Privacy Policy
Last updated 10 November 2026.
This page explains what the mod mail console stores, why, and who can see it. It is a staff tool, so the data it holds is mod mail itself: messages members sent to the staff team, and the staff replies.
What is stored
- Account details needed to run the inbox: Discord user IDs, usernames and display names, avatars, and the Discord ID and name of each server.
- The mail itself: the text and attachments of member messages, staff replies, internal notes, tags, assignments, close reasons and transcripts.
- Per-server configuration: channels, roles, greeting and close messages, command prefix, saved replies, blocked member IDs, and limits.
- An audit log of actions taken in the console, with the staff account that took them and when.
- Your Discord OAuth access token, while you are signed in, so the console can list the servers your account owns or administers. Signing out deletes it.
Where it lives
All of it is stored in this application's own database (Cloudflare Durable Object storage) tied to the workspace that runs it. Nothing is sold, rented or shared for advertising, and there are no analytics or tracking scripts on these pages.
Who can see it
- The console owner, and every Discord account the owner lists as staff. Staff see the inbox, transcripts and activity log; only the owner sees credentials and the owner panel.
- Visitors who are not signed in never see mail: the sign-in page is the only thing public here.
- When a reply is delivered, its content is sent to Discord's API so it can reach the member. Discord then handles it under Discord's own privacy policy.
Cookies
One cookie, mm_session, keeps you signed in for up to 14 days. It is HttpOnly, Secure and SameSite=Lax, holds only your Discord ID, display name and role, and is deleted when you sign out. No advertising or third-party cookies are used.
How long it is kept
Mail stays until someone deletes it. Closing a thread does not delete it; it moves to the archive, and transcripts are kept for the servers that enable them. You can ask the owner to delete a conversation or your account's record, and the owner can export or remove the console's data.
Your choices
- Ask the owner for a copy of what the console holds about you, or ask for it to be deleted.
- Signing out removes the Discord token stored for your account.
- To stop a member's mail from reaching the console, staff can block that member ID per server under Servers.
Children
The console is for server staff and is not intended for anyone below Discord's minimum age.
Questions
Contact the console owner in Discord for anything about this policy.