Privacy

What the server keeps

• Your email address, handed over by the service you sign in with: for account notices, emails about moderation, and support. Only whoever runs Maplecord can see it. You can give a different address to be written to in Settings; the one from your sign-in is kept too.
• Which service you signed in with, and your account's ID there: so the same sign-in opens the same Maplecord account next time.
• Your profile: names, about me, pronouns, colours, picture, banner, nameplate, and the decoration and effect you wear, so other people can see it.
• Your friends, the servers you are in, your roles and nicknames, and your settings that follow you, so they are there on every device.
• Messages and files you post in ordinary channels and direct messages, for every device you use and for anyone who was offline when something was sent. Message text is encrypted where it is stored; our server decrypts it to deliver it and to search it.
• Accounts you link (Settings, Connections): that account's name and ID, encrypted, so its name can show on your profile. The server keeps no access to that account, and unlinking removes both.
• Your roll totals, your friend link, and the emojis, stickers and sounds you upload.
• Which version of the terms you agreed to, and when.
• Reports you make, and reports about you, with what was decided. A report shows whoever handles it what was chosen and written, who reported, and the picture reported, even one from a direct message or a private server.

Files are kept on the server's own disk or, if whoever runs it chooses, in a storage service such as Cloudflare R2. Either way your app only ever fetches them from the Maplecord server. Emails are sent through an email provider.

How long

These are this server's settings right now. Whoever runs it can change them, and this page always shows them as they are.

• Uploaded files are kept until the message they are on is deleted.
• A link to an uploaded file stops working within two days. The app gets a new one by itself for anyone who can still see the channel.
• When you were last online: the latest time only. Only whoever runs Maplecord can see it.
• Events on a calendar are taken off 24 months after their day, with the answers to them. Upcoming events are never taken off.
• Profile pictures, banners, nameplates and your own animations are replaced when you upload a new one; the old file is deleted.
• A picture removed by a moderator is kept out of sight for 60 days, in case removing it was a mistake, and then deleted. One taken down for child safety is set aside for reporting and, once reported, kept for at least one year after the report, as the law requires, or longer if the authorities ask.
• Reports, and what was decided about them, are kept, as is a log of what whoever runs Maplecord did in the admin panel, so decisions can be looked at again.
• Everything else is kept until you remove it or delete your account.

Backups. The server backs itself up once a day and keeps the last 7, so something deleted can stay in a backup for up to 7 days after it is gone from the server. A backup holds the database (accounts, messages, settings) and small pictures such as profile pictures and server icons. It does not hold files attached to messages, or anything set aside for a child-safety report.

What the server never has

• Your password. You sign in at Google, GitHub or another service, in your browser. The app never sees a password and the server never stores one.
• Your ID or your face. There is no ID check and no face scan.
• Voice, video and screen sharing. They are encrypted by your app before they leave it. The relay that carries them cannot hear or see them. Maplecord does not record calls; anyone in a call can record what reaches their own device.
• Anything posted in a P2P channel, and files sent straight from your computer: they go between people's apps and are kept only on their own devices.
• Your IP address, kept. It is used to connect you and, for a short time, held in memory to stop floods of requests. The Maplecord server does not store it with your account. Connecting P2P shows it to the people you connect with.

No ads. No trackers. We do not sell anything about you.

The app connects only to:

• the Maplecord server you are signed in to;
• its relays, which carry voice, video and screen sharing;
• other people's apps, in P2P channels and calls;
• GitHub, where the desktop app downloads its updates from;
• Google, GitHub or whichever service you sign in with, in your browser, when you sign in.

What is checked, and how

• Pictures going somewhere public (public servers, profile pictures, banners, nameplates, server icons and banners, emojis and stickers) are checked by a program on our server as they are uploaded. One it is very sure is explicit is refused, and you are told why; one it is fairly sure of goes up and is flagged for a person to look at. A moving picture is checked at several frames.
• Pictures in direct messages and private servers are not checked by the server. Your own app looks at pictures before showing them, to blur any that may be explicit or revealing (Settings, Status & privacy; on unless you switch it off). Nothing is sent anywhere for that.
• Public pictures and sounds may also be looked over by a checking tool that whoever runs Maplecord gives a link. It can only flag something; a person decides what happens, except that something flagged as sexualising a child is taken down at once and set aside to be reported.
• Nothing else is watched. Messages, voice and video are not monitored; problems are found when people report them.

What whoever runs Maplecord can do

• Look into a server to deal with a problem: they join it for an hour at a time, with every permission. It is not hidden: they are in the member list for as long as they are there, and each visit is logged. P2P channels are not kept on the server, so there is nothing of them there to read.
• See what is reported, as described above.
• Put an account right: change a username, remove a display name or nickname, set the email address an account is written to; suspend, ban or delete an account; stop it uploading pictures or keep it out of public servers. When a picture of yours is removed, or your account is suspended or banned, you are emailed what was done and why, except for anything taken down for child safety.
• Report to the authorities as the terms describe: child sexual abuse material to NCMEC, as the law requires, and serious crimes or danger to life when that calls for it.

Leaving

You can delete your account yourself, in Settings under My account. Your profile, your sign-in, your friends and the servers you own go with it. What you wrote in other people's servers stays, shown as written by "Deleted user".

One thing nobody can undo: anything removed from the server can still exist in any app that had already seen or downloaded it.

Questions

Write to [email protected].