Legal

Privacy Policy

Last updated: 24/05/2026 · Applies to the TicketDesk Discord bot, its dashboard, and ticketdesk.xyz.

1. Who we are

TicketDesk ("TicketDesk", "we", "us") is a Discord support-ticket service consisting of a Discord bot, a web dashboard, and the website at ticketdesk.xyz. TicketDesk is operated as a project of Aperra Network.

Operator / Imprint (§5 DDG):

2. Data we collect

We deliberately keep data collection to the minimum needed to run a ticket system.

Discord account data

When you log in with Discord or interact with the bot, we process your Discord user ID, username and display name, and avatar. When you log in to the dashboard, we receive the list of servers you are in (via Discord OAuth, scopes identify and guilds) to show the servers you can manage.

Server (guild) data

For servers where the bot is added, we store the server ID, name, icon, and the roles and channels that are relevant to ticket configuration and permissions.

Ticket content

Inside ticket channels or threads, we store the messages sent (text, author, timestamps, edits/deletions, attachment references and reactions) so the ticket and its transcript work. This may include any information participants choose to write in a ticket.

Transcripts

When a ticket is closed (or on demand), we generate and store a transcript of the conversation so staff and the ticket opener can review it later.

Support submissions

If you submit a bug report or request beta premium, we store what you send (title, description, the page you were on, your browser's user-agent, and the relevant server).

Technical data

We use a single session cookie (td_session) to keep you logged in, and we keep limited server logs for security and debugging. We do not use advertising or third-party tracking cookies.

3. How we use data

  • To provide the core service: creating, managing, and archiving tickets.
  • To authenticate you and show the servers and tickets you may access.
  • To produce analytics for server staff (e.g. ticket counts, response times) about their own server.
  • To respond to bug reports and premium-trial requests, which may include contacting you via Discord DM.
  • To keep the service secure and to diagnose problems.

We do not sell your data, and we do not use ticket content for advertising or to train third-party AI models.

4. Legal basis (GDPR Art. 6)

  • Performance of a contract / pre-contract (Art. 6(1)(b)) — to provide the service you or your server's administrators requested.
  • Legitimate interests (Art. 6(1)(f)) — to operate, secure, and improve the service, balanced against your rights.
  • Consent (Art. 6(1)(a)) — where specifically requested, e.g. optional features. You can withdraw consent at any time.

5. Sharing & processors

We share data only with service providers that help us run TicketDesk, acting as processors on our behalf:

  • Discord — the platform the service runs on; data is exchanged with Discord's API to function.
  • Our hosting / infrastructure provider — Hetzner, where the application and database run.

We do not sell or rent personal data. We may disclose data if legally required to do so.

6. Data retention

  • Transcripts are kept for a limited period (currently around 30 days for free servers; longer for servers with premium), then deleted automatically.
  • Ticket and configuration data are kept while the bot is in your server and you use the service.
  • If the bot is removed from a server, related data is deleted or anonymized within a reasonable period.
  • Bug reports and trial requests are kept while needed to handle them and for a reasonable record afterward.

7. Your rights

If you are in the EU/EEA, the GDPR gives you the right to: access your data; correct it; have it erased; restrict or object to processing; receive it in a portable format; and lodge a complaint with a supervisory authority. To exercise any of these, contact us (see below).

8. Deleting your data

You can request deletion of your personal data at any time by emailing [email protected] from, or referencing, the relevant Discord account. Server administrators can remove a server's data by removing the bot from the server. We aim to action verified deletion requests within 30 days.

9. Cookies

We use one strictly necessary cookie (td_session) to keep you logged in to the dashboard. It is not used for tracking or advertising. Without it, the dashboard cannot keep you signed in.

10. Children

TicketDesk is not directed at children. You must meet Discord's minimum age requirement for your country to use Discord and, therefore, TicketDesk. We do not knowingly collect data from anyone below that age.

11. Security

We take reasonable technical and organizational measures to protect your data, including access controls and encrypted connections. No online service can guarantee absolute security, but we work to keep your data safe and to limit what we collect in the first place.

12. Changes to this policy

We may update this policy as the service evolves (TicketDesk is currently in open beta). Material changes will be reflected by updating the "last updated" date and, where appropriate, an in-product or Discord notice.

13. Contact

Questions or requests about this policy or your data: [email protected].