-
Notifications
You must be signed in to change notification settings - Fork 0
Data and Privacy
Parent section: Administration
SDAC stores user, server, submission, media, moderation, game, and audit data. Documentation should explain data categories without exposing private data.
Common data categories:
- Discord guild IDs.
- Discord user IDs.
- Dashboard usernames.
- Optional dashboard emails.
- Optional linked Discord account IDs.
- Submission metadata.
- Media filenames/paths.
- Votes and leaderboard entries.
- Guessing game answers, aliases, hints, and scores.
- Poll votes.
- Moderation actions and reports.
- Audit log entries.
- Backup/restore status.
- Release/update status.
Do not publish:
- Discord bot token.
- OAuth client secret.
- Admin passwords.
- Session cookies.
- User emails from production.
- Database dumps.
- Private media.
- rclone tokens or provider secrets.
- Android keystores or signing passwords.
- Private server IP credentials or SSH keys.
Dashboard privacy tools include:
- Per-server user data export requests.
- Per-server user data delete requests.
- Admin review of privacy actions.
- Audit history for admin actions.
Server-scoped data should remain scoped. Server Owners should only manage their server's data. Bot Owners can see global/cross-server data.
Server Owners can control whether their server's submissions are visible to other servers through cross-server views. Respect this setting in dashboard pages and app/API views.
Public pages should not expose private admin-only metadata. Public user profiles and reports should show only intended public fields.
Backups can contain private data. Do not upload backup files to public repositories or public release assets unless they are generated examples with no production data.