Discord image safety

This notice covers image fingerprint moderation in the StrandXR Discord. It is separate from the StrandXR app privacy policy.

What is checked

Eligible server image attachments are checked against known scam-image hashes, even without a bot mention or AI consent. Hashing makes no AI request. Image bytes are processed temporarily; they are not saved by this feature or sent to FingerprintHub or an AI provider.

A known match can delete the message and kick the member. Similar images posted by the same member across two channels within 15 minutes can produce a staff review. Staff approval saves a safety hash; it does not punish the original author retroactively. Bots, staff, moderators, the server owner and members at or above the bot’s role are exempt. Staff can disable enforcement when investigating a false positive.

What is kept and shared

FingerprintHub receives approved hashes, their recipe, category and action, the server ID and review provenance. Match reports contain the shared hash ID, server ID and match distance. It does not receive user or reviewer IDs, image bytes, filenames or source URLs.

The bot’s private cache stores safety hashes, categories, actions, shared IDs, server scope, active status and a sync cursor. Shared hashes remain until removed through the hub; queued local approvals remain until accepted or deliberately retired. The cache and approval queue together are limited to 100,000 rows.

Recent user, server, channel and hash metadata expires after 15 minutes and is limited to 10,000 entries. Pending staff reviews expire after one day and are limited to 500. Attachment deduplication receipts are limited to 10,000 entries and one day. Expiry is applied on the next message or periodic sweep. Restart clears these memory-only records and queued match reports.

Staff review cards contain a user ID and links to the original message and attachment. The bot does not re-upload the image. Discord keeps cards and moderation audit records according to staff and Discord retention policies; attachment links can expire.

Deletion and questions

The bot’s /privacy → Delete my data control clears your pending reviews and recent metadata, and clears attachment receipts. It does not remove shared safety hashes, Discord cards or moderation audit records. Contact the Discord staff to request review of a match or removal of a staff card.

Hub outages retain the last verified cache, so known matches can still trigger enforcement and remote removals cannot arrive until sync succeeds. Contact staff promptly about a false positive.