Your data

Exactly what we take from Discord and Steam, what we use it for, and how to remove it. No legalese — the formal version lives in the privacy policy.

Last updated: October 1, 2026

In short

Discord sign-in uses the narrowest “identify” scope. We never see your email, password, messages or server list.

Zero analytics, ads or tracking pixels. The only cookies are the ones sign-in cannot work without.

Linking Steam gives us your SteamID64 and nothing else. Unlink it with one click on your profile.

Data is used only to run the website and handle your submissions. It never goes to advertisers or anyone else.

One source at a time: what we store, why, what we deliberately leave out, and how to remove it.

Required to sign in

We store: account ID
username
display name
avatar identifier
first and last sign-in date
Why: We recognise you at sign-in, sign your appeals and applications with your account, and the staff knows who to talk to on Discord.
We never take: Your email address, password, messages, friends list or server list. The Discord token is used once to fetch your profile and is never stored. Other profile fields Discord includes (e.g. language, Nitro type) are discarded.
How long: Until the account is deleted. Your name and avatar are refreshed on every sign-in.
How to remove: Message the staff on Discord — we delete the account together with its sessions and linked SteamID. You can also revoke the app in Discord: Settings → Authorized Apps.

Automatic, for permissions

We store: IDs of your roles on the Deadman’s SCP server
access level
time of the last check
Why: We work out whether you are part of the server crew and what you are allowed to do on the site. Removing a role on Discord takes that away within 5 minutes.
We never take: Roles on other servers or any of your activity. The bot reads no messages — it only checks the roles of one person: you. The nickname and join date Discord returns alongside the roles are discarded.
How long: Refreshed when you sign in, then at most once every 5 minutes. Kept with the account.
How to remove: Gone with the account. If you leave our Discord server, your level drops to “Player” at the next check.

Optional

We store: SteamID64
date linked
Why: The player ID in your ban appeal fills itself in and cannot be faked — the staff can see the Steam account really is yours. Later on: your game server results on your profile.
We never take: Your password (you sign in on Steam’s site; we only receive a signed confirmation), profile name, avatar, game library, friends or purchase history. We do not use a Steam Web API key.
How long: Until you unlink it or the account is deleted.
How to remove: The “Unlink” button on your profile — the SteamID is removed from your account immediately.

When you send a form

We store: what you wrote in the form
your Discord account ID
date sent
status and staff note
Why: Reviewing your ban appeal or crew application. Only the server staff can see it.
We never take: Your IP address or browser details. The one-submission-at-a-time limit is tracked per account, not per address.
How long: Until the staff deletes it or you ask us to.
How to remove: Message the staff on Discord.

Strictly necessary only

We store: dscp_sid — display session, 30 days
dscp_sid_strict — write session, our site only, 30 days
dscp_oauth_state, dscp_steam_state, dscp_steam_back — sign-in safeguard, 10 minutes
Why: Keeping you signed in and protecting the sign-in flow from forgery. The database holds only a hash of the session token, never the token itself. In production the names carry the __Host- prefix, which stops any other domain from planting a cookie.
We never take: Analytics or advertising cookies. We also store nothing in your browser’s local storage — hence no consent banner.
How long: Session: 30 days or until you sign out. The rest: 10 minutes or until sign-in completes.
How to remove: “Sign out” deletes the session from the server and from your browser.

DiscordSign-in and roles. Your browser loads your avatar straight from cdn.discordapp.com.
Steam (Valve)Only when you click “Link Steam” on your profile yourself.
YouTubeVideos on the plugins page — from youtube-nocookie.com, and only after you click “Play”.
SCP:SL API (Northwood)The server player count. We send nothing about you there.

Legal bases, your rights and contact details are in the privacy policy.