investigate linked accounts, and operate authorized moderator tools.
Raw IP addresses and raw browser fingerprint components are not stored. The evidence AltGuard keeps is keyed-hashed with a secret held only by AltGuard, so it cannot be reversed back into an address or a device value. Discord identifiers, scores, and moderation history are retained so authorized server staff can review abuse consistently.
Information we process
- Discord user and server identifiers, username, account creation time, avatar status, and server membership data exposed to the bot.
- Giveaway entries, scan context, message-count and optional presence summaries, score reasons, evidence snapshots, and moderator actions.
- Keyed hashes of the IP address and of browser/device profile signals, linked-account identifiers within the requesting server, and VPN/proxy results.
- Discord OAuth account and manageable-server information required to authorize the owner dashboard.
Information we do not store
AltGuard does not persist raw IP addresses, message content, passwords, Discord tokens belonging to members, or raw fingerprint component values. Hashing uses HMAC-SHA256 with a server-side key rather than a plain digest, because a plain digest of something as small as an IPv4 address can be exhaustively reversed. The bot counts eligible server messages for activity scoring without storing their text.
Why we use this information
Information is used for fraud prevention, verification status, explainable risk scoring, linked-account review, giveaway winner eligibility, service security, support, billing access, and audit history. AltGuard does not sell entrant data.
Service providers
Discord provides bot and OAuth data. The deployment host and MongoDB provider process application traffic and stored records. The configured VPN-risk provider receives the requesting IP transiently to return a VPN/proxy result. The verification page currently loads FingerprintJS OSS from its public CDN, which may receive normal request metadata such as an IP and user agent.
Retention
Verification links expire after the configured short period. New verification-token records are scheduled for automatic deletion after the configured retention window, seven days by default. Server risk profiles, evidence history, giveaways, reports, and audit records remain while needed to provide the service or until an authorized reset or valid deletion request. Backup and provider deletion may take additional time.
Access and server boundaries
Dashboard access requires Discord authentication plus owner, Administrator, or Manage Server permission for that guild, and an eligible plan. Identity relationships shown to moderators are scoped to the server where the evidence was collected.
Your choices
You may decline verification, but the giveaway owner may require it for entry. For access, correction, or deletion requests, email support@altguardhq.com and include your Discord user ID and the relevant server ID. Requests may be limited where evidence must be retained for security, disputes, or legal obligations.
Security and changes
AltGuard uses HTTPS in production, server-side sessions, one-way hashes, access checks, and rate limits. No system is perfectly secure. Material policy updates will be published on this page with a revised effective date.