Skip to content
v2

Privacy Policy

Last updated: October 19, 2026

1. Introduction

This Privacy Policy explains how Deskcord ("we," "us," "our," or "Service"), operated by Maxime Bertonnier, collects, uses, and protects your information.

Key Principle: Deskcord is a lightweight connector between your website and Discord. We store minimal data. Support messages stay in your Discord server, and payments are handled by Stripe. Deskcord has no user accounts: you install it as a Discord bot.

We're committed to transparency about data practices, especially since we operate in the EU and comply with GDPR. If you have questions, contact us at m.bertonnier@gmail.com.

2. What Information We Collect & Store

Important: Deskcord is a lightweight connector between your website and Discord. We store minimal data. Here's exactly what happens:

What Deskcord Stores

  • Your Discord server ID (guild ID) - this is how we know where to send messages
  • Your server's settings: support channels, allowed websites, widget appearance, plan usage counters and, if you turned it on, your identity verification secret
  • The Stripe customer ID linked to your server, and the reply-to address you set with /email-settings (if any)
  • For each website visitor: an anonymous ID linking them to their Discord thread, and the ID of the support member assigned to it
  • For servers on Pro with reply emails turned on: a website visitor's email address and the last page they used the chat on (address and path only, no query string), so we can email them a support reply they missed (see "Reply Emails" below)
  • For servers on Pro: the customer details a website passes to the widget with identify() (for example a plan name or a user ID), only the latest version per visitor, so the server's support team can see them in Discord

What We Do NOT Store

Deskcord does NOT store customer personal data. Here's where it actually goes:

  • Customer support messages: Stored directly on Discord's servers (you see them in your Discord server). Deskcord simply routes them there; we don't keep copies.
  • Customer names and message content: Never stored in Deskcord's database. Visitor names and emails are posted in the support thread, in your Discord server, and kept in the visitor's own browser so the chat remembers them. Visitor emails are only stored by Deskcord for reply emails (Pro), as described below.
  • Payment information: Never stored in Deskcord. Stripe handles all payment data securely.

Website Analytics

We run Umami, a cookieless analytics tool we host ourselves, to see which pages help people and where they leave: the pages you visit, the referrer, browser, device type and country, and clicks on the buttons that matter (such as “Add to Discord” or copying the install snippet). It sets no cookies, stores nothing on your device and doesn’t keep your IP address. Addresses are stripped of everything but campaign parameters before they are sent. The chat widget installed on our customers’ websites sends nothing to it.

Cookies

deskcord.chat sets no cookies. Your light or dark theme choice is kept in your browser's local storage. The chat widget on your website stores the visitor's session in their browser's local storage; it doesn't set cookies.

3. How We Use Your Information

We use your data to:

  • Provide and improve Deskcord
  • Process payments through Stripe
  • Send your server's owner Discord messages about the service (welcome, usage limits, billing)
  • Help you troubleshoot issues
  • Understand how users interact with our Service
  • Prevent fraud and abuse
  • Comply with legal obligations

We never: Sell, rent, or share your data with third parties for marketing purposes. We don't use your data to train AI models or for purposes beyond what's described here.

4. Where Your Data is Stored

Minimal Data in Deskcord's Database

Deskcord stores only essential information needed to operate:

  • Your Discord server ID (guild ID) and your server's settings
  • Anonymous visitor IDs linked to their Discord threads
  • On Pro: visitor emails and last page for reply emails, and the customer details your website passes with identify()
  • Website analytics data for deskcord.chat

Customer Data - Handled by Discord

When customers submit support messages through your website's Deskcord widget:

  • Messages are sent directly to Discord and stored there
  • Customer names and message content live on Discord's infrastructure
  • Deskcord does not store or keep copies of customer messages
  • You have full control over message retention through Discord's settings
  • Review Discord's Privacy Policy for their data handling practices

Reply Emails (Pro)

When a server on Pro replies to a visitor who left the website without reading the reply, Deskcord emails it to them a few minutes later:

  • We store the visitor's email address and the last page they used the chat on, only to send these emails. We don't store the replies themselves.
  • To send an email, the reply text is read from Discord at that moment and handed to our email provider, Resend, which processes it to deliver the email.
  • Every email has an unsubscribe link: one click stops these emails from that website and deletes the stored address. Server owners can also turn reply emails off, which deletes their visitors' addresses.
  • An address not used for 180 days is deleted automatically.

