What we keep and why, how long we keep it, and how you can have it deleted.
Last updated: September 2, 2026
1. In short
We do not read or store your messages.
We do not collect your email address, phone number or IP address.
We use no advertising or tracking cookies.
We do not sell your data or share it for marketing.
2. Data we store
On the bot side
Discord user ID: To identify your account. Required.
Game data: Balance, bank, level, XP, particles, rank, inventory, cooldowns.
Transaction records: A summary of game and bank activity, for cheating and bug investigations.
Server settings: Server ID, prefix, economy channels, minigame channels.
Feedback: The subject, text and optional contact details you send with /feedback.
On the site side
Discord sign-in: The identify, guilds and guilds.join scopes are requested. From them we read your user ID, username, avatar URL and — only for the dashboard — which servers you can manage.
Session cookie: A single signed cookie carrying those three values. It lasts 7 days.
Server list: Read live from Discord when you open the dashboard, to find the servers where you have the Manage Server permission. It is held in memory for at most a minute and never written to the database.
Language preference: A cookie holding which language you chose; it carries no identity.
Your email address and your messages are never requested or read. Your server list is read only while a page is being rendered and is never stored.
3. Data we do not read
The bot processes message content only in the moment: to tell whether it's a command, a number or word in a minigame channel, or a message that earns XP. Message text is never stored anywhere and is not reviewed. It does not read your direct messages.
4. Why we store it
Your data is processed to perform the service relationship between us (KVKK art. 5/2-c). Transaction records kept to prevent cheating and abuse fall under legitimate interest (KVKK art. 5/2-f). Without these your account cannot work.
5. Retention
Game data: For as long as your account exists.
Transaction records: At most 12 months, then deleted.
Feedback: At most 6 months after the matter is closed.
Session cookie: 7 days; deleted immediately when you sign out.
6. Who it is shared with
Your data is only processed with the parties the service needs to run:
Discord: The bot and sign-in already run on Discord's infrastructure.
Hosting provider: The infrastructure the server and database run on.
Shopier: Only if you pay in Turkish lira; they process the payment details and no card data reaches us.
No transfer is made to any other third party.
7. Cookies
The site uses strictly necessary cookies only: the session cookie, a short-lived verification cookie for CSRF protection during sign-in, and one holding your language preference. There are no analytics, advertising or tracking cookies. If you decline cookies you can still browse the site; only signing in is unavailable.
8. Security
The session cookie is signed with HMAC-SHA256; its contents cannot be altered.
The cookie is written as HttpOnly and SameSite=Lax; JavaScript cannot read it.
Database access is open only to the application server and unreachable from outside.
The site writes to the database only during a purchase; every other page is read-only.
No system is 100% secure. If you spot a vulnerability, please report it through the support server before disclosing it publicly.
9. Your rights
Under KVKK art. 11 you may request to:
Learn which of your data is processed and receive a copy.
Have incorrect data corrected.
Have your data deleted (your account closed).
Object to the processing.
Requests go through the support server and are resolved within 30 days at the latest. After a deletion request the data cannot be recovered.
10. Children's privacy
The Service is not intended for people below Discord's minimum age. If we are told that data belonging to a user below that age has been collected, the account is closed and the data deleted.
11. Changes
If this policy is updated, the date at the top of the page changes and significant changes are announced on the support server.