Privacy Policy

This Privacy Policy explains what information Ranky (the Discord bot and the website at ranky.bot, together the "Service") collects, why, how long it is kept and what choices you have. The Service is operated by Individual Entrepreneur Andrii Tyshchenko, Ukraine ("we", "us"), who is the data controller. Contact: support@ranky.bot.

1. Summary

• We never read, store or analyse the content of your messages. The bot only counts that activity happened.
• We store Discord IDs, names and avatars, activity counters, XP and levels, and the settings server admins choose.
• We do not sell your data, show ads or use tracking or analytics cookies.
• Data of a server that removes Ranky is deleted automatically 30 days later.

2. Information we collect

From Discord servers that use the bot:

• Server ID, name and icon, and the IDs and names of its channels and roles, so the bot and dashboard can work.
• For each member who is active: Discord user ID, username or display name, avatar, and counters of messages sent, reactions given and minutes spent in voice channels, total XP, level and per-day activity totals.
• Whether a member turned off mentions in level-up announcements (/pings).
• Manual XP changes made by admins: the member, the amount, the admin who made it and an optional reason.
• Votes for Ranky on top.gg made with a server's /vote link: the voter's user ID, the server, the time and the XP given.
• Giveaways: the texts and picture server admins provide, and for each member who joins, their user ID, display name, avatar, the time they joined and whether they won.
• Level backups: copies of members' user IDs, names, avatars, XP and levels, made by server admins, automatically on a schedule, or before a reset or restore.
• Stream alerts: the Twitch usernames and YouTube channels server admins add, and the last stream announced for each. To check whether they are live we read public stream data (title, game, preview image) from Twitch and YouTube; we do not get or store anything about viewers.
• Settings chosen by server admins: channels, Level Roles and their messages, XP rules, card design, XP events, stream alerts, vote rewards, backup schedule, timezone, bot nickname and avatar.

The bot does not request the Message Content intent and does not store message text, attachments, voice audio or direct messages.

When you log in to the website with Discord: we request only the identify and guilds scopes. This gives us your user ID, username, avatar and the list of servers you are in with your permissions there, so we can show the servers you can manage. We do not get your email address or password. Your Discord access token is kept in an encrypted, HTTP-only session cookie in your browser for up to 7 days and is not stored in our database.

Billing: Premium is sold through Paddle, which acts as the merchant of record and processes your payment, billing address and tax details under its own privacy policy. We receive and store the subscription status, plan, period, Paddle customer and subscription IDs and the Discord IDs of the server and the buyer, but never your card details.

Problem reports: when you use Report a problem in the dashboard, we store your message, your Discord user ID and name, the server, the dashboard page and your browser's user agent, so we can look into it.

Technical data: our hosting provider processes IP addresses and request data to deliver the website and may keep short-lived server logs for security and debugging.

3. Why we use it (legal bases)

• To provide the Service: counting XP, levels, leaderboards, Level Roles, cards and the dashboard (performance of a contract / our legitimate interest in running the features server admins enabled).
• To keep the Service secure, prevent abuse and fix errors (legitimate interest).
• To handle subscriptions and meet tax and accounting duties (contract and legal obligation).
• To answer your requests and look into the problems you report (legitimate interest).

We do not use your data for advertising or profiling and do not make automated decisions with legal effects.

4. Who can see it

• Other members of the server: your level, XP, rank and activity counters appear in /rank, /leaderboard and on the server's public web leaderboard, which anyone with the link can open.
• Server managers: can see and change settings and adjust XP in the dashboard and with /xp.
• Service providers who process data on our behalf: Railway (hosting and database, United States), Discord (the platform and its image CDN for avatars), Sentry (error monitoring, United States: technical error reports that may include server, channel and user IDs, never message content), Paddle (payments and taxes, merchant of record), top.gg (bot listing: it tells us who voted for Ranky, and we send it the number of servers), and Twitch and Google (YouTube) for stream alerts: we send them only the streamer names and channel IDs to check.
• Authorities, if the law requires it.

Stream alerts for YouTube use the YouTube API Services: by using them you agree to the YouTube Terms of Service, and Google's use of data is described in the Google Privacy Policy.

Some providers are outside the European Economic Area. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Cookies and local storage

• lvl_session: keeps you logged in (strictly necessary, up to 7 days). A short-lived cookie also protects the login from forgery.
• ranky-locale: remembers the website language you chose.
• Local storage: remembers whether you prefer a 12-hour or 24-hour clock.

We do not use analytics, advertising or third-party tracking cookies. Fonts are served from our own domain.

6. How long we keep it

• Server data (settings, members, XP, levels): while the bot is in the server. If the bot is removed, all of it is deleted automatically 30 days later. Adding the bot back within 30 days restores it.
• Per-day activity totals: up to 400 days, then deleted automatically.
• Level backups: the last 10 made by admins or before a reset or restore, and the last 7 automatic ones; deleted with the server's data.
• top.gg votes: 90 days. Problem reports: 12 months. Both are then deleted automatically.
• Session cookie: up to 7 days, or until you log out.
• Billing records: as long as tax and accounting laws require.

7. Your rights

Depending on where you live (for example under the GDPR in the EU and UK), you have the right to access, correct or delete your personal data, to restrict or object to its use, to data portability and to complain to your data protection authority. To use these rights, email support@ranky.bot from any address and include your Discord user ID (and the server ID if the request is about one server). We may ask you to confirm the account is yours, for example with a message from it, and we answer within 30 days.

Server managers can delete all of a server's data at once by removing the bot. Note that if you ask us to delete your data while you keep being active in a server that uses Ranky, the bot will start counting your activity again; to stop that, ask a server manager to exclude you with a No-XP role (Premium) or leave the server.

8. Children

The Service follows Discord's age requirements and is not meant for anyone younger than the minimum age to use Discord in their country. We do not knowingly collect more data from children than described above; contact us if you believe we should delete a child's data.

9. Security

Data is sent over HTTPS, session cookies are encrypted and HTTP-only, and access to the database is limited to the Service. No system is perfectly secure, but we take reasonable steps to protect your data and will notify affected users and authorities of a breach where the law requires it.

10. Changes

We may update this policy. The date at the top shows the latest version; for significant changes we will post a notice on the website. See also our Terms of Service.

11. Contact

Individual Entrepreneur Andrii Tyshchenko, Ukraine. Email: support@ranky.bot.