Privacy Policy

Last updated: January 2026

Summary

Achievements collects only the data needed to power Discord achievements, leaderboards, and the dashboard. We do not sell personal data. This policy is based on the data collected by the bot, dashboard, and website as implemented in this codebase.

Data collected by the bot (Discord)

We track activity and configuration data to run achievements and stats features, including:

  • Identifiers: Discord user IDs and guild IDs.
  • Progression: XP, tier, achievements unlocked, and badge ownership/equipment.
  • Message activity: Total, daily, weekly, and monthly message counts.
  • Voice activity: Total voice time, muted time, join count, join/leave timestamps, and voice channel IDs visited.
  • Reactions: Total reactions and the unique emoji identifiers you use.
  • Commands: Count of commands you run.
  • Invites: Invite counts (including vanity/unknown/blocked) and tracked invite activity.
  • Server tenure: Join timestamps and overtime milestones.
  • Boost tracking: Whether you are boosting, boost start timestamps, and streak months.
  • Profile settings: Card border color and per-feature privacy preferences.
  • Guild configuration: Achievement log enablement and channel IDs.
  • Global profile: Global XP/tier, global achievements, support server join status, donation/premium flags, and bot-invite counts.

Message content is inspected in memory to detect certain achievements (e.g., mentions, polls, emojis) but message content is not stored in the database.

Data collected by the website & dashboard

  • Dashboard sessions: Session cookies for authentication (cookie name: achievements.sid).
  • Discord OAuth data: Discord user ID, username, global name, discriminator, avatar, access/refresh tokens, granted scopes, and token expiry.
  • Operational monitoring: Website, bot, and database uptime history.
  • Local storage: Session storage caches the bot profile metadata to reduce load time.

How we use this data

  • Calculate achievements, badges, leaderboards, and profile cards.
  • Show progress and configuration in the dashboard.
  • Maintain uptime and reliability monitoring for services.
  • Secure the dashboard with Discord OAuth and session management.

Sharing and disclosure

We use Discord OAuth to authenticate dashboard access and rely on Discord APIs to read bot events. We do not sell personal information. Data may be shared only when required to operate the bot.

Service providers

We use Cloudflare as a security and performance provider for the website and dashboard. When you visit these pages, Cloudflare may process connection data such as IP address, request headers, and security signals to detect abuse, mitigate attacks, and cache content. Cloudflare may also set security cookies as described in our Cookie Policy.

Your controls

  • Privacy settings: Use /privacy or the dashboard privacy panel to set profile, achievement, leaderboard and badge inventory visibility.
  • Bot data removal: Leaving a guild removes your per-guild profile and boost data for that server.
  • Dashboard access: You can revoke Discord OAuth access from your Discord account settings and log out of the dashboard.

Contact

If you have questions about this policy or your data, contact us at [email protected].