Privacy Policy

Last updated: June 2026

1. What Data We Collect

When Lilin is active in your Discord server, we collect and store:

  • Discord user IDs — to associate data with users
  • Discord server (guild) IDs — to associate data with servers
  • XP and level data — earned through server activity in the levelling system
  • Duel history and ELO ratings — records of duel outcomes
  • Server configuration — role IDs, channel IDs, and settings configured by server managers
  • OAuth session data — a session token and your Discord username and avatar hash, stored when you log in to the dashboard. Discord access tokens are encrypted at rest.

We do not collect message content, email addresses, or any data beyond what is listed above.

2. How We Use Your Data

Collected data is used solely to provide the bot's features — displaying leaderboards, tracking duel history, applying roles, and managing server settings. It is not sold, shared with third parties, or used for advertising.

3. Data Retention

Data is retained for as long as Lilin remains in your server or your account has an active session. Server data is not automatically deleted when Lilin is removed from a server.

4. Your Rights

You may request deletion of your personal data (XP, duel history, ELO, session data) at any time by contacting us at donosean+lilin@gmail.com. Server managers may request deletion of their server's data via the same address.

5. Security

Data is stored in a private database. Dashboard sessions are protected with httpOnly cookies and Discord access tokens are encrypted at rest. We take reasonable precautions but cannot guarantee absolute security.

6. Third Parties

Lilin uses the Discord API to function. Your use of Discord is subject to Discord's Privacy Policy.

7. Changes

This policy may be updated at any time. The "last updated" date at the top of this page will reflect any changes.

8. Contact

For questions or data deletion requests: donosean+lilin@gmail.com

← Back