<!-- Source: https://medius.k4tech.net/guide/privacy -->
# Privacy

K4TECH runs this site and Clanker, the bot in the Medius [Discord server](https://discord.gg/ArRqcA84pB). It keeps the data below to run them, on the lawful basis of legitimate interests. None of it is sold. Cloudflare and Discord process some of it in the US, under the Data Privacy Framework.

## Site

The site sets no cookies. Cloudflare carries every request, so it receives your IP address. The server holds your IP address in memory for up to 10 minutes to rate-limit requests. Everything the site saves for you stays in your browser.

## Usage stats

The dashboard always reports each box it connects to, the device the box clones and each flash. The reports feed the totals on [Stats](/dashboard/stats.md) and the list on [Devices](/guide/compatibility.md). The server records the Box ID as a keyed hash, when the box connected, firmware and protocol versions, operating system and browser, country, the cloned device's USB ID, kind and name, and each flash's details and result. Records are kept until you have them deleted.

## Discord bot

The bot reads the server's messages to moderate the server. Staff read device reports through the bot for the Devices list, and keep nothing about who posted them.

| Data | Retention |
| --- | --- |
| Moderation history and mod-log posts | 1 year |
| Tickets and transcripts | 1 year after closing |
| Edited and deleted messages, joins, leaves, verifications, role and name changes | 90 days |
| Ticket check results | Up to 30 days |
| Captchas | 5 minutes |
| Scam links and image fingerprints | 1 year after last added |

## Your rights

Open a ticket in the Discord server to have your data copied, corrected, restricted or deleted, or to object to its use. For usage stats, give the Box ID from the dashboard's [Device](/dashboard.md) tab. A deletion doesn't lift a ban or timeout. You can complain to your data protection authority.

Last changed 13 October 2026.
