Who we are
Phase & Cipher is a small development team that builds and hosts Discord bots. Easiest way to reach us is our Discord server. That's also where to send anything privacy related.
Policies for our public bots
Vybe, Astro and CashFlow each have their own privacy policy, because what they do is genuinely different. If you are here about one of them, read its page rather than this one.
This page still covers the custom bots we build and host for clients.
What CashFlow stores
CashFlow is our economy bot. It stores the bare minimum needed to keep balances between restarts, and every server's data is kept separate so nothing crosses over.
| Data | Why |
|---|---|
| Your Discord user ID | To know which balance belongs to you |
| The server's ID | To keep each server's economy separate |
| Wallet and bank balances, daily streak, inventory | The economy itself |
| Command cooldown timestamps | To stop commands being spammed |
| Crew membership, bounties, shop items, lottery entries | The features that use them |
CashFlow does not read, store or log message content. It only sees the commands you run. No email, no IP address, and nothing from outside the server it's in. The dashboard does keep your Discord username and avatar reference, so a row can show who it belongs to instead of a raw ID. Full detail is in the CashFlow privacy policy.
Ordering a custom bot
To check out you sign in with Discord. That gives us your Discord ID, username, avatar, your email address if Discord has verified it, and the list of servers where you can manage the server, so you can pick which one the bot is for. We don't get your password and can't read your messages.
With your order we keep what you type at checkout (the server, what the bot should do, your contact email), the PayPal order and payment ID, the amount and the time. We use it to build your bot, open your order ticket in our Discord, give you the Customer role and keep a record of who paid for what. Card details go straight to PayPal and never reach us.
Order records are kept for as long as we host your bot and for tax and refund questions afterwards. Ask in our Discord if you want yours removed once that's over.
What custom and managed bots store
A bot we build you can include moderation, tickets and reporting. What applies depends on which features your server turns on.
| Data | Why |
|---|---|
| Moderation records: warnings, strikes, bans, the moderator and reason | So your staff have a case history |
| Ticket contents and transcripts | To run support tickets and keep a record |
| Application and form answers | Staff applications and similar |
| Message log buffer (see below) | Evidence for the report feature |
About message logging
If your server turns on reporting, the bot keeps a rolling buffer of the most recent 1,000 messages per person, per server. For each message it holds the text (up to 1,500 characters), any attachment links, the channel, and the time. It's there so that when someone gets reported, staff can see the context around it, including messages that were deleted after the fact.
The buffer is capped. Once it hits 1,000 messages for someone, the oldest one drops off. It only ever gets shown when a report is filed against that person, and only to that server's staff. It doesn't go anywhere else.
Don't want it? Say so and we'll turn message logging off on your bot. It's a feature, not a requirement.
Verifying in the PCD Discord
To join our own Discord server you verify on verify.pcdev.dev, signing in with Discord or using the link our bot gives you. That page records fingerprints of the network you connected from, your browser (a random id kept in a cookie and in your browser's storage on that site) and your device (screen, graphics, fonts and language settings), each run through a keyed hash. The key only exists inside the verification service, so nobody can read it, our team included, and the fingerprints can't be turned back into your address or device details. VPNs, proxies and automated browsers are turned away before anything is recorded. Your IP address itself is never stored or logged by us.
We use the fingerprint for one thing: spotting a second account from the same network, so someone who's banned can't just come back on an alt. If your account shares a network with a banned account, it is banned too (you can appeal). If it shares one with an account in good standing, our staff see the two Discord accounts side by side and decide. Staff never see the fingerprint, only which accounts matched. Like any website, Cloudflare, who host it, handles your connection on the way in.
What we never do
- We don't sell your data or hand it to advertisers
- We don't use it to train AI models
- We don't read messages in servers our bots aren't in
- We never see your card details. The payment provider handles that, and all we get told is that you paid
Where it is kept
Bot data sits as files on the servers we rent to run them, and only our team can get at it. This website is on Cloudflare Pages, which serves static files and doesn't track you.
How long we keep it
- Message buffer: the last 1,000 messages per user per server, rolling. Older messages are discarded automatically as new ones arrive.
- Economy data: kept while the bot's in your server so balances survive restarts.
- Moderation and ticket records: kept until your staff delete them.
- PCD Discord verification: network fingerprints are kept while you are a member and after a ban, so the alt check keeps working. Ask and we will delete yours.
- If a bot is removed from a server: tell us and we'll wipe that server's data. We'll also delete it on request, any time.
Getting your data removed
Open a ticket in the Discord and ask. Say whether you want just your own data gone or the whole server's, and we'll take care of it.
Contact
Anything privacy related: discord.gg/S5usAfJZ5Q.