Privacy Policy
Effective and last updated:
This policy explains how the independent developer operating NamjoonBot (“we”) handles information when you use the Discord bot and this website.
Join the support server and ask to contact the bot owner privately about a privacy request. Do not post passwords, tokens, or sensitive personal information in public channels.
1. Information we process
- Discord identifiers and account details: your Discord user ID and the display name and avatar supplied by Discord. Server, channel, message and interaction IDs are used where needed to run commands, deliver reminders, and manage trade messages or support requests.
- Game records: currencies, earnings and transactions; card pulls, collections, ownership, prints, gifts, trades and market activity; levels, XP, quests, streaks, cooldowns, event contributions, reward claims, badges, and supporter entitlements.
- Preferences and uploads: profile titles, banners, showcases, uploaded profile images, wishlists, reminder settings, and trade notification preferences.
- Support submissions: the subject, description and account/context details you provide through bug reports, suggestions, or direct support. Submissions may be delivered to the support server for the developer or support staff to review.
- Technical information: command and error information needed to operate and troubleshoot the bot. Website and network providers may receive IP addresses, browser details, request times and security logs when serving the website, live API, fonts, images, or Discord embeds.
The bot is based on slash commands and does not require routine monitoring or storage of ordinary server conversations. Information you deliberately submit in commands, uploads, or support forms is processed for that feature. We do not ask for your Discord password or payment-card details.
2. Why we use information
We use this information to identify the correct player; save and display progress; run collections, trading, rewards and events; deliver requested notifications; prevent duplicate payouts and abuse; resolve support issues; and maintain the service.
Where data-protection law requires a lawful basis, processing necessary to provide requested features supports performance of the service agreement. Service security, troubleshooting and fair-play records support our legitimate interests, subject to your rights. Optional features are used at your request; where consent is required, we will obtain it.
3. What other people can see
Bot profiles, inventories, wishlists, card details, listings, trades, and command responses may be visible to other Discord users according to the feature and where you use it. Do not include private information in content intended for public display.
The public website and read-only stats API display global leaderboard names, Discord avatars and scores; event and community totals; top Candy contributors; and recent Secret Mythical pulls with the original player, card, print number and pull time. Anyone can view these results without signing in. The public feed does not include bot credentials, database credentials, or raw Discord user IDs. Avatar links supplied by Discord may themselves contain identifiers.
4. Sharing and third-party services
Information is used by the developer and, where necessary, authorised support staff and services needed to operate NamjoonBot. We do not sell personal information or use it for targeted advertising. Information may also be disclosed when legally required or necessary to address abuse or security incidents.
- Discord supplies account information, handles interactions, delivers messages and serves avatars, emoji and any enabled widget.
- GitHub Pages hosts this website.
- Cloudflare provides the public tunnel used to reach the bot’s website API.
- Google Fonts supplies fonts on the home page, which involves requests to Google’s servers.
These providers handle data under their own policies and may process it in other countries. Optional Discord login requests only the identify permission, which supplies your Discord ID, display name and avatar, without your email address or server list. An authorisation code is exchanged privately on the bot server to verify your account. Discord access tokens are not kept after verification; revocation is attempted when verification finishes.
For signed-in browsing, a random session token is held in your browser’s tab-scoped sessionStorage, with a matching hashed session and account identity in server memory. Sessions expire after six hours, on successful sign-out, or when the bot restarts. Signing out clears the browser token; closing the tab normally clears its sessionStorage. Login state is retained for up to ten minutes to protect the sign-in process. Personal profile, balance, uploaded media and inventory requests require a valid session. No login cookies, advertising analytics, or tracking cookies are implemented by this website. Third-party services and embeds may have their own storage or cookie behaviour.
5. Storage, security and retention
Game records are stored in the bot’s PostgreSQL database; uploaded profile media is stored with the bot’s files. Access is restricted to operation and support needs. No online system can guarantee absolute security.
Player progress and transaction history are kept to maintain ongoing collections, rankings, ownership and fair play. There is currently no automatic inactivity-based deletion. Uploaded media and support records may also remain until removed or no longer needed. Removing the bot from a server does not by itself erase a player’s cross-server account.
On a verified deletion request, we will remove or anonymise personal information as required by applicable law and Discord’s rules. Where lawful, limited records may need to be retained to resolve an outstanding transaction, investigate abuse or meet a legal obligation; any applicable restriction will be explained. Deletion can permanently remove progress and eligibility and cannot reverse completed transfers to other players.
6. Access, correction and deletion
Contact the owner through the support server to request access to, correction of, or deletion of your information, or to raise concerns about public display. We may ask you to confirm ownership of the relevant Discord account. We will respond within the deadlines required by applicable law.
Depending on your location, you may also have rights to object, restrict processing, obtain a portable copy, withdraw consent where applicable, or complain to a data-protection regulator. In the UK, this is the Information Commissioner’s Office.
You can change supported profile and notification preferences through the bot. Stop using the bot if you do not want new game activity recorded; existing records remain subject to the retention and request process above.
7. Eligibility and changes
NamjoonBot is intended for people eligible to use Discord under its minimum-age rules. If you believe we have information from someone who is not eligible, contact the owner.
We will update this page when our practices change and update the date above. Material changes will also be announced in the support server. Changes affecting account access or the use of your information will be explained here before launch.