PRIVACY
Guaca is a Discord bot. It stores the minimum needed to run an economy, levels and moderation for a server, and nothing it does not use.
Last updated: 9 September 2026
What is stored
Identifiers are Discord snowflakes — the numeric ids Discord assigns. Guaca does not store your email address, your password, your real name or any payment details, because it never receives them.
- Your Discord user id and the id of each server where you use the bot.
- Economy state: cash, bank, inventory, daily streaks, and a ledger row for every currency movement.
- Experience points and level, plus the minutes counted while you were connected to voice.
- Moderation cases: the action taken, who took it, when, and the reason a moderator typed. A reason is free text written by a person, so treat it as visible to that server’s staff.
- A birthday as a day and a month. Never a year — the table cannot reveal your age.
- Cooldown timestamps, so a command that is meant to run once an hour does.
What is not stored
Message content is not kept. The bot reads messages in order to award experience and to run automod, and then discards them. Nothing you type is written to the database.
The one exception is deliberately not content. Cross-post detection — catching the same thing dropped into five channels at once — stores a short numeric fingerprint of a message, which cannot be turned back into the text, together with the channel and message id. Those rows are deleted after one day.
The dashboard
Signing in to the dashboard uses Discord OAuth. Guaca asks for two things: your account name and the list of servers you are in, so it can show you the ones you administer. It never posts as you, never reads your direct messages, and cannot see servers where it is not installed.
Who else touches the data
Three providers, each doing one job: Discord delivers the events and receives the replies, Supabase hosts the database, and Cloudflare runs the code and serves this site. Data is not sold, rented, or shared with anyone else, and there is no advertising or third-party analytics on this site.
How long it is kept
- Cross-post fingerprints: one day, deleted automatically.
- Everything else: for as long as the bot is in the server. Removing the bot from a server deletes that server’s rows, and every row that belongs to it goes with it.
- Backups are taken nightly and are overwritten by the following night’s copy.
Getting your data deleted
Ask a server administrator, or contact the operator directly (below). Deletion removes your economy state, levels, inventory, streaks and birthday for that server. Moderation cases are the exception: a server’s staff may keep them, because a ban with no record of why is worse for the person it was applied to than for anyone else.
Children
Guaca is used through Discord and follows Discord’s own minimum age for your country. If you are below it, you should not be using Discord, and by extension not this bot.
Changes and contact
If this policy changes, the date at the top changes with it. For anything here — a question, a deletion request, or a correction — write to info@aguacatech.io, or contact luig1987 in the aguacatech Discord server.