Privacy Policy

1. Who we are

ModMarshal is a Discord verification service available through modmarshal.com. It allows Discord server owners and authorised administrators to configure verification roles, channel access and verification activity for their communities.

For questions about this policy or your personal information, use the contact page.

2. Information we collect

Discord account information

When you log in with Discord, Discord may provide information permitted by the authorisation scopes you approve. This can include:

Your Discord user ID.
Your username and display name.
Your email address.
Your avatar or avatar reference.
OAuth access and refresh tokens used to keep your Discord connection working.
A list of Discord servers you belong to and your management permissions for those servers.

Discord server information

When a server is configured, ModMarshal may store its Discord server ID, name, icon reference and the IDs of selected roles and channels. This includes verification, log and access configuration chosen by a server administrator.

Verification activity

When a member attempts verification, ModMarshal records information needed to complete and review that attempt. This can include the member's Discord user ID, username, display name, avatar reference, server, result, failure reason, timestamps and a unique attempt reference.

A configured server's administrators may also choose a Discord log channel. Verification results sent there can identify the member, result and role update connected to the attempt.

Premium subscription information

If a Discord server uses ModMarshal Premium, ModMarshal may receive and store the Discord identifiers and entitlement information needed to recognise that server's Premium access. This can include the server ID, SKU or entitlement ID, entitlement status and related timestamps supplied by Discord.

Payment-card details are not collected or stored by ModMarshal for Premium subscriptions. Premium checkout and recurring billing are handled by Discord.

Technical information

The website uses session and security information needed to keep users logged in, prevent forged requests and protect the service. Our hosting and security systems may also process technical logs, such as IP addresses, browser information, request times and requested pages.

3. How we use information

We use information to:

Authenticate users through Discord.
Confirm whether a user belongs to a Discord server.
Add or remove configured Discord roles after verification.
Display manageable servers and configuration options to authorised administrators.
Provide verification history and statistics.
Recognise active Discord Premium App entitlements and unlock Premium features for the correct Discord server.
Keep the service secure, investigate errors and prevent misuse.
Meet legal, regulatory and platform requirements.
Display clearly labelled sponsored content arranged directly by ModMarshal.

4. Lawful bases

Where UK data protection law applies, the lawful basis depends on why the information is being used:

Contract: to provide features requested when you use ModMarshal.
Legitimate interests: to operate, secure and improve the service, manage verification activity and prevent misuse.
Legal obligation: where information must be processed or retained to comply with the law.

5. Who information may be shared with

ModMarshal does not sell your personal information. Information may be shared with:

Discord: to authenticate users, check server membership and permissions, update server roles, and provide or verify Premium App subscription entitlements. Discord separately handles Premium checkout and billing.
Discord server administrators: through server statistics, configuration pages and configured verification logs.
Hosting and infrastructure providers: where needed to host the website, database and security systems.
Professional advisers, regulators or authorities: where reasonably necessary or legally required.

6. Cookies and sponsored content

Essential cookies and storage

ModMarshal uses essential cookies or similar storage for login sessions, security and website functionality. These are required for requested features to work.

7. How long information is kept

Information is kept only for as long as reasonably needed for the purposes described in this policy. The period depends on the type of information and whether the connected account or Discord server remains active.

Account and OAuth information may be retained while your ModMarshal account remains connected to Discord.
Server configuration and Premium entitlement references may be retained while the server uses ModMarshal or while needed to determine access.
Verification records may be retained to provide statistics, investigate failures and protect server communities.
Technical and security logs may be retained according to operational and hosting log schedules.
Some information may be kept longer where required for security, dispute resolution or legal compliance.

You may request deletion through the contact page. A request may not remove information that another Discord server independently retains in its own Discord channels or audit logs.

8. International data transfers

Discord and some infrastructure providers may process information outside the United Kingdom. Where required, transfers are handled using recognised legal safeguards or other permitted transfer mechanisms used by those providers.

9. Security

ModMarshal uses reasonable technical and organisational measures intended to protect information. These include authenticated access, encrypted website connections, request protection and restricted Discord permissions.

No internet service can guarantee absolute security. Users should protect their Discord account and report unexpected activity promptly.

10. Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

Request access to your personal information.
Correct inaccurate or incomplete information.
Request deletion of your information.
Restrict certain processing.
Object to processing based on legitimate interests.
Request eligible information in a portable format.
Withdraw consent where processing relies on consent.

Your right to object: You may object to processing based on legitimate interests where UK data protection law gives you that right.

To make a request, use the contact page. We may need to confirm your identity before completing a request.

You also have the right to complain to the Information Commissioner's Office. Information is available at ico.org.uk .

11. Children's information

ModMarshal is not designed for children under 13. Discord server owners are responsible for ensuring that their communities and use of ModMarshal follow Discord's rules and applicable age requirements.

12. Changes to this policy

This policy may be updated when ModMarshal's features, providers or legal obligations change. The date at the top of the page will be updated when material changes are published.

13. Contact

For privacy questions, requests or complaints, contact ModMarshal through the contact page. Please do not include passwords, Discord tokens or other secret credentials in your message.