1. What Traply is

Traply Security ("Traply", application ID 1514666705442443355) is a security and moderation application for Discord. Its core feature, ScammerTrap, helps communities detect and neutralize scam, phishing and compromised-account activity in real time, alongside a suite of moderation and utility commands.

2. What data we process

Traply processes the minimum data required to deliver its features:

• Server configuration — guild, channel and role IDs, feature toggles and settings chosen by server administrators (e.g. ScammerTrap honeypot channel, trap whitelist, slowmode schedules).
• Invite records — invite codes and usage counts, used for invite tracking.
• Security counters — aggregate statistics (detections, punishments, protected servers/members) used for the public status pages.
• Message content (in-memory only) — message text is scanned live, in volatile memory, to detect trap-triggering content (scam/phishing patterns) and for short-lived moderator review tools (/snipe, /editsnipe, /ghostping). This cache is automatically purged every 30 minutes and is never written to any persistent store.
• Security event logs — when a trap triggers, an event log (user ID, action taken, and an excerpt of the flagged message) is posted to configured moderation log channels on Discord.

3. What we never do

• We never store message content in a database or any off-platform system.
• We never sell, rent or share user data with third parties.
• We never use message content or member data to train machine-learning or AI models.
• We never profile users for advertising or marketing purposes.

4. Retention & deletion

• In-memory moderation caches are purged automatically every ~30 minutes.
• Server configuration and configuration-linked records persist while the server keeps the corresponding features configured; removing or editing a configuration removes the linked record.
• Removing Traply from a server stops all data collection for that server immediately.
• Server owners may request full deletion of their server's stored configuration at any time via the Support Server or the developer contact below.

5. Security

Stored configuration data lives in an access-controlled database reachable only by the Traply application. Credentials are never exposed in code, logs or the website.

6. Your choices

Server administrators control Traply's monitoring on their server: ScammerTrap operates only in channels where it is explicitly configured, and features can be disabled at any time. Removing the bot from your server ends all processing for that server.

7. Changes to this policy

If this policy changes, the updated version will be published at this URL with a new "Last updated" date.

8. Contact

Questions or deletion requests: reach us on the Traply Support Server or contact the developer directly on Discord (@virouh).