Privacy Policy

Karmanet is operated by a single individual based in the Netherlands. It is not a registered company. Throughout this policy, "we", "us", and "Karmanet" refer to that individual, who acts as the data controller for the information described below.

Our official address for any request — privacy questions, access or deletion requests, or anything else — is [email protected]. You can also reach us on Discord: username f16usa_rahhh, User ID 470841705772613663.

We only collect what Karmanet needs to work. Depending on how you use the service, this can include:

• Your public Discord profile: Discord ID, username, and avatar URL, obtained through Discord OAuth2 when you sign in;
• Your email address, if Discord shares it with us during sign-in — used only to identify your account and to receive payment confirmations, never to contact you outside Discord or our payment providers;
• A website session token that keeps you signed in; Discord OAuth access and refresh tokens are never stored;
• Guild (server) IDs, names, icons, member counts, and owner IDs of Discord servers that use the bot or that are looked up through it — including servers without the bot, resolved from an invite link you provide or through our partner Mulifen's public directory;
• Your votes and endorsements, the text of any review you write, and any evidence you submit when disputing a review;
• Your IP address and browser user agent, recorded together with votes, reviews, and admin actions for fraud prevention and accountability;
• A one-way, unreadable hash of your Discord ID or IP address, used only to count profile views once per person per day without storing who viewed what (see "How Long We Keep Your Data" below);
• Records of moderation actions (AI-issued warnings, mutes, bans, disputes) and of purchases (payment status, amount, and provider reference — never your card number, CVC, or wallet keys, which we never receive);
• Cookies: a session cookie to keep you signed in, one that remembers your chosen interface language, and one that remembers your cookie-banner choice. We do not use advertising or third-party analytics cookies.
• When you sign in with Discord and grant the guilds permission, we temporarily request your full Discord guild list only to identify guilds you own. We immediately discard every guild where you are not the owner, never store that list or the OAuth access token, and save only the minimal details of your owned guilds;

Under the GDPR, we rely on the following legal bases:

• Performing our agreement with you — creating your profile once you opt in, recording your votes and reviews, and processing your Karmanet Pro purchase. Voting on a Discord server is technically unavailable without an activated profile: by casting a like, you agree that your Discord ID, username, avatar, and the time of your vote become visible to that server's owner if they generate an API key (see "Who We Share Data With") — this is an inherent part of how server voting works, not a publication of your profile;
• Our legitimate interest in keeping Karmanet trustworthy — detecting fraud and vote manipulation, preventing abuse, and maintaining a security audit log — weighed against your rights and freedoms;
• Your consent — for non-essential cookies and for making your personal profile publicly visible, which you can withdraw at any time.

Before a review is published, its text is sent to Google's Gemini API to automatically check for toxicity, harassment, and spam. Google processes this text on our behalf, under its own API terms, and does not receive your Discord identity as part of this check — only the review text itself.

This automated check can result in a warning on your account and, after repeated violations, a temporary or permanent ban. You can dispute an automated decision the same way you dispute any review — see our Terms of Service.

We share data only with the services that make Karmanet work:

• Discord Inc. — the identity and messaging platform Karmanet is built on;
• Google (Gemini API) — automated moderation of review text, as described above;
• Polar.sh and NOWPayments — our payment processors for Karmanet Pro; each is an independent controller for the payment data it collects directly from you;
• Mulifen — a partner service we query to look up public information about Discord servers that don't have our bot installed;
• Our hosting provider — the server, located in the Netherlands, that runs Karmanet and stores its database.
• The owner of a Discord server you liked, if they generate an API key for it: they can retrieve your Discord ID, current display name and avatar, and when you liked their server — for example, to run a giveaway. This never includes dislikes, never votes on user profiles, and never your IP address; the like itself already counts toward that server's public vote total.

We never sell your data, and we never share it with data brokers or advertisers.

Karmanet's own servers are located in the Netherlands, inside the EU/EEA. Some providers listed above, such as Discord and Google, may process data outside the EEA under their own safeguards (for example, the EU Standard Contractual Clauses); please refer to their respective privacy policies for details.

We keep data only as long as it serves the purpose it was collected for:

• Your profile, votes, and reviews — for as long as your profile exists, or until you ask us to delete them;
• IP addresses and user agents linked to votes, reviews, or admin actions — 90 days, then permanently cleared;
• The hashes used to count profile views, and the daily secret used to create them — deleted within about 48 hours; only the resulting anonymous daily view count is kept afterward, indefinitely, because it identifies no one;
• AI moderation performance logs (response time and outcome, never the review text itself) — 30 days;
• Confirmed payment records and moderation actions (bans, strikes) — kept even after a deletion request, because they are our only record for preventing repeat abuse and accounting for payments already made.

Server profiles are public by default, since servers are public entities. Your personal profile, however, stays hidden from search, leaderboards, and other users until you explicitly turn on visibility in your profile settings. You can turn visibility off again at any time, except for a short cooldown right after you cast a vote or post a review — this exists so the setting can't be used to dodge accountability for something you just did. This does not undo likes you already cast on servers: they already counted toward that server's public vote total, and turning off profile visibility does not retroactively revoke any access a server owner may have gained through an API key (see Section 5).

You have the right to:

• Access — request a copy of the data we hold about you;
• Rectification — ask us to correct inaccurate data;
• Erasure — ask us to delete your data (the "right to be forgotten");
• Restriction & objection — ask us to limit, or object to, processing based on our legitimate interest. Note that since fraud-prevention checks (IP address and user agent on votes and reviews) are required to protect the platform from manipulation, successfully objecting to them may mean we can no longer accept new votes or reviews from you;
• Portability — receive your data in a structured, machine-readable format;
• Withdraw consent — for anything we process based on your consent, at any time, without affecting past processing.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the supervisory authority in your own EU country.

Karmanet follows Discord's own age policy: our service is intended for people who are at least 13 years old, or the minimum age required by the law of their country, whichever is higher. We do not knowingly collect data from anyone younger than that.

We may update this policy as Karmanet changes. The effective date at the top always reflects the latest version; if a change is significant, we'll announce it in our official Discord community.