Privacy policy

1. Overview

This Privacy Policy explains what information the Economy Discord bot and the Glungus Discord bot collect, use, store, and share when you use either bot, Discord commands, games, moderation tools, logging, tickets, leveling, economy features, and the website/dashboard.

Our bots are designed for Discord communities. Most information we process comes from your Discord account, your command interactions, server configuration, and your activity in bot games and server tools.

2. Information We Collect

Depending on how you use the bots and dashboard, we may collect and store:

• Discord user IDs, usernames, display names, and avatar URLs.
• Discord server, channel, message, role, and interaction IDs needed for bot features.
• Economy data such as wallet balance, bank balance, inventory, shop purchases, crafting, trades, taxes, and cooldowns.
• Game data such as chess sessions, moves, timers, bets, results, Minesweeper runs, Wordle data, 2048 scores, Economy Dash progress, attempts and completion records, RPS results, and leaderboards.
• Quest, achievement, streak, reward, and action-stat progress.
• Moderation data such as warnings, bans, reasons, moderator IDs, case IDs, ticket records, logging references, and expiration times.
• Captcha and anti-abuse data such as captcha-required flags, temporary captcha tokens, command timing, and macro-detection signals.
• An encrypted, HTTP-only NextAuth session cookie used to identify your account and keep you signed in.
• Basic website analytics from Vercel Analytics, such as page views and high-level device and usage information.

3. Discord Login

The dashboard uses Discord OAuth through NextAuth with the identify and guilds scopes. The identify scope provides your Discord user ID, username, and avatar. The guilds scope allows the dashboard to retrieve a basic list of servers you have joined so it can verify that you are a member of the required server. We do not request access to your email through Discord OAuth.

The server checks the retrieved server list for the required server and does not store the complete list. Your Discord user ID may be cached as a member of that server. The Discord OAuth access token is retained inside the encrypted, HTTP-only authentication cookie for server-side membership checks and is not included in the browser-readable session response.

The bots may also fetch public Discord profile metadata, such as username and avatar, through the Discord API so leaderboards, profiles, game boards, admin tools, and moderation views can show readable names instead of only numeric IDs.

4. How We Use Information

We use collected information to:

• Run the virtual economy, games, shops, crafting, quests, achievements, and leaderboards.
• Run moderation, logging, tickets, leveling, and other server tools.
• Show your profile, inventory, balances, stats, game history, achievements, and admin-related records.
• Process virtual bets, rewards, taxes, refunds, and game settlements.
• Detect abuse, macros, spam, exploits, cheating, and suspicious command activity.
• Enforce warnings, bans, cooldowns, restrictions, and server/admin settings.
• Operate the dashboard, authenticate users, and restrict admin pages to authorized admins.
• Debug errors, improve features, and maintain the security and reliability of the service.

5. How We Store Information

The bots store data primarily in Redis or Redis-compatible storage. The website is hosted on Vercel. Authentication sessions are handled through NextAuth. Some temporary game, captcha, invite, challenge, or leaderboard data may expire automatically after a configured period.

Some records, such as balances, inventories, achievements, moderation cases, ticket records, and leaderboard stats, may be kept until they are reset, deleted by an administrator, no longer needed, or removed after a valid data request.

6. Sharing and Disclosure

We do not sell your personal information. We may share or display information in these limited ways:

• Public leaderboards, profiles, game results, achievements, and bot messages may show usernames, avatars, scores, balances, or results.
• Server administrators may view admin data needed to manage the economy, moderation, rewards, configuration, logging, and abuse prevention.
• Service providers such as Discord, Vercel, Redis hosting, and authentication infrastructure process data needed to operate the bots and website.
• We may disclose information if required by law, to protect users, to investigate abuse, or to secure the service.

7. Cookies and Analytics

The dashboard uses cookies or similar technologies for login sessions and authentication. Vercel Analytics collects aggregated page-view information such as the visited page or route, referrer, approximate geographic area, browser, operating system, and device type. Vercel states that Web Analytics data is not associated with an individual or stored IP address. You can control cookies through your browser settings, but disabling cookies may prevent login from working.

8. Data Retention

We keep data for as long as needed to provide the economy, games, moderation, logging, tickets, leveling, security, leaderboards, and dashboard features. Some data expires quickly, such as chess invites, temporary captcha tokens, or short-lived game sessions. Other data may remain longer, such as economy balances, inventories, achievements, moderation cases, and leaderboard history.

Backups, logs, or provider-level records may persist for a limited time even after data is removed from active bot storage.

9. Your Choices and Data Requests

You may request access to, correction of, or deletion of your bot data by contacting the administrators in the Discord server where the bots are used. You may be asked to verify that you control the Discord account connected to the request.

Deleting bot data may remove balances, inventory, achievements, progress, moderation history, game history, ticket records, and leaderboard entries. Some information may be retained if needed for security, abuse prevention, dispute resolution, legal compliance, or server moderation records.

10. Children and Discord Requirements

Our bots are intended for users who are allowed to use Discord under Discord's own Terms of Service. If you are not permitted to use Discord, you should not use our bots.

11. Security

We use reasonable technical and administrative measures to protect bot and dashboard data. No online service is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy as the bots change or as Discord, hosting, legal, or security requirements change. Continued use of the bots or dashboard after updates means you accept the updated policy.

13. Contact

For privacy questions or data requests, contact the administrators through the Discord server where the bots are installed.