Payments - Handled by Stripe

All payment information is processed and stored by Stripe. We never see or store credit card details, billing addresses, or payment data. We receive your subscription status, and on Pro we read the billing email Stripe holds, only to use it as the reply-to address of reply emails unless you set another one. Review Stripe's Privacy Policy for their payment security practices.

5. Third-Party Services

Deskcord uses the following third-party services, which may collect certain data:

Discord

  • You add the Deskcord bot to your server through Discord's app authorization; we don't receive your Discord account details
  • Support messages are handled through Discord's bot and messaging infrastructure
  • See Discord's Privacy Policy for their data practices

Stripe

  • Processes all payments securely
  • We never see or store your payment card details
  • See Stripe's Privacy Policy for details on how they handle payment data

Resend

  • Delivers reply emails (Pro): it receives the visitor's email address and the reply text to send them
  • See Resend's Privacy Policy for details

Umami

  • Cookieless usage statistics for deskcord.chat (see What We Collect), on servers we run ourselves at Railway
  • No data is shared with Umami Software

6. How Long We Keep Your Data

  • Your server's settings: Kept while the bot is installed, and kept after it's removed so a reinstall finds them again. Email us to have them deleted.
  • Customer support messages & customer data: Not stored by Deskcord. Stored on Discord's servers according to Discord's retention policy. You control how long Discord keeps messages through Discord's message deletion settings.
  • Visitor emails and last page (reply emails, Pro): Deleted when the visitor unsubscribes, when the server turns reply emails off, or after 180 days without use. When a visitor unsubscribes, we keep only a one-way hash of their address, so the request is honored without keeping the address.
  • Payment records: Kept for 7 years for tax and legal compliance purposes (required by French law).
  • Umami usage statistics: Kept for up to 3 years, to compare trends over time. They hold no IP address and no cookie identifier.

7. Your Rights (GDPR & EU Users)

If you're located in the EU, you have the following rights under GDPR:

  • Right to access: You can request a copy of the personal data we hold about you
  • Right to rectification: You can correct inaccurate information
  • Right to erasure: You can request deletion of your data (with some exceptions)
  • Right to restrict processing: You can limit how we use your data
  • Right to data portability: You can request your data in a portable format
  • Right to object: You can object to certain data processing
  • Right to withdraw consent: You can withdraw consent at any time

To exercise any of these rights, email us at m.bertonnier@gmail.com. We'll respond within 30 days.

8. Data Security

We take security seriously and implement industry-standard practices to protect your data:

  • HTTPS encryption for all data in transit
  • Limited access to personal data (only essential team members)
  • Regular security monitoring

However, no system is 100% secure. If you believe your data has been compromised, please contact us immediately.

9. Children's Privacy

Deskcord is not intended for users under 18 years old. We don't knowingly collect data from minors. If we discover we've collected data from someone under 18, we'll delete it immediately.

10. International Data Transfers

Deskcord is operated in France. Your data may be transferred to, stored in, and processed in countries other than your country of residence, including countries that may not have data protection laws equivalent to your home country.

By using Deskcord, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules. Where legally required, we implement appropriate safeguards (such as Standard Contractual Clauses) to protect your data during international transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in our practices or legal requirements. We'll notify you of significant changes via email. Your continued use of Deskcord after changes means you accept the updated policy.

12. Contact Us

If you have questions, concerns, or want to exercise your privacy rights, contact us:

See also: Terms & Conditions