What we keep - kl3mta3/Maplecord GitHub Wiki

What we keep, what we don't, and why

Maplecord is free and runs on a small server with limited storage. We are more interested in letting go of your data than holding on to it. This page lists what the Maplecord server stores about you, what it never has, and the reason for each.

What the server keeps

What Why
Your email address, handed over by the service you sign in with Account notices and support. Only whoever runs the server can see it. You can give a different address to be written to in Settings; the one from your sign-in is kept too.
Which service you signed in with, and your account's ID there So the same sign-in opens the same Maplecord account next time. If you add another way to sign in, the same is kept for that one.
Your profile: names, about me, pronouns, colours, picture, banner, nameplate, the decoration and effect you wear So other people can see it, on every device.
Your friends, the servers you are in, your roles and nicknames, and your settings that follow you These are what you will ask for again the next time you open the app, on any device.
Messages and files you post in ordinary channels and direct messages For every device you use, and for anyone who was offline when something was sent. Message text is encrypted where it is stored.
Accounts you link (Settings, Connections): that account's name and ID So its name can show on your profile. Both are encrypted, the server keeps no access to that account, and unlinking removes both. A Battle.net name is removed by itself after 30 days unless you link it again.
Your roll totals: how many rolls, what they add up to, how many were a 100 or a 1, wins and losses So they follow you to every device. Only you are shown them.
Your friend link So the address and QR code you handed out keep working until you make a new one.
Emojis, stickers and sounds you upload So they show in the servers they are on, and you can add them to others. Deleting one from your library deletes it everywhere.

Files are kept on the server's own disk or, if whoever runs it chooses, in a storage service such as Cloudflare R2. Either way your app only ever fetches them from the Maplecord server.

A request sent with the form on maplecord.app is not kept on the server: it is emailed to whoever answers them, with your email address so they can reply.

How long

  • Uploaded files are cleared off the server after a number of days that whoever runs it sets (30 to begin with; it can also be never). The message stays, and says a file was there. The server's privacy page, maplecord.app/privacy, always shows the number in force.
  • A link to an uploaded file stops working within two days. The app gets a new one by itself for anyone who can still see the channel. A link copied out of Maplecord, or kept by someone who has since left, goes dead.
  • When you were last online is kept, the latest time only. Whoever runs the server can see it; nobody else can.
  • Your answers to a community poll are kept so you cannot answer twice and can see them again. Whoever runs the server sees the totals, not who answered what.
  • Events on a calendar are taken off 24 months after their day, with the answers to them, unless whoever runs the server set another length. Upcoming events are never taken off.
  • Profile pictures, banners, nameplates and your own animations are replaced when you upload a new one; the old file is deleted.
  • Everything else is kept until you remove it or delete your account.

What the server never has

  • Your password. You sign in at Google, GitHub or another service, in your browser. The app never sees a password and the server never stores one.
  • Your ID or your face. There is no ID check and no face scan.
  • Voice, video and screen sharing. They are encrypted by your app before they leave it. The relay or stream server that carries them cannot hear or see them, and nothing is recorded.
  • Anything posted in a P2P channel. Messages and files there go straight between people's apps and are kept only on their own devices. See P2P.
  • Files sent straight to a friend with Send straight from your computer.

No ads. No trackers. The app loads nothing from anyone but the Maplecord server you are signed in to.

What stays on your own device

  • The desktop app keeps its own copy of pictures and videos it has shown, up to 2 GB with the oldest removed first, so they still show after the server has cleared them. A picture the moderators removed is deleted from it too.
  • The history of P2P channels you are in, encrypted.
  • Settings that belong to the device: sound, theme, which microphone, and so on.
  • Whether a picture in a message may be explicit or revealing. With Blur pictures that may be explicit or revealing on (Settings, Status & privacy; on unless you switch it off), each picture is looked at by a model inside the app before it is shown, and one that may be explicit or revealing (swimwear and underwear too) stays blurred until you click it. Nothing is sent anywhere for it.
  • If you switch it on, a voice report: the last ten minutes of how your calls went, held only while the app is open.

What whoever runs the server can do

  • Look into any server. They join it from the admin panel for an hour at a time, with every permission. It is not hidden: they are in the member list for as long as they are there, and each visit is logged. While there they can read what the server keeps, delete posts and manage members. They cannot delete the server or hand it to someone else.
  • P2P channels are not kept on the server, so there is nothing of them to read there. Anyone who connects to a P2P channel, an admin on a visit included, is handed its history by the apps already connected, as any member is.
  • Have pictures checked as they are posted somewhere public. A model on the Maplecord server looks at each picture posted in a public server, and at each profile picture, banner, nameplate, server icon and banner, emoji and sticker, as it is uploaded. Nothing is sent anywhere for it. One it is very sure is explicit is refused, and you are told why; one it is fairly sure of goes up and is flagged for a person to look at. Pictures in direct messages, private servers and P2P channels are never looked at. Your app checks a picture first too, before sending it somewhere public. Both can be wrong.
  • Have public pictures and sounds checked. They can give a checking tool a link to look over what everyone can see: profile pictures, banners and nameplates, people's own decorations and effects, server icons and banners, and emojis, stickers and sounds. Never messages, or files in messages. The tool can only flag something; a person decides what happens. Something flagged as sexualising a child is taken down at once and set aside to be reported. A picture removed after a flag is kept out of sight for a number of days whoever runs the server sets (shown on its privacy page), in case removing it was a mistake, and then deleted.
  • See what you report. You can report a picture, or a person, to whoever runs the server. They see what you chose and wrote, who you are, and the picture you reported, even one from a direct message or a private server. Whoever you report is not told who reported them. Nothing in P2P channels can be reported this way: the server does not have it.
  • Put an account right. They can change a username, remove a display name or a nickname, and set the email address an account is written to. They can also suspend an account for some days or until they restore it, stop it uploading pictures, keep it out of public servers, or delete it. When a picture of yours is removed, or something is done to your account, you are emailed what and why (with the picture, if it was one; nothing is sent about anything taken down for child safety), never who reported it.

Leaving

You can delete your account yourself, in Settings under My account. Your profile, your sign-in, your friends and the servers you own go with it. What you wrote in other people's servers stays, shown as written by "Deleted user".

One thing nobody can undo: anything removed from the server can still exist in any app that had already seen or downloaded it.

Other people's servers

All of this describes the Maplecord server at maplecord.app. If you sign in to a Maplecord server that someone else runs, what it keeps and for how long is up to whoever runs it, for example a different time before uploaded files are cleared.