This Privacy Policy explains how Xpriella collects, uses, and protects information when you use the Discord bot, its web dashboard, or related services.
Information we collect
- Discord identifiers, usernames, and guild membership information.
- XP activity signals without storing message content for XP.
- Task submissions, validation results, achievements, and moderation actions.
- Feedback submissions, audit logs, and admin-configured event logs.
- Web dashboard login data for authorized users (local accounts or OAuth).
- Message content only when a guild enables message archiving features.
How we use information
- Operate leveling, tasks, achievements, and leaderboards.
- Provide moderation tools, audit trails, and administrative reporting.
- Secure the service, resolve issues, and monitor performance.
- Respond to feedback when consented.
Publicly visible information
Rank cards, leaderboards, and task validation polls may display usernames, avatars, XP, levels, achievements, or proof details within the guild.
Data sharing
We do not sell personal data. Information is accessible to authorized guild administrators/moderators, the bot owner, and hosting providers as needed to operate the service. We may also disclose data to comply with legal obligations.
Storage and security
Data is stored in MariaDB with optional Redis caching. OAuth tokens are encrypted, and access is role-based. No security system is perfect, and we cannot guarantee absolute security.
Retention and deletion
- Guild data is retained while the bot remains in the guild, unless configured otherwise.
- Logs and metrics are retained for configurable time windows and purged automatically.
- Message archives are retained only if enabled and for configured retention periods.
- API users and feedback entries are retained until deleted or resolved.
Your choices
- Use /optout to stop XP tracking in a guild.
- Request data deletion from your guild administrator or the bot owner.
- Manage cookie settings in your browser when using the dashboard.
Cookies
The dashboard uses httpOnly authentication cookies to keep you signed in. We do not use third-party advertising cookies.
Age restriction
The Service is intended for adults only (18+). We do not knowingly collect personal data from individuals under 18.
Policy updates
We update this policy periodically and will revise the "Last Updated" date.
Contact
Email: [Your Contact Email Address] · Discord: [Your Discord Username#Tag or Support Server Invite] · Website: [Link to Your Website/Project Page, if any]