Discord gave Protector access to presences. Three protections turn on, and statuses are read, never kept.
Presences are the members' status: online or not, their custom status, the device they use. Discord keeps this access for bots that really need it, and it has just granted it to Protector.
Trapped status
An account that puts a scam link in its custom status is handled as if it had posted it in a channel. It's on by default, in the Anti-phishing module.
Representative role
Members who put your server invite in their status get a role, and lose it when they remove it. Turn it on in the Invite tracker module, with the role of your choice.
Staff presence report
Every Monday, the daily online time of members with a staff role is posted in the log channel. Only the daily totals are kept, for 30 days. Turn it on in the Staff watch module.
The details of what is read and kept are in the privacy policy.
Fixed since
An announcement status, like "5x Nitro Boost giveaway" with a server invite, was taken for a scam. Only a known scam domain, written with or without https, or scam text next to a link outside Discord now counts.
Presences are read more lightly by the bot, and /verification-setup no longer stops on an error at the end of the setup.