Privacy

What Lookout stores, why, and for how long. Last updated 3 November 2026.

Who we are

Lookout is a free hobby project, made and run by one developer in Denmark. That developer decides what is stored and is responsible for it. You reach us on the Support page.

We store data because we have a legitimate interest in making Lookout work for you and the servers that use it. We never sell your data, and we never use it for advertising.

What we store about you

We store your Discord name next to your ID in the places below, so leaderboards, lists and history can show who is who. We never store your email, your real name or your IP address.

What	Why	How long
Your Discord ID, name and level on servers that use rank cards	To show levels, rank cards and leaderboards	Until you delete your data, or the server removes Lookout
Your birthday, only day and month, with your ID and name	To celebrate it and show the birthday wall	Until you delete your data, or the server removes Lookout
Your coins, streak, badges and what you got in the shop, with your ID and name	To run Lookout Coins and the shop	Until you delete your data
Your coin history	So you can see what you earned and spent	90 days
Your poll votes (ID only) and giveaway entries (ID and name)	To count votes and draw winners	90 days after it ends
Suggestions you post (ID, name and text) and how people voted	So the server can vote and decide	180 days after a decision, or 1 year if nobody decides
Your reminders	To send them to you	Until they're sent, or you remove them
Your AFK message	To tell people you're away	Until you're back
That you have logged in on the website, with your ID and name	To count you as a community member	Until you delete your data
That you accepted the terms: your ID, the version and the time. Nothing else	To know you have agreed to the current terms	Until you delete your data
Your share link and how many times it was opened, as a plain number	To show you how it's going	Until you delete your data
A one-way code made from the Discord ID of a friend who logs in through a share link, using a secret key. It can't be turned back into the ID without our secret key	To pay share rewards only once per account	1 year, also if the friend deletes their data
If you asked to hear about a paid version: your ID	To tell you if it ever comes	Until you delete your data
If you move Lookout to another server: your ID and the two servers	To finish the move	1 day
When you last logged out, with your ID	So login cookies from before that stop working, also if one was stolen	8 days
Support messages you send, with your ID, name and the server you picked	To answer you	90 days
What you did with the bot or the dashboard, with your ID and name	To find problems and stop abuse. The people in charge of a server can see the changes made on its dashboard	30 days

What we store for servers

Only when a server uses the feature. When a server removes Lookout, everything about that server is deleted after 14 days.

What	Why	How long
Members' ID, name, avatar link, account age and risk signals, only on servers that use verification or the Radar alarm	To keep spam accounts and raids out	Until 7 days after the member leaves, or until the server turns both off
Who invited whom (IDs and names)	To show who brought in new members, if the server turns on invite tracking	Until 7 days after the member leaves
Ticket conversations, with the names of the person who opened and closed it	So the server's team can read closed tickets	90 days after it closes
Mod-mail conversations	So the staff can read and reopen them	90 days after it closes, or until staff delete it
Bans, kicks, time-outs and warnings, with names and the reason	So the server's team has a history	180 days
Raid and anti-nuke alarms, and who caused them	So the server's team can see and undo them	180 days after it ends
The server's owner, who added Lookout, and the team they invited (IDs, names and avatar links)	To decide who can use the dashboard	Until the server removes Lookout
Who made a custom embed, poll, announcement or giveaway (ID or name)	So the team can see who made what	Until it's deleted, or 90 days after it was sent or ended
Who unlocked a card design for the server (ID)	So the design stays unlocked	Until the server removes Lookout
Who owns a temporary voice room (ID)	So the owner can manage the room	Until the room is empty and deleted
What's playing in a voice channel, if the server uses music	To show the player on the dashboard	Until the music stops. Who asked for a song isn't saved
Settings, and counts of messages, joins and leaves per day. Just numbers, no message text	To run the features and draw the charts	Until the server removes Lookout

The website

There is no tracking, analytics or advertising on the website, and the fonts come from our own server. The front page counts visits as one plain number per day. The "here now" number comes from a random code each open tab makes for itself. That code is only kept in memory for 2 minutes and is never stored.

We only use the cookies we need for logging in, so there is no cookie banner:

lookout_session
Keeps you logged in. It's encrypted and holds your Discord ID, name, avatar, the access Discord gave us, and the share code if you came through a share link.
Kept: Until you log out, at most 7 days.
lookout_oauth_state
Protects the login against fake requests, and carries a share code to the login.
Kept: 10 minutes, while you log in.
lookout_invite_state
Protects adding Lookout to a server against fake requests.
Kept: 15 minutes, while you add it.

Who can see it, and where it lives

A server's owner, the person who added Lookout and the team they invite can see that server's data. The developer can see it too, to keep the service running.

Everything is stored on our own rented server at PebbleHost, in the United Kingdom. The UK is outside the EU, but the EU has decided that UK law protects personal data as well as EU law does (an adequacy decision), so your data has the same protection there. Backup copies are deleted after 7 days, and the server's own logs, which include IP addresses of visitors, are deleted after 7 days.

Discord is a separate company with its own privacy policy. Logging in only gives us your Discord profile and the list of servers you're on. We can't read your private messages. Auto-mod reads messages on servers that turn it on, only to check them, and doesn't store them. Pictures like avatars are loaded from Discord.

Music and voice commands only work on the developer's own test server. There, voice commands are off until you turn them on for yourself. In a voice channel the bot receives sound from everyone there, but Lookout only processes the voice of people who turned it on, on our own server, to catch the word "Lookout". Other people's audio is ignored right away and never saved, and the voice and text of those who turned it on are never saved either. Song searches are sent without your name to Apple's free music search and to SoundCloud, Bandcamp or Mixcloud, where the music is played from. If you paste a YouTube or Spotify link, we only look up the song's title there.

Your rights

You can delete your own data any time with the button on the Support page. That removes everything in "What we store about you", except the one-way share codes, the dashboard changes and when you last logged out, which run out on their own. Moderation history, tickets and risk checks on servers you're still on also stay until they run out, so nobody can erase their tracks or skip a server's verification.

On the Support page you can also ask to see a copy of your data or have something corrected. You can also object to how we use your data, or ask us to limit it, on the Support page.

If you think we handle your data wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk, or to the data protection authority where you live.