This policy covers martinebot.com and the Martine dashboard: what they collect when you visit or log in, why, how long it is kept and how to remove it. The Discord bot has its own bot privacy policy.

Martine is run by Predä. For any question about your data, write to [email protected] or ask in the #support channel of Martine's support server (opens in a new tab).

Visiting the website

You can read every public page without logging in. Our servers keep standard request logs (your IP address, the page, the time and your browser's user agent) to run the site and to stop abuse, such as too many requests from one address. They are not used to build a profile of you.

We count visits with Umami, anonymously. It sets no cookie and does not follow you to other sites, and we send it no account id and no Discord id. Page addresses are sent without server or image ids, and of a link's query only the campaign tags (such as utm_source, which say where a visit came from) are kept; everything else, and the part after #, is dropped. Umami counts what you press and what went through (for example, that an alert was added), and how fast pages load. Its counts are kept for 25 months.

Martine staff (the admin and mod roles) are not counted while they are logged in. You can turn counting off in this browser with the Analytics setting, in Display beside Theme and Animations: in the account menu when you are logged in, under the Display options button when you are not, and on this page.

Turns off the anonymous visit counts in this browser. Recordings stop from the next page.

Analytics On Off

When a page fails, Sentry receives the error, the page address and your browser version so that we can fix it.

Logging in with Discord

The dashboard logs you in with Discord. Before that, Cloudflare Turnstile checks that you are not a bot; Cloudflare receives your IP address and browser details for that check.

Discord then asks you to allow these permissions, and Martine uses each for one thing:

identify: your Discord id, username, display name, avatar, avatar decoration, banner, accent colour and badges, to show who is logged in.
email: the email address of your Discord account. Discord shares it each time you log in; we keep it with your account and never send you email or share it.
guilds: the list of servers you are in, to show the ones you can manage. It is read from Discord when you open the dashboard, kept in memory only while you use the dashboard and for about a minute after, and never stored.
guilds.join: to add you to Martine's support server, once, the first time you log in to the dashboard (if Discord does not answer, the next time you log in). If you leave it, you are never added back.
guilds.members.read: to read your own membership of the support server (so the dashboard can tell you when Discord is waiting for you to accept its rules) and your nickname and avatar in the server you are managing.

What Martine never does with your Discord account

Martine never posts anything on your behalf. Logging in from an image report page asks only for identify, email and guilds, and never adds you to the support server.

When you add Martine to a server, Discord sends the site a one-time answer. Martine uses it once to learn which server it was, then discards it without storing it.

Your Discord tokens

Discord gives the dashboard an access token and a refresh token so that it can do what the permissions above are for. They are stored encrypted in our database (tokens from a login made before this policy are encrypted the next time you log in), used for nothing else, and deleted with your account.

Cookies

The site sets only the cookies it needs to work, none for advertising or tracking. On https, the first three names start with __Host-.

martine.session_token keeps you logged in, for 7 days, extended while you keep using the dashboard.
martine.session_data is a signed copy of your session that spares a database read on each page, for 5 minutes.
martine.state ties Discord's answer to your browser while you log in, for a few minutes.
mb-guild remembers the last server you opened in the dashboard, so the Premium page can show its usage, for 30 days.
mb-review-ask remembers that you answered the Overview's request for a top.gg review, so it is not shown again, for 1 year.
mb-patreon-state ties Patreon's answer to your account while you link Patreon, for 10 minutes; mb-patreon-result carries the result to your account page, for 2 minutes.
mb-thanks remembers, signed, which server you just added Martine to, so the thanks page can show it, for 10 minutes.
mb-thanks-new marks that invite for one visit to the thanks page, so it is counted once, for 60 seconds. It carries nothing about you.
mb-banner remembers the announcements you closed, so they stay closed, for 1 year. The page writes it when you close one.

Storage on your device

Your browser's local storage keeps the choices below. These choices stay on your device and are never sent to us:

mb-theme: light, dark or system.
mb-motion: the Animations setting.
mb-nsfw: you chose to see the NSFW command names.
age-verification: you confirmed you are 18 or older on an NSFW page.
support_banner_v1: you closed the support server banner.
umami.disabled: you turned Analytics off in this browser.
mb-signing-in: a login in progress, so it is counted once. It sits in session storage and ends when you close the tab.

Session recordings in the dashboard

On dashboard pages, not on the public site, Umami and Sentry may record how a page is used (clicks, scrolling, page changes) so that we can see what broke. Sentry hides the text and form inputs in its recordings. To link a recording together, Sentry keeps a random session id, with when it started and when you were last active, in your browser's session storage under sentryReplaySession until you close the tab. Recordings are used only to find and fix problems. Turning Analytics off also stops both recordings, from the next page you open.

If you send feedback from the account menu, Sentry receives your message, your Discord name, the page address and your browser details.

Logging out and your devices

Logging out ends that device's session. Your account page lists the devices you are logged in on and logs out any of them; another device can take up to five minutes to notice.

Deleting your account

You can delete your dashboard account from your account page. Martine first asks Discord to revoke its access, then deletes your account, your Discord tokens and every session. While a Patreon account is linked, unlink it first.

Deleting it leaves the data the bot keeps inside servers, which the ,mydata forgetme command erases in Discord, and the settings of the servers you managed, which belong to those servers. Logging in again later creates a new account.

Linking Patreon

If you link a Patreon account, Martine stores your Patreon id, your Patreon name (unless you hide it on Patreon), the Discord account it is linked to, your tier, your membership status, the status and date of your last charge, the date of your next charge, whether you are on a free trial, and the tokens Patreon gives us. Martine reads your membership with them every hour, to keep your Premium in step with your pledge. When a link succeeds, Martine also posts your Discord username, your Discord id and your tier to a private channel the Martine team reads, to follow Premium activations. We never see your payment details: Patreon handles payments.

A link works only for the Discord account you are logged in with, and Martine sends you a thank-you message on Discord when it succeeds. Unlinking deletes the link and its tokens at once; the Premium you already have runs until its end date. The link also ends when Patreon tells us you are no longer a patron.

Servers on the home page

A server's owner and Administrators can choose, in the server's Settings on the dashboard, to show it on the home page of martinebot.com, among the servers that chose it: its name, its icon and its member count. It is off by default, and only servers with at least ten thousand members appear. Switching it off removes the server from the home page within the hour.

Website privacy policy.