Firekeepr privacy policy

Last updated: 2026-10-09 (version 1.13.2)

Firekeepr is a Discord bot that runs games and chat and checks in on how a server is doing. This page says what it stores, what it doesn't, and how to delete it. The rules for servers that add it are on the terms page.

Firekeepr is for people old enough to use Discord (13 or older, or the minimum age where you live).

What Firekeepr stores

Discord IDs: server, channel, message and user IDs (the ID of who posted a message, who joined or left, and who voted in a game).
Activity metadata: when each message was posted, whether it was a reply and to whom, and which channel or thread it was in. Member join and leave times, and how many members have each role. When the bot joins a server it reads this metadata from the last 30 days of public channels (mods can ask for up to 120), never the text.
Voice time: when a member joined and left a voice channel, and which one (for stats). Nothing said or streamed in voice is heard or recorded, and the AFK channel isn't counted.
Activity roles and counter channels (only where mods set them up): which members the bot gave an activity role to, and which channels it uses as counters.
Server structure: channel and role names, and the server's onboarding settings when the bot can read them.
Memory notes (only where a server turns memory on): up to five short lines per member, like "plays modded Minecraft", and up to eight about the server, like running jokes or regular events. Never quotes, and never anything about health, religion, politics, sexuality, ethnicity, age, location, school, contact details or money.
Souls (only where a server turns them on): each member's play-money balance, daily-claim streak, any bloodstain from a broken streak, and a log of what changed it (daily claim, games, chat, bloodstains, or a mod's change, with that mod's ID). For chat Souls the bot counts that you posted, never what you wrote.
Opt-outs: the IDs of members who used forgetme, so the bot keeps leaving them out.
Bot data: audit reports, posts the bot drafted for mods to approve, game questions and votes, the server's settings, the server owner's notes about the server, and how much the bot spent on AI for each server per day.

What Firekeepr doesn't store

Message text. By default the bot reads a message only to check whether it starts with its command prefix or mentions it, then drops it. Where a server turns on proactive chat or memory (see below), messages are held in memory for up to two hours and then dropped; they are never written to disk.
Usernames, nicknames, avatars or direct messages.

Chat

When you @mention the bot to chat, what you wrote and the last few messages of that conversation are sent to Anthropic's Claude API to write the reply. The conversation is kept in memory for up to 30 minutes and is never written to disk.

Proactive chat and memory (off unless a server's mods turn them on)

Proactive chat: the bot keeps the last few messages of each public channel in memory for up to an hour. When a post nobody answered for 3 minutes is a question, a call to play or a real remark (picked by simple word rules, nothing sent anywhere), or a new member's first message gets no reply, those messages are sent to Anthropic's Claude API, which may write one short reply. A lone "hey guys" gets a hello back with no AI. It never pings anyone when it does. At most once per channel every 20 minutes and once per member every 4 hours.
Reactions: where they're on, the bot checks messages in memory for laughs, wins and hype with simple word rules (nothing is sent anywhere) and sometimes adds an emoji.
Conversation starters post a question from a fixed list in a channel that has gone quiet. They use message counts only, not message text.
Memory: about once an hour, the last hour of public-channel chat is sent to Anthropic's Claude API to update the short notes above, and the text is dropped. Short messages like "lol" or a link aren't sent. This goes through Anthropic's Message Batches API (half price); the bot deletes each batch at Anthropic as soon as it has read the result, and only a batch id and member ids wait in its database meanwhile. The notes are used to make the bot's replies more personal.
A reply to one of the bot's messages is answered like a mention. Where proactive chat is on, so is a message that says the bot's name ("firekeepr"), and so are up to four more messages from someone the bot just answered, sent in the same channel within 2 minutes before anyone else talks there.
To see whether this helps, the bot logs when and in which channel it posted or reacted unprompted (no text, no member ids) and counts whether anyone posted in that channel in the next 10 minutes. The weekly report is counts only and leaves out members who opted out.
Mods choose which of these happen, where, and at what hours, with speak or the settings menu.
Private channels are never read for either. The bot always shows as a bot.
Your controls: memory shows what the bot remembers about you, forgetme deletes it and stops the bot remembering you or starting chats with you, and optin undoes that. Mods can view and clear the server notes with memory server.
Message content is never used to train AI models. Anthropic does not train on API data by default.

Under 18

Wherever the bot can read a message, if someone says they're under 18, the bot remembers that in memory only (never on disk, gone on restart) so it doesn't trash talk them.

Audits and drafted posts

An audit sends Anthropic's Claude API a snapshot of counts (messages, posters, replies, joins, busy hours), channel and role names, the server owner's notes and the last audit's headline numbers. When a mod asks the bot to draft a post, poll or event, their request, the channel names, the owner's notes and a few headline numbers are sent the same way. Neither ever includes message text or member names or ids.

Stats anyone in the server can see

u, leaderboard and serverstats show counts built from the activity metadata above: how many messages a member posted, their time in voice, their rank, their busiest channels and hours. Only public channels count, and members who used forgetme never appear. Mods can export the same counts as a CSV of member IDs. A leaderboard for one role reads the server's member list from Discord (ids and roles only, kept in memory for 30 minutes). A "top chatter" counter shows that member's display name in a channel name.

Souls are play money

Souls can't be bought, sold, cashed out or swapped for anything real, and members can't send them to each other. They exist only inside the server where they were earned. Mods can give, take and reset them.

Reports to the bot's operator

The person running Firekeepr can have it report to their own tools: an uptime ping, a daily summary, and short events (the bot started, a server added or removed it, a server's member count passed a milestone, the weekly pulse numbers, AI spend nearing its cap, a burst of errors, an update). These carry server IDs, server names and counts only, never member IDs, names or anything anyone wrote.

How long, and how to delete

Member notes are deleted after 90 days without new notes, and when the member leaves the server.
Your own data: forgetme deletes your notes, your activity records and voice time, your game votes and your Souls in that server, and the bot stops recording you there. optin undoes it from then on.
Activity metadata, voice time, records of members who left (with their Souls), games, votes and the Souls log are deleted after 120 days. Audit reports are deleted after 120 days too, except each server's latest, which the next audit compares against.
A server administrator can delete everything for that server at any time with /firekeeper forget. The opt-out list is kept, so members who used forgetme stay unrecorded, and old messages are not re-imported afterwards.
Removing the bot from a server deletes everything stored for that server after 7 days, unless the bot is added back in that time (so an accidental kick doesn't lose the history).
The database is backed up each night and each backup is kept for 7 days, so anything deleted is gone from the backups 7 days later too.

Where it lives, and who sees it

The bot and its database run on one server in Helsinki, Finland (EU), at Hetzner.
Text sent for chat, memory, audits and drafts goes to Anthropic's Claude API in the United States, only to write that reply or report.
Nothing is sold, rented or shared for advertising. Nobody else gets the data.
The Firekeepr website sets no cookies and runs no tracking or analytics.

Changes

When this policy changes, the date at the top changes and the change is listed in the changelog. Big changes are announced in the Krunk Discord server first.

Questions and requests

Ask in the Krunk Discord server, or email ceo@krunk.site. For a copy or deletion of your data that the commands don't cover, email with your Discord user ID and the server's name.