Privacy policy

Who we are

The Studio Two Dashboard is run by Studio Two Digital. It shows artists and their teams how their Discord communities are doing: growth, activity, what fans are talking about, and how the moderation team is getting on. Access is by invitation only.

Information about Discord members

In a Discord server with our S2 Stats bot? About S2 Stats is the short version, with how to opt out.

A bot added to each artist's Discord server with the server owner's permission records:

• messages posted in channels the bot can see, with the time, channel and the member's Discord ID and username
• reactions, replies and time spent in voice channels
• when members join and leave, and the roles they hold (for example location or pronoun roles they chose themselves)
• kicks, bans and timeouts from the server's audit log
• details members share in introduction channels, such as where they are from and favourite songs
• images posted in fan art channels, kept so they can be shown in the dashboard

We use this to produce figures and summaries for the artist's team, which can include members' usernames (for example the most active members, or the moderators). When a member deletes a message in Discord, its words are removed from the dashboard (it still counts in totals), and anything taken from it, such as an introduction or a fan art image, is removed too. When a member edits a message, the dashboard keeps the edited version.

Information about dashboard users

• your email address and name, and which communities you can see
• which pages you open and actions you take, so the Studio Two team can see how the dashboard is used
• devices you choose to trust for two-step verification: a code and a short name such as “Chrome on Windows”
• feedback you send, including any screenshots, and questions you ask in Ask Anything

Cookies

The dashboard only uses cookies it needs to work: keeping you signed in, remembering a trusted device, and avoiding recording the same page visit twice. There are no advertising or tracking cookies. Cloudflare's check on the sign-in page may set its own security cookie.

Who processes the information

We use these services to run the dashboard. Each only receives what it needs for its part.

Supabase

Database and file storage (Frankfurt, Germany). Supabase staff in the US may have support access.

Vercel

Runs the dashboard website (Frankfurt, Germany).

Railway

Runs the Discord bot that records server activity.

GitHub

Stores the code and runs the scheduled jobs that work out the daily figures.

Anthropic (Claude)

Reads samples of messages to produce summaries, sentiment, topics, suggestions and answers to questions asked in the dashboard (United States).

OpenAI

Turns message text into search data so the dashboard can find messages by meaning (United States).

Resend

Sends dashboard emails such as invitations, reports and replies to feedback.

Cloudflare

Checks sign-in and password reset attempts come from a person, not a bot (Turnstile).

Some of these are in the United States. Where information leaves the UK or EU, it is covered by the providers' standard data protection terms.

Why we process it

We process this information because it is in the legitimate interests of the artists we work with, and of Studio Two Digital, to understand and look after their communities. We do not sell it, and it is only shown to the artist's own team and Studio Two.

How long we keep it

Messages, reactions and activity are linked to the member who wrote them for two years. After two years we remove who it was: the Discord ID is replaced with a code that can't be traced back to the person, and stored names are cleared, so older messages and figures only count towards totals and topics. When the bot first joins a server it reads back no more than two years of history. When we stop working with an artist, everything we hold about their community is deleted within 30 days. Dashboard accounts are kept while they are in use. You can ask us to delete information about you at any time (see below); that covers everything still linked to you.

Your rights

You can ask to see the information we hold about you, have it corrected or deleted, or object to how it is used. Email ira@studiotwo.digital and include your Discord username if your question is about a Discord server.

Deleting your data: once we have checked the request is from you, we delete what we hold about you within one month, usually within a week: your messages, reactions, activity, introduction and anything taken from them. If you ask, we also stop recording you in every server we work with. Records of kicks, bans and timeouts may be kept where they are needed to keep a community safe. Reports already shared with an artist's team can't be recalled, but we remove you from the copies we keep. You can also delete your own messages in Discord at any time, and the dashboard follows.

You can also complain to the Information Commissioner's Office (ico.org.uk).