Privacy policy
Last updated October 23, 2026
The short version
- We get your Discord ID, username and avatar when you sign in. Not your email or password.
- We keep the names you check, your results and your settings so the dashboard works.
- Proxy logins, webhook links and Discord tokens are encrypted.
- No ads, no tracking, and we don't sell your data.
- You can delete your account and everything in it from the dashboard.
Who we are
avaliuser is run by avaliuser, which is responsible for your data under this policy. You can reach us at through a ticket in our Discord server.
What we collect
| What | Why |
|---|---|
| Discord account: user ID, username, display name, avatar | To sign you in, show who you are, and tie your keys to you. |
| Discord access token for "join servers for you" | To add you to our Discord server so the bot can DM you, and to a replacement server if ours is lost. Stored encrypted. |
| Keys and usage: your plan, checks used, when keys were made and activated | To run your plan and stop abuse. |
| What you check: names, sites, results and run times | To show your results and history. |
| Proxies you upload | To send your checks through them. Logins are encrypted. |
| Settings: custom sites, Discord webhook link, whether we DM you hits | To check custom sites and send you free names. Webhook links are encrypted. |
| TikTok login (optional): the sessionid cookie you paste | Only to check TikTok names with TikTok's own availability check. Stored encrypted, never shown back, removed when you remove it or delete your account. |
| Payment details: the plan, amount, date and payment reference | To deliver your key and handle billing problems. We don't see or store your full card or bank details. |
| Messages you send us in tickets or by email | To help you. |
| Technical data: IP address, browser, pages requested and errors, in our hosting provider's logs | To keep the Service running and secure. |
We don't collect your email address, Discord password, messages or server list. The terminal app runs on your own computer, and the names and proxies you load into it stay there.
Legal basis
If you're in the UK or EU: we process your data to provide the Service you asked for (contract), to keep it secure and prevent abuse (legitimate interests), and to meet legal duties such as tax records (legal obligation).
Who we share it with
- Discord, to sign you in, send DMs and manage our server.
- Our hosting provider (Railway), which stores the database and runs the servers.
- The sites you check. To check a name, we send that name to the site, from our server or through your proxies. The site doesn't receive your Discord account or anything else about you.
- Payment providers you choose to pay with, who handle the payment under their own privacy policies.
- Discord webhooks you set up, which receive the free names you find.
- Authorities, if the law requires it, or to protect people from harm.
- A new owner, if avaliuser is sold or transferred. This policy keeps applying to your data.
We don't sell your data or share it for advertising.
How long we keep it
- Your account, keys, proxies and settings: until you delete your account.
- Check history: until you clear it or delete your account.
- Payment records: as long as tax and accounting law requires, even after you delete your account.
- Server logs: kept by our hosting provider for a limited time, usually a few weeks.
- If we ban an account, we keep its Discord ID so the ban sticks.
Your choices and rights
- Delete your account: Plan & key page, then Delete my account. It's removed straight away.
- Clear history: on the History page.
- Remove proxies and your webhook: on the Proxies and Plan & key pages.
- Take back Discord access: Discord settings, Authorized Apps, then remove avaliuser.
- Get a copy of your data, or ask us to correct it: contact us. We'll answer within 30 days.
Depending on where you live, you may have more rights, such as objecting to how we use your data or complaining to your data protection authority. We don't sell personal information as defined by California law.
Cookies and storage
We set one cookie, avali_session, which keeps you signed in. It's needed for the site to work. During sign-in we also set a short-lived cookie to protect against forged logins. Your browser's local storage remembers your theme, your sidebar choices and that you've seen the cookie note. There are no analytics, advertising or tracking cookies.
Pages load fonts from Google Fonts, which sees your IP address when your browser fetches them.
Security
Sessions are signed, the site only runs over HTTPS, and proxy logins, webhook links and Discord tokens are encrypted before they're saved. No system is perfect. If something goes wrong that affects your data, we'll tell you as the law requires.
Children
The Service isn't for children under 13. If you believe a child under 13 has an account, tell us and we'll delete it.
Where your data is stored
Our servers and the services above may be in the United States or other countries. Where we move data from the UK or EU, we rely on the safeguards those providers offer.
Changes
If we change this policy we'll update the date at the top, and post in our Discord server for anything important.
Contact
Privacy questions or requests: a ticket in our Discord server.