Privacy policy

Last updated October 11, 2026. What Exposed keeps about you, why, and for how long.

Who looks after your data

This copy of Exposed runs on a computer controlled by its host, and your data stays there. It can serve several Discord servers; each server's data is kept apart from the others'. No one else receives its data or has access to it. Questions or requests about your data go to your server's admins, or to the host.

What Exposed keeps

Your Discord user ID and display name, when you use a Exposed button, reaction or command, or sign in here.
What you choose in Exposed: classes, gear score, ping roles, quiet hours and their time zone.
What you do in Exposed: boss timers you report, party finder registrations, and parties you start or join. Past parties are kept (with names) for the server's stats.
Activity logs: recent actions such as “Raelin joined a party”, shown to admins. Logs are deleted after 14 days by default.
Change history (admins only): every configuration change with the name of the admin or owner who made it, kept so it can be undone.
Sign-in: a cookie (exposed_session) that keeps you signed in for up to 12 hours. It is needed for the page to work. There are no tracking, advertising or analytics cookies.

What Exposed doesn't keep

The text of your messages. Exposed can delete chat in the party finder channel after a set time but never reads or stores it.
Your email, password or Discord login. Signing in with Discord only shares your user ID and name with Exposed (the identify permission); the access token is thrown away right after.
Your IP address, except briefly in memory to limit how fast requests can be made. The owner's password sign-ins are logged with their IP address.

Who can see it

You see your own data on My page. Your server's owners and admins see its members list, stats and logs, and nothing from other servers. The host can see every server's. Other members only see what Exposed posts in Discord channels, such as party listings and boss reports. When a server shares its party finder with another server, the party listings, sign-ups list and party status in both servers' party channels show your display name, class, gear score and server name to the other server's members too; pings and mentions stay in your own server. The other server's admins see your sign-ups and parties on their Party finder page, but you're not on their members list. Exposed doesn't sell or share data with anyone. If you're in two servers that use the same Exposed, each keeps its own record of you.

Services involved: Discord (where the bot runs and you sign in), and, if this page is reached through the internet, Cloudflare, which carries the traffic. Their own privacy policies apply to them.

How long it's kept

Your choices stay until you change them or an admin removes them. Activity logs are deleted after 14 days. Boss timers and party listings end on their own; past parties stay for the stats. Nightly backups of everything are kept for 14 days by default. Session cookies expire after 12 hours or when you sign out.

Your choices

Remove your roles, quiet hours and timers yourself on My page, or with the buttons in Discord.
Ask this server's admins to see, correct or delete what Exposed has about you. They can erase all of it in one step (Members → Forget this member): your choices, registrations and party seats are deleted, and your name is removed from boss timers, past parties and the logs. Backups age out after 14 days by default, and if one is restored before then, Exposed erases you again automatically. To do that it keeps only your Discord user ID and the date on a short "forgotten" list, which is deleted after the same 14 days.

Changes and contact

This policy may change; the date above shows when. For this server, contact its admins in Discord. For anything else, contact the host.