Privacy Policy

Who we are

PinPal is a Discord bot run by SyntaxHQ ("we", "us"). This policy covers the PinPal bot, this website and PinPal+. PinPal isn't affiliated with Discord Inc.; Discord's own privacy policy covers your use of Discord.

What we collect

Data	What exactly
Pins	The text, embeds, buttons, image links, timing, expiry and display name you set for each pin, the server and channel IDs it lives in, the ID of the message it last posted, and the user ID of whoever last saved it (so pin alerts reach the right person).
Custom pin looks	For PinPal+ pins with a custom name and avatar: the webhook ID and token PinPal posts through, and a short fingerprint of the avatar so we can tell when it changes. The avatar image itself is not stored; it goes straight to Discord.
Presets	The saved pin settings, the server ID and the user ID of whoever saved it.
Share codes	The shared pin settings (never channels or avatars), the user ID of whoever created the code and the name of the server it came from.
Server settings	Your server's timezone, pin manager role ID and DM preferences.
Stats	Daily counts per pin: how many times it posted, failed or had its 🔍 button clicked, and at what hour.
Activity log	Who (user ID and name) created, edited or deleted pins and changed settings in a server, and when.
Button removal requests	If you ask us to remove the 🔍 button from a pin: your user ID and username, the server's ID and name, the channel ID, a copy of the pin for review, any messages between you and our team about it, and the request's status.
PinPal+	For each subscription: the Polar subscription ID, the server ID it's for, its status and billing period dates.
Logs	Technical logs with server and channel names and IDs, message IDs and error details, used to fix problems. Also a record of DMs PinPal sent, so none is sent twice, and overall usage numbers (like servers, pins and subscriptions) for running the service.
Website	This site doesn't use cookies, analytics or trackers. Our host (Vercel) keeps standard server logs, such as IP addresses, for security.

What we don't collect

Your members' messages. PinPal notices that a message was sent in a channel with a pin, so it knows when to repost, but it doesn't read or store what people write. The only exception is when someone uses Create Pin on a message: that message is copied into the new pin, because they asked for it.
Payment details. Card numbers, billing addresses and similar details go to Polar and Stripe, never to us.
Avatar images, as explained above.

Why we use it

To run the bot: post, repost, edit and remove your pins as you've set them up.
To provide PinPal+ to the servers that paid for it, and send the DMs you've left on (PinPal+ updates and pin alerts).
To keep people safe: the 🔍 button, handling removal requests, and acting on reports of scams or abuse.
To fix bugs and keep PinPal reliable.

We don't sell, rent or trade data. We only share what's needed with:

Discord, which PinPal runs on, to post your pins.
Polar, our payment provider and merchant of record, which receives your server's ID so a subscription unlocks the right server. Polar uses Stripe to process card payments. Their own privacy policies cover what they collect at checkout.
Our hosting and database providers, which store the data above for us.
Authorities, if the law requires it.

How long we keep it

Pins, presets and server settings: until you delete them, or they expire. If PinPal is removed from a server, its pins are kept 30 days so re-adding PinPal restores them, then deleted.
Stats and the activity log: 90 days.
Share codes: one year, or until you delete them.
PinPal+ records: while the subscription is active, plus a history of trials, payments and cancellations for about 13 months. Polar keeps billing records as the law requires.
Logs: error logs are deleted after about 15 days.

Deleting your data

Server data: anyone with Manage Server can run /server → Delete everything to permanently delete all of a server's pins, presets and settings at once.
Your personal data: anyone can run /personal → Delete all my data to delete their share codes and pending requests and remove their name from server records.
Anything else, like a question about logs or billing data: contact us below and we'll help.

Deletions in the bot are instant and permanent.

Security

Data is stored in access-controlled databases, only the people who run PinPal can reach it, and we store as little as possible in the first place. No system is perfectly secure, but we take it seriously. If you find a security problem, please tell us privately in the support server.

Children

PinPal is for people old enough to use Discord under Discord's terms and the law where they live. We don't knowingly collect data about children below that age.

Changes

If we change this policy, we'll update the date above, and announce important changes in our support server.

Contact

The fastest way to reach us is our Discord support server, where you can open a private ticket for privacy requests.

If you can't use Discord, write to syntaxhq1@gmail.com.