Privacy & Data Hygiene

[skylessdev]

Scope

• Persist only discordId ↔ zkHashOrAddrHash (keccak) in a lightweight KV store (e.g., Replit DB or file).
• Do not store raw signatures; verify then discard them immediately.
• Implement /unlink command to remove a user’s mapping and strip all VPNL roles, adding the Guest role.

Acceptance Criteria

• No PII or cleartext wallet addresses stored in logs or storage.
• Using /unlink fully revokes a user’s verification status and confirms the action to the user.