havoc stores what it needs to work, in a database it controls. that includes server and channel ids, your discord user id and display name, your command usage and cooldowns, your economy balances and items, your moderation history in that server, and any configuration your staff set.
when you complete a verification link, havoc additionally receives your ip address and an approximate browser and device fingerprint. neither is stored in plain text — both are stored only as hashes, and the hashes are used to recognise a banned person returning on a new account, never to track you around the internet. discord authorization tokens obtained during verification are encrypted at rest and are only used to restore you to the same server that asked for them.
verification records remain until the server operator removes them. removing havoc from a server does not automatically erase that server's data; staff can clear eligible records with the bot's own moderation and verification cleanup commands.
the full detail — what is collected, why, how long it is kept, and how to remove it — is on the privacy page, which forms part of these terms.