Privacy

Sigil lets you build a public profile card. This page says, in plain words, what we keep and who can see it.

What we get from Discord

When you sign in with Discord we ask for your basic identity only. We keep your Discord id, your username and the code of your Discord avatar, the day you first signed in to Sigil (your card shows it as "Joined") and when you last signed in. We don't ask for your email address, your servers or your messages.

What you add

Everything you choose to put on your profile: display name, bio, tags, social handles, any text you write in a Text box, avatar, page background, fonts and colors, the layout of your card and any pictures you upload. If you add a song, we keep only which song it is (for example a Spotify song id), not the link you pasted.

Who can see it

Your card is public. Anyone with the link (/u/ followed by your Discord username, or your Discord id) can open it, signed in or not. We ask search engines not to list it, but that is a request, not a lock.
Pictures are unlisted, not private. Each picture has a long random address. Nobody can guess it, but anyone who has it, or who opens your card, can see the picture. Only upload pictures you're happy to share.
Your friends list is shown only if you add a Friends box to your card. Your friends can also see that you're friends.
The home page has a Featured cards section that can show screenshots of public cards. If you'd rather yours wasn't shown there, contact us and it will be taken down.
To keep Sigil safe and running, the person who runs Sigil can see a list of accounts (name, Discord username and id, whether you have Premium, the day you joined and the day you last signed in) and of the servers the bot is in (name and size only). This is for safety and monitoring: spotting spam, abuse and other bad actors, following up reports, and checking that the site and the bot are working. It is not sold, shared or used for advertising. It never shows your bio, tags or messages, and it doesn't list the people in the servers the bot is in.
Friend requests are seen by the person you send them to. If someone declines, they aren't told, and neither are you.
Your tags, bio and other profile details are visible to anyone who can see your card. So is the date you joined Sigil, and, if you have Premium, a small gem next to your name.

The Discord bot

Anyone in a server with the Sigil bot can use /profile to show your card there. It shows what your public card already shows, nothing more.
Matching is opt-in. We keep whether you switched on "Let /matchme suggest me". While it's off, /matchme can't search for you or suggest you. Comparing two named people only uses what both public cards already show, and works either way.
When someone uses /matchme in a server, the bot checks, one person at a time, whether the people who switched matching on are members of that server, so it only suggests people from there. It doesn't keep a list of a server's members. It remembers each answer for a few minutes.
When /matchme suggests you, your display name and a link to your public card are shown to everyone in the channel where it was used (and never a ping). Nothing else about you is shown, and you can switch matching off at any time.
For each server the bot is in, we keep which channel that server's admins chose for welcome cards and who chose it, plus the server's name, how many members it has (just the number) and when we first saw it. We use that to see where the bot is, to check it is working, and to deal with servers that abuse it. It is deleted when the bot leaves the server.
If you use /lfg, or press Join on someone's post, we keep your Discord id, the game and note, and who joined. That is deleted about a day after the post ends. The message itself lives in Discord, where Discord's own rules apply.
The bot doesn't read your messages, and it doesn't keep a list of a server's members. It only learns that someone posted (who and where, never what was said), which is how Premium members' signature reactions work. We don't store anything about messages.
Quote cards. The one time the bot sees the words of a message is when someone right-clicks it and uses Sigil: Quote card. It draws that message as a picture and posts it in the same channel; the words aren't kept. You can switch quote cards off for your own messages on Edit profile.
The welcome message. When someone joins a server that has it on, the bot posts a hello that pings them once. If the new member opens What do you play? and presses Show me to others here, we keep the server's number, their Discord number, the game names they chose (only names from Sigil's own list) and the time. Their name is then shown next to those games to people in that server only. We remove it when they press Take me off the list, when they leave the server, when the bot leaves the server, and after 90 days. Welcome messages and their waves are kept for a week. If they later sign in to Sigil for the first time, their new card starts with those games; a card that already exists is never changed by this.
Entrance cards. If you're Premium and you switch your entrance card on, then when you join a server that has set up Sigil the bot posts your card there: a picture with the words and background you chose, your avatar and your name. For that, Discord tells the bot when someone joins a server. We don't keep a record of the servers you join. You can switch it off at any time, and a moderator can clear its words.

Premium, trials and gifts

We keep whether you have Premium and, when it was given for a limited time, the day it ends. When you start a free trial, or the person who runs Sigil gives you Premium for a while, we keep a short record of it: which account, what kind, when it started and ends, and for a gift the person's own note (only they see it). That record is only used to run the offers and answer questions about them.

If you pay for Premium, the payment happens on Stripe's page. We never see or store your card number. We keep only your Stripe customer and subscription ids, the state of the subscription (for example active or cancelled), and the day the period you have paid for ends, so we can give you Premium and let you manage or cancel it. What Stripe itself holds is covered by Stripe's privacy policy.

Reports and moderation

Anyone signed in can report a picture or a profile. Reports, including any note the reporter writes, are seen only by moderators. The person reported is not told who reported them. Moderators can remove a picture, an avatar or a background, and can stop an account from uploading pictures. Reports are kept as a record of what was done.

To keep Sigil safe, moderators and the person who runs Sigil can also erase text and pictures from a card (a bio, a display name, the words in a text box, social links, uploaded pictures, an avatar or a background) without waiting for a report, for example if it is abusive, hateful or illegal. Erasing is permanent. We keep a short log of it (who did it, whose card, what was removed, when, and the moderator's own note), which only the person who runs Sigil can read. Moderators cannot erase a developer's or another moderator's content.

Cookies

We use only the cookies the site needs to work: one that keeps you signed in, and small ones that protect forms from forgery and carry a message from one page to the next. There is no advertising, no analytics and no tracking.

Other companies

Discord handles sign-in, and your Discord avatar is loaded from Discord's servers.
Stripe handles payments for Premium, on its own page with its own cookies. It is only involved if you choose to subscribe.
Music players. If a card has a "My jam" box, the player is loaded from Spotify, YouTube (privacy-enhanced mode), Apple Music or SoundCloud. Those companies can see the visitor's address and may set their own cookies. The fonts on this site are hosted here and are not loaded from anyone else.

Pictures we keep

Uploaded pictures are re-saved by the site, which removes hidden details such as the location a photo was taken. A picture you upload but don't use on a saved card is deleted automatically after a day. Deleting a picture, or a preset that used it, removes it from the site.

Removing your data

You can delete your pictures, remove your background and avatar and empty your card yourself. There isn't a button to delete your whole account yet; to have it removed, or to ask what we hold about you, contact sigildev26@gmail.com .

The rules for using Sigil are on the Terms page.