1. Scope and contact
This policy covers moot.world and the current Moot Discord Activity and companion bot. Darkhorse and Bandit LLC, based in the United States, operates Moot World under the Darkhorse & Bandit brand and is responsible for the processing described here. Our business correspondence address is 234 Brookwood Drive, Franklin, North Carolina 28734, United States. Contact support@moot.world for privacy questions or requests.
Server administrators control server permissions, layouts and moderation. If an independent administrator hosts a separate Moot deployment, they also operate its saved data and must explain their own hosting and backup practices. This policy describes our website and current private-test service; it does not turn a separately operated deployment into our hosted service.
The website has no sign-in, payment checkout, upload form or live connection to a Discord world today. The proposed public creations library and billing system are not currently collecting data. We will describe their actual practices before introducing them.
2. Data the Activity and bot use
| Data | Why Moot uses it | How it is handled |
|---|---|---|
| Discord user ID, display name, avatar, server and channel identifiers, channel names, membership and relevant permissions | Identify characters, authenticate access, match rooms to voice channels and enforce server permissions | Profile and channel information is read from Discord. IDs and channel bindings are saved where needed for your settings and the server layout; other current profile and permission details are held in runtime caches. |
| Character appearance, outfits, accessories, chosen availability, claimed desk styling and owner label | Restore customization and represent you in the space | Saved on the configured application host until removed or no longer needed for that function. |
| Maps, realms, rooms, portals, furniture, pixel and voxel assets, labels, declared author and license, submission owner ID, revision and review state | Save designs and provide the server library, import/export and moderation tools | Saved in the server’s Moot store. Visibility depends on server permissions and the asset’s review state. |
| Voice channel membership, mute/deafen and camera-on status, character position and seating, Activity connections and speaking indicators | Draw current room occupancy and live indicators | Transient runtime state. Moot does not store a history of calls, speaking, camera use or attendance. |
| Authorization codes, OAuth access tokens and Moot session identifiers | Verify identity and connect your Activity session | Processed for authentication; access tokens and sessions remain in memory and are not saved with your preferences. The Activity does not request your email or Discord password. |
| Commands and actions you submit directly to Moot | Execute your requested action and return feedback | Processed as service input; resulting settings or designs are saved when the action requires it. Moot does not read ordinary Discord message history. |
The bot uses server and voice-state events, rather than privileged message-content or broad online-presence access. Availability means the status you choose in Moot, not an inference about your Discord online status. A missing speaking ring does not prove silence.
3. Audio, cameras and AI tools
Discord carries native voice and video. Moot does not receive, capture, store or record their audio or video. The camera indicator uses Discord’s camera-on metadata; it is not an embedded video feed. Discord Privacy Policy explains Discord’s handling of its services.
Moot does not use Discord message content to train AI models. The asset prompt tool produces text for you to copy to a tool of your choice. It does not automatically send your creations, server data or identity to an AI provider. If you paste content into another service, that provider’s terms and privacy practices apply. Avoid including member information or secrets in prompts.
4. Website requests, local settings and support
Visiting moot.world sends ordinary request information, such as your IP address, browser request headers, requested URL and time, to the hosting and network providers needed to deliver and secure the page. Cloudflare provides the website hosting, network protection and the current test’s tunnel transport. We do not embed advertising trackers, session replay or third-party analytics scripts, and the website does not maintain a visitor account database.
Moot’s Activity can store graphics preferences in your browser’s local storage. Those preferences are local device settings, not an advertising identifier. Authentication tokens are not written there. The website does not set an application account cookie. Discord and infrastructure providers may use their own technical controls under their respective policies.
If you email support@moot.world, we receive your sender address, any name you supply, the message, attachments and related delivery information. Cloudflare Email Routing forwards mail to our support inbox, and the inbox’s email provider processes it. We use that information to respond, investigate the issue and maintain necessary support or legal records. Sending a support email does not subscribe you to marketing. Please share only information needed to help with the request.
The Activity’s optional Device report checks browser and graphics capabilities locally, including browser version and supported features. It is not automatically uploaded and contains no server contents or account identifiers. If you choose to send it to support, it becomes part of the support correspondence.
5. How information is used and shared
We use information to provide the features you request, restore saved customization, authorize access, moderate submissions, secure and troubleshoot the service, respond to support and privacy requests and meet applicable legal obligations. We do not sell personal information, disclose Discord API data to advertising networks or use it to profile people for employment, insurance or other unrelated decisions.
