Privacy Policy
Last updated 31 October 2026
The short version: we keep what's needed to run your account and deliver your messages. No ads, no selling data, no tracking cookies.
Who we are
Vaznor (vaznor.com) is run from Ireland by the operator named in our legal notice, who is the data controller. Contact: [email protected].
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Email, username, display name, password (stored only as a scrypt hash) | To make your account and let you log in | Contract |
| Profile: avatar, banner colour, about me, pronouns, status | Shown to other people, because you added it | Contract |
| Messages, files, reactions, servers, roles, friends and blocks | To deliver and show them to the people you share them with | Contract |
| Date of birth | Checked once at sign-up to confirm you're old enough. It is not stored. | Legal obligation |
| Session records (a random token's hash, browser name, last seen) | To keep you logged in and let you log out other devices | Contract |
| Network address | Briefly in memory to limit abuse (too many sign-ups or logins), and in server logs kept up to 14 days for security | Legitimate interest |
| Reports you make or that name you | To enforce the rules and keep people safe | Legitimate interest, legal obligation |
Who can see what
- Messages in a server: its members (and, for private channels, the roles allowed in). DMs and groups: the people in them.
- Your profile, username and online status: people who share a server or conversation with you. Choose Invisible to appear offline.
- Voice and video go directly between the people in a call (peer-to-peer), so they can see each other's network address.
- Vaznor staff only look at content when it's reported, when the law requires it, or to fix a problem you asked us about.
Service providers
- Our server host in the EU stores the database and files.
- Cloudflare sits in front of vaznor.com to protect it and deliver it quickly; it handles your traffic and network address.
- Cloudflare and Google STUN servers help voice calls find a route between participants; they see your network address when you join voice.
We don't use analytics, advertising or social-media trackers, and fonts are served from vaznor.com itself.
Cookies and storage
One cookie, vz_session, keeps you logged in. It's essential, so there's no banner. Your browser's local storage keeps preferences such as theme, collapsed categories, recent emoji and server order; they never leave your device.
How long we keep it
- Messages and files: until you, a moderator or the server owner deletes them, or the server is deleted.
- Account: until you delete it. Deleting erases your email, password, profile and friend list straight away; messages you left in other people's conversations remain, shown as from a "Deleted User". Delete messages first if you want them gone.
- Sessions: 90 days after you last used them. Server logs: up to 14 days. Reports: as long as needed to handle them and any follow-up.
Your rights
Under the GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to processing, and take it elsewhere. Most of this you can do yourself in User Settings; for the rest, email [email protected] from your account's address and we'll answer within a month. You can also complain to the Irish Data Protection Commission (dataprotection.ie).
Children
Vaznor is for people 13 and over. If you think a child under 13 has an account, tell us and we'll remove it.
Security
Passwords are hashed with scrypt, sessions use random tokens stored only as hashes, all traffic is encrypted, and files sent in DMs need an unguessable link. No system is perfect; if something goes wrong that affects you, we'll tell you and the regulator as the law requires.
Changes
We'll post changes here and tell you in the app about important ones.