EzAdmin Privacy Policy

Who is responsible

EzAdmin is a tool that Discord server owners and game developers ("customers") add to their communities. For data about the members of a customer's server and the players of a customer's game, the customer decides what EzAdmin is used for, and EzAdmin processes that data on their behalf. For data about customers themselves (dashboard sign ins, payments, support tickets), EzAdmin is responsible.

If you are a player and want to know what a particular server or game does with your data, ask its owners first. You can always contact us too.

What we store

Data	Why	Kept until
Discord server ID and name	Keeping each server's settings apart	The server asks us to delete it
Discord user IDs of members EzAdmin acts on, and of staff who act	Warnings, bans, the audit log and permissions	The server asks us to delete it
Warning and ban reasons, and staff notes, typed by staff	The moderation record	The server asks us to delete it
Linked game accounts: a PlayFab ID and display name	Game bans, role items, transfers and receipts	The member unlinks
Link codes	Proving a member owns a game account	Used once, or 15 minutes
Play sessions: a game ID, in game name, and when the player joined, was last seen and left	Playtime and the Players tab	The server asks us to delete it
Transactions: purchases your game reports, transfers between players and staff grants, with the players, amounts, item names and reference numbers	Transaction history and receipts	30 days, 1 year, 3 years or 10 years, by the server's plan
Notification choices made with `/notifications`	Not sending DMs a member turned off	The member changes them
Anti tamper reports and the decision on each (see data from games)	Reviewing cheats	The server asks us to delete it
Ban appeals: the text, the contact detail the person chose to give, and a one way hash of their network address	Answering the appeal, and stopping one person flooding the form	The server asks us to delete it
Blueprints built by staff, how often each ran and its last error	Running them, and the audit log	The blueprint is deleted
Game settings and news posts written by staff	Sending them to the server's game	Staff remove them, or a post's end date
Dashboard sign ins: your Discord user ID, name and avatar, the servers you own or can manage, and the kind of browser and device (never your IP address)	Showing you the servers you help run	Seven days, or until you sign out
A PlayFab Secret Key, encrypted	Carrying out actions on your title	`/playfab disconnect`
Payment records: claim code, provider event ID, amount and plan	Applying plans and keeping accounts	As long as accounting law requires
Affiliate applications: name, websites, audience and confirmation of being 18 or over	Reviewing and running the affiliate programme	The affiliate leaves, or asks us to delete it
Support tickets	Helping you, and following up	You ask us to delete them

Data from games

When a customer connects a game, the game sends EzAdmin what its features need.

Anti tamper in the EzAdmin SDK for Unity runs in the player's copy of the game. A report contains the player's PlayFab ID and name, which check fired, a short detail such as the name of the tool found, the platform and app version, and a fingerprint of that copy of the game. It looks at the game's own process and folder, and on Android at a few well known signs of rooting and hooking. It never reads a player's own files, takes screenshots or lists their other apps.
Build fingerprints are hashes of the game's own code or signing certificate, with the platform, version and how many players used each. They identify a copy of the game, not a person.
Inside the game's own storage, EzAdmin writes to a linked player's PlayFab data who they are linked to on Discord and which items EzAdmin granted, so it only takes back what it gave.

Customers who use anti tamper must tell their players in their own privacy notice, as the Terms require.

What we never collect

Card or bank details. Checkout is handled by the payment provider, and in game purchases by the game's platform.
Passwords.
Discord access tokens. When a player signs in with Discord in a game, EzAdmin uses the token once to ask Discord who they are, and does not keep it.
Players' IP addresses, locations or email addresses from their games. EzAdmin does not ask PlayFab for those fields.
Messages from your server. AutoMod is run by Discord: EzAdmin is told which rule somebody tripped and when, never what they said.

We do not sell personal data, share it for advertising, or use it to train machine learning models.

Messages EzAdmin sends

EzAdmin sends a member a Discord DM only for something that concerns them: a moderation action, a link code, a purchase receipt, currency sent to them, an item from a role, or a reply to their appeal or ticket. Receipts, transfers and role items can each be turned off with /notifications. EzAdmin never sends advertising by DM.

Who sees it

Data only leaves EzAdmin to do what a customer asked:

Discord receives the bot's replies and actions.
PlayFab receive actions for the customer's own game.
The payment provider handles checkout for EzAdmin plans.
Our hosting provider runs the servers EzAdmin is on.
The law: we disclose data when we are legally required to, and only what is required.

Inside a server, staff see what their permissions allow, and full game IDs are hidden unless the owner grants that permission. Public ban lists never show names. EzAdmin support can only open a server's dashboard when its owner allows it, for a limited time.

How long it is kept

The table above gives each period. Transactions are deleted automatically when their period ends. When a customer removes EzAdmin, their server's data is kept so that adding it back restores their setup, until they ask us to delete it.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, to give you a copy, to correct it, or to delete it. Where privacy law gives you more (the GDPR and UK GDPR, or California's CCPA and CPRA, for example), you also have those rights, including objecting to processing and complaining to your data protection authority.

Unlink a game account at any time with /unlink.
Turn off receipts and other DMs with /notifications.
Server owners can disconnect a game with its disconnect command.
For anything else, open a ticket from the support page and choose Privacy or my data. We answer within 30 days, and we may ask you to prove the Discord account is yours.

Some records, such as a ban a server issued, belong to that server's moderation history. If you ask us to delete one, we tell the server and remove your personal details where we can.

Children

Discord requires its users to be at least 13 (or older where local law says so), and EzAdmin is not meant for anyone younger.

Security

Game keys and tokens are encrypted or stored only as hashes, staff access follows permissions, and every action is in an audit log. The details are on the security page. If something goes wrong that affects your data, we tell the affected customers without undue delay.

Changes and contact

When this policy changes, the date at the top changes, and important changes are announced in the EzAdmin Discord before they apply. Questions go to a support ticket.