Privacy Policy
Effective 22 October 2026.
This policy covers Holonet, the Discord bot operated by The Holocron maintainers. It is written to say what actually happens, which is very little.
What Holonet does not do
Section titled “What Holonet does not do”- It does not read, log or store the content of messages in your server.
- It does not read direct messages.
- It does not sell, share for advertising, or profile anyone.
Holonet only calls Discord’s HTTP API to create and manage channels, webhooks and roles, and receives nothing from a server it has not been added to.
What passes through it
Section titled “What passes through it”- Notifications. GitHub Actions workflows post messages through Discord webhooks. These contain repository names, pull request and workflow-run links, and short status text. They are sent to Discord and are not copied anywhere else by Holonet. Discord stores them under its own policies.
- Server setup. When a maintainer runs the setup command, Holonet reads and changes the server’s channels, webhooks and roles using a bot token. The token is kept as a secret by the maintainers and is never published.
Role sync (not yet released)
Section titled “Role sync (not yet released)”If role sync is enabled for a server, Holonet will process, for members who choose to connect their accounts:
- the member’s Discord user id and the verified GitHub account linked to
it (obtained through Discord’s OAuth
identifyandconnectionsscopes), and - a stored pairing of that Discord id and GitHub id, so a role can be added or removed when GitHub team membership changes.
OAuth access tokens are not stored. Nothing else about a member is kept. A member can revoke access at any time from Discord’s Authorized Apps settings, and can ask for their pairing to be deleted (see Contact).
Retention
Section titled “Retention”Holonet keeps no message content. GitHub Actions logs are retained under GitHub’s policies and Discord messages under Discord’s. Any role-sync pairing is kept only while it is needed and deleted on request.
Third parties
Section titled “Third parties”Holonet runs on infrastructure from Discord, GitHub and Vercel, each with its own privacy policy. We don’t share data with anyone else.
Children
Section titled “Children”Holonet is not directed at children. Discord requires users to be at least 13 (or older, depending on where they live).
Changes
Section titled “Changes”If this policy changes, the effective date above changes with it.
Contact
Section titled “Contact”For general questions, open an issue at github.com/theholocron/holocron.
To request deletion of a stored pairing, open an issue titled “Privacy request” without your Discord details. We look the pairing up from the GitHub account that opened the issue, so nothing identifying has to be posted publicly, and we confirm the deletion on the issue. Revoking Holonet in Discord’s Authorized Apps settings is immediate and needs no contact at all.