Skip to content

Privacy policy

Last updated October 26, 2026

DontWannaCry verifies new members of Discord servers. This page explains what it stores, why, and for how long.

What we collect

  • Your Discord user id and username, from the Discord login (scope: identify only). The login token is revoked right after we read your id.
  • A hash of your IP address: HMAC-SHA256 with a secret key. The raw IP is never stored.
  • A hash of your browser fingerprint (canvas, WebGL, fonts, screen, timezone). Only the hash is stored, again HMAC-ed with a secret key.
  • Verification records per server: when you joined, the risk score and its reasons, the check you got and the result.
  • The bot never reads message content.

Why

  • To tell people apart from bots and to spot new accounts of people banned from the same server.
  • Server moderators see the verification result, the score and its reasons. They never see hashes or IP addresses.

How long

  • IP and fingerprint hashes are deleted after 90 days.
  • Closed verification records are deleted after one year.
  • When a server removes the bot, everything stored for that server is deleted 30 days later.

Third parties

  • Cloudflare Turnstile checks that you are human. Cloudflare processes that request under its own policy.
  • If a server enables it, your IP is checked against a VPN and proxy database (proxycheck.io).
  • Error reports may go to Sentry. They never contain IP addresses or fingerprints.

Your rights

  • Ask a server admin or the bot operator through the support server to delete your data. Leaving a server does not delete it automatically.