Other members with access to the relevant Moot space can see your character, chosen availability, desk and current presence information. Discord permissions filter private channels and associated map areas. Authorized editors can see submissions that need review and manage customization. Approved assets form a server-wide catalog, including assets used in a private room; placement in a private room does not make the artwork private to that room.
Service providers and authorized operators process information as needed for hosting, authentication, security, storage and email support. Discord receives authentication and native server-action requests. Cloudflare and email providers process network or support data. We may disclose information when required by law or when you expressly request the relevant sharing. We do not automatically copy private maps, member settings or rosters to the marketing website.
Exports preserve design content and declared credit/license metadata, but the current portable world format omits member profiles, desk claims, Discord ownership records and channel bindings. Labels or artwork you enter can still contain identifying information, so review an export before sharing. Anyone receiving an exported file can retain their own copy. Future public publishing will be a separate choice with clear visibility and license terms.
6. Retention and security
Saved character, workspace, layout and asset records remain on the configured application host while needed to provide those saved features, until removed or until deletion is required. The current private test does not automatically erase saved customization just because you close the Activity, leave a call or remove the bot. Contact support to arrange removal of a server’s saved data or records you can no longer access.
Authentication sessions are held in memory and currently expire after 12 hours. Position state expires after inactivity; speaking indications expire after roughly 2.5 seconds without a refresh. Runtime caches and the current Discord connection may retain current state until refreshed or the process ends. These mechanisms do not create a durable attendance or speaking log.
Support messages are retained as needed to resolve the request and maintain necessary security or legal records. There is no fixed automatic support-mail deletion schedule in the current setup. Ask us if you want a message or attachment removed. Infrastructure providers may retain technical records under their own policies and obligations.
We use restricted access, authentication and permission checks. Moot supports encryption of saved files and requires file or volume encryption for production configuration. Backup copies, when made, must receive the same protections. No system is perfectly secure. Backups can contain earlier records until removed or replaced; deletion requests need to include the relevant host and backup copies rather than assuming the live-store command erases every copy.
We will delete Discord API data when it is no longer needed for Moot’s stated functionality, when you or Discord request deletion, when we stop operating the relevant service, or when law requires it, except for any retention legally required. We will respond to data-security incidents under applicable law and Discord’s developer requirements.
7. Access, correction and deletion
Use the Character and workspace controls to change your saved settings, reset your character or release a desk. Asset owners can withdraw their submitted assets. /moot forget deletes your saved character, owned workspace preferences and owned submitted assets from that server’s active store, and clears current uses of those submitted assets. It does not erase the entire shared server layout, Discord’s records, support correspondence or files another person already exported.
For access, correction, export, deletion, an objection or another privacy request, contact support@moot.world. Tell us which service and server the request concerns. We may ask for proportionate evidence that the records are yours, such as confirmation through your Discord account; we will never ask for your Discord password or token. We handle requests under applicable law, explain any necessary limits and retain information only where there is a valid continuing need or legal requirement.
Your rights depend on your location and can include access, correction, deletion, portability, restriction, objection or withdrawal of consent where consent is used. You can also complain to the relevant privacy regulator. Contacting your server administrator may help with server-specific records, but you may contact us directly and need not still be a member of that server.
8. Teen users, location and outside services
Moot’s Discord services are for people who are at least 13 and meet any higher local minimum age. We do not intend to collect information from children below that age. If you believe an underage child has supplied personal information to Moot, contact support@moot.world. We will investigate, stop the inappropriate processing and remove the information unless retention is legally required. Discord login alone is not a claim that we have independently verified a user’s age.
We operate from the United States. Cloudflare’s network, Discord and email providers can process information in other countries. The current private test uses a configured application host; it does not promise that every record remains in a particular country. Applicable transfer and privacy requirements depend on the service and location, and this policy does not replace any safeguards required by law.
External links take you to services governed by their own policies. See the Discord Privacy Policy and Cloudflare Privacy Policy for those providers’ information.
9. Changes and contact
We update this policy when actual data practices change. The date and version on this page identify the current policy. We will provide an appropriate notice of material changes and obtain any permission required before a new use of your information.
Privacy, support and safety contact: support@moot.world.
Darkhorse and Bandit LLC
234 Brookwood Drive, Franklin, North Carolina 28734, United States
Read the coordinated Terms of Service for account, server and creation rules.