Privacy policy
Last updated: 18 October 2026
This is an English translation. In case of any difference, the Hungarian version prevails.
This notice describes what data the CloneSync Discord bot and its website handle, why, for how long, and what rights you have. The data controller: the operator of CloneSync, reachable on the Support page.
1. In short
- The bot does not store the text of messages. The messages are on Discord, on the backup server; the bot only remembers which original message became which copy (IDs).
- The bot reads the content of messages (Discord "Message Content" permission) only to copy them to the backup server; it does not analyse or use them for anything else.
- Files (images, videos) are kept only temporarily while uploading, then deleted at once.
- It never sees a password: you sign in through Discord.
- We do not sell data, do not use it for advertising, and do not train artificial intelligence with it.
2. What data we handle
| Data | What for | How long |
|---|---|---|
| Which server is synced into which, who started it, what it clones and syncs (settings) | Running the backup | Until the backup is stopped |
| Pairs of the IDs of channels, messages, roles, emojis (original → copy), time of edit, whether deleted | So that edits and deletions happen in the backup too, and after a restart there are no duplicate or missing messages | While the backup runs; after it is stopped it stays on the bot's computer so a restart does not copy twice. Can be deleted on request. |
| The parts of a message being copied (which part was sent already) | Continuing after a stop | Until the message is copied |
| Log: sync events (e.g. who joined, whose role changed: Discord name and ID), errors, clone reports | The dashboard log, troubleshooting | 7 days, then deleted automatically |
| Website login: Discord ID, user name, avatar, the list of your servers, the Discord login token | Running the dashboard | At most 7 days, or until you sign out |
| Support colleagues (on the admin page only): permissions, full name and phone number (if given – only admins see them), the login user name and an encrypted fingerprint of the password (if any), whether two-factor authentication is on, whether the e-mail address is verified (the address itself is not stored), what they looked at and what they did | Protecting access, accountability | While they are on the team; the log entries stay afterwards too |
| Who invited the bot to a server (Discord ID) | Contact if there is a problem with the server or the backup | While the bot is on the server |
| Personal messages from the team (on your dashboard): text, who sent it, when, whether you read it; the notification on Discord | Customer support | Until the account is deleted (the latest 200 per user); the team can withdraw them at any time |
| Subscription: plan, end date, renewal, history; expiry reminders | Providing the service | Until the subscription ends, or until the account is deleted |
| Payments: amount, plan, period, status, the payment provider's transaction ID, the card type and its last 4 digits. We never see or store the full card number. | Invoicing, accounting, refunds | 8 years under the accounting law (even after the account is deleted) |
| IP address | Protection against overload and abuse (rate limits, temporary bans) | Only in memory, at most 24 hours; never written to disk |
| Server snapshots (Snapshots): the server's settings, roles and permissions, channels, the members' IDs and roles, the bans, the icon, the emojis and stickers, and the latest messages of every channel by the plan (text, author's name, ID and avatar). Of attachments (images, videos, files) only the file name, size, type and the link to the copy stored on Discord. | Making the snapshot (the first one on the user's request, then automatically as often as the plan says) and restoring it on the user's request | Until the user deletes it, or until newer automatic snapshots push it out (the plan's number of newest ones is kept per server), at the latest until the account is deleted or the service ends |
| The chosen language (English / Magyar) | So that the bot and the website talk to you in it | In your own folder, until you change it, or until the account is deleted |
| Member list (CSV download) | The main server's admin can download it | Not stored: made from Discord when downloaded |
3. Cookies
The website uses only the cookies strictly needed to work: the login ID (at most 7 days, or until you sign out), a security cookie that lives for a short time during sign-in, and the language you chose. There are no tracking, advertising or statistics cookies, so no consent is needed for them.
4. Legal basis
- Providing the service (GDPR Art. 6(1)(b)): the backup, the dashboard, the subscription.
- Legitimate interest (GDPR Art. 6(1)(f)): protecting the service (IP addresses, log), troubleshooting, important notifications.
- Legal obligation (GDPR Art. 6(1)(c)): keeping the payments under the accounting rules.
For the data of the members of cloned servers (their messages go to the backup server) the server admin who set up the backup is responsible: they have to inform the server's members that a backup of the server is made.
5. Who has access, to whom we pass it
- Discord: the bot runs on Discord's system (under Discord's privacy policy).
- Payment provider (when connected, e.g. Paddle or Stripe): it handles the payment, only it sees the card data.
- Cloudflare (if the website runs behind it): it forwards and protects the traffic.
- The data is on the operator's own server. We do not pass it to anyone else, unless the law requires it.
6. Your rights
You can ask us to show what data we handle about you, to correct or delete it, to restrict its handling, you can object to it, and you can ask for your data in a machine-readable form. Most of it you can do yourself:
- stopping a backup: dashboard → Stop, or
/backup-stop; - signing out: Sign out on the website (your login data is deleted at once);
- deleting your account and all your data: Billing page → Delete account and data (at once: your backups stop, and your subscription, history, messages, the backups' data and your login are deleted);
- removing the bot from the server: kick the bot on Discord.
After the account is deleted, only what the law requires stays, separately and only for that purpose: your payments (8 years under the accounting law) and your subscription history (until claims from the contract expire, 5 years). If you never paid, only the fact of the deletion stays for 30 days. After that they are deleted automatically. Your backup servers and their messages stay on Discord – they are yours, you can delete them on Discord.
Every other request is received at the contact above and fulfilled within 30 days at the latest. If you feel we violated your rights, you can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (naih.hu).
7. Security
- The website runs on an encrypted (HTTPS) connection, sign-in is through Discord.
- The admin interface is available only with the Discord accounts given by the operator, and every action is logged.
- Rate limits and automatic bans protect against overload and abuse.