What GuildKeep stores

GuildKeep backs Discord servers up, restores them, and runs an optional verification gate for new members. This page is about the second part — what happens to a member's data.

If you verified to join a server

What is kept, for that server only:

• Your Discord user ID.
• The outcome — passed, held for review, or failed — and the time.
• If that server turned the connection check on: a risk score from 0–100 and a category such as vpn, datacenter or clean.

What is not kept:

• Your IP address. When the connection check runs, your address is sent to the reputation provider and discarded in the same operation. It is never written to a database or a log. Server moderators can see the score and category; they cannot see your address, your location, or your ISP.
• Your email address — GuildKeep never requests that permission from Discord.
• Your messages, your other servers, or your friends list.

The optional re-invite token

Some servers offer a checkbox letting them re-invite you automatically if the server is raided and rebuilt. It is off unless you tick it, and verification works exactly the same if you leave it alone.

If you do tick it, GuildKeep stores one Discord refresh token, encrypted with AES-256-GCM under a key held outside the database. It grants a single permission — guilds.join — scoped to adding you back to that one server. It cannot read anything, post anything, or add you anywhere else.

You can revoke it at any time, without asking that server's staff, by removing GuildKeep from Discord's Authorized Apps settings. That invalidates the token immediately.

If you are in a server that gets backed up

A backup captures the server's structure — channels, roles, permissions, emojis, bans, settings — and a capped number of recent messages per channel, which include the author's name and ID. Attachments are stored as the links Discord issued, not copied. Server administrators choose whether to back up messages at all, how many to keep, and when to delete what exists.

Removing your data

A server's owner can delete everything GuildKeep holds for that server, from the dashboard, in one action — the database rows and the stored payloads together. To have your own records removed from a specific server, ask that server's owner; they have the button. Revoking the app in Discord, as above, removes any stored token straight away.

GuildKeep is self-hosted software: the server you joined is run by whoever installed it, and they are the ones holding this data. This page describes what the software does with it.