KippDashboardKipp Security Data Policy
Effective: October 3, 2026
This page covers how long Kipp keeps each kind of data and how to delete it. The Privacy Policy explains what Kipp collects and why.
How long data is kept
| Data | Kept for |
|---|---|
| Chat security events (who sent a message, when, and where, never the text) | 1 day |
| Other security events (deletes, bans, permission changes) | 90 days |
| Automatic actions, resolved incidents, released quarantines | 180 days |
| Server analytics: per-member counts | 90 days |
| Server analytics: daily totals | 400 days |
| Web check fingerprints | 180 days |
| Invite tracking (who joined with which invite, and who made it) | 180 days |
| Launch perk record (who added Kipp in its first 30 days) | Until you ask for deletion |
Feedback sent with /about feedback (encrypted) | Until the Kipp team has dealt with it |
| Dashboard sessions (only a hash of the session id is stored) | Until sign-out, 7 days after the last visit, or 30 days at most |
| Updates page posts | Until the Kipp team deletes them |
| Updates comments, likes and reviews | Until you or the staff delete them |
| IP addresses on comments (encrypted) | 30 days |
| Comment bans | While active; a lifted ban keeps who and why, but not the address |
| Comment moderation log | 1 year |
| Own-bot tokens (Kipp Plus, encrypted) | Until the owner removes them, or the server's data is deleted |
| Member reports (reason and message copy encrypted) | Until the server deletes its data |
| Status page health checks (no personal data) | 24 hours, in memory only |
| Admin panel log (Kipp team actions) | 1 year |
| Kipp Plus redemptions (your id, the server, dates) | Until you ask for deletion |
| Kipp Plus receipt claims (your id, the server, the plan, the decision) and codes | 1 year after they're decided, used or revoked |
Receipt pictures sent with /plus claim | Kept in the Kipp team's private channel until the team deletes them |
| Website rate-limit records | About 1 minute, in memory only |
| Settings, cases, staff notes, backups, tickets, applications, appeals, member reports, network bans, the settings audit log | Until the server deletes them, or its data is deleted |
| Threat database entries | Until cleared on appeal |
Clean-up runs every 6 hours.
Deleting data
- Everything for a server: the owner runs
/data reset scope:everything, or uses Your data on the dashboard. It's deleted at once and can't be undone. - Just the settings:
/data reset scope:settings. History is kept. - When Kipp leaves a server: everything for that server is deleted 30 days later, in case Kipp was removed by mistake or by an attacker.
- Your own data: email [email protected] or ask in the support server. We delete your user record, your web check fingerprints and anything not tied to a server's moderation history within 30 days. Moderation records a server keeps about its members belong to that server: ask its owner.
- Threat database: entries protect every server, so a server's reset doesn't remove them. Anyone can appeal an entry by email or in the support server; appeals are reviewed within 14 days.
Encryption
Private text (staff notes, case reasons, appeal answers and review notes, application answers, ticket topics, feedback, threat reports, network ban reasons, member reports and comment IP addresses) is encrypted in the database with AES-256-GCM.
Where it's stored
Kipp and its database run on Amazon Web Services in N. Virginia, United States (us-east-1).
Backups of Kipp's database
If the operators keep database backups, deleted data disappears from them as they rotate, within 30 days.
Questions: email [email protected] or ask in the support server, https://discord.gg/8VHNkm4yU6