This Privacy Policy explains how Xpriella collects, uses, stores, and protects information when you use the Xpriella Discord bot, web dashboard, or related services.
Xpriella is an independent third-party service and is not affiliated with or endorsed by Discord Inc.
Information We Collect
Depending on the features enabled in a Discord server, Xpriella may process:
- Discord user IDs, usernames, display names, avatars, roles, permissions, and guild membership information.
- Guild, channel, role, message, and task identifiers.
- Message text, attachments, embeds, polls, and related message data when needed for XP, task validation, achievements, moderation, or administrator-enabled logging and archiving.
- XP totals, levels, achievements, task submissions, validation results, rewards, and moderation actions.
- Audit logs, event logs, feedback, feedback metadata, and support requests.
- Dashboard login, OAuth, session, security, and account-access information.
- For guilds that opt in to account-safety alerts, per-guild/user last presence, last observed guild interaction, and last alert timestamps, plus minimal alert review and delivery metadata. Xpriella does not store a presence or interaction timeline for this feature.
- Voice channel audio, when a server administrator requests recording for the purpose of recording events.
Xpriella does not use Discord message content to train artificial intelligence or machine-learning models.
How We Use Information
We use information to:
- Operate XP, leveling, tasks, achievements, leaderboards, and rewards.
- Evaluate whether messages or submissions qualify for XP, tasks, or achievements.
- Apply administrator-configured moderation and anti-abuse rules.
- Grant or remove roles and role-based access.
- Provide audit logs, reports, and optional message archiving.
- Record voice channels for events when requested by a server administrator.
- Authenticate dashboard users and manage permissions.
- Secure, maintain, troubleshoot, and improve the Service.
- Respond to feedback, support requests, and privacy requests.
- Provide feedback status and reply updates in the dashboard and, when the submitter enables it, by Discord direct message.
- Provide administrator-enabled inactivity/account-safety alerts for human moderator review; these alerts do not automatically punish users.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell Discord API Data, use it for advertising, or disclose it to data brokers.
Message Content and Privileged Intents
Xpriella uses Discord’s Message Content intent because its core features must evaluate ordinary guild messages, attachments, embeds, and other message fields for XP eligibility, task validation, achievements, moderation, duplicate detection, and abuse prevention.
Where possible, message content is processed without permanently storing the full message. Content may be retained when required for task evidence, validation polls, moderation records, audit logs, or administrator-enabled message archiving.
Xpriella uses Discord’s Guild Members intent to maintain accurate progression records, manage roles and rewards, process member joins and departures, and control access to guild-specific features.
Guild Presences Intent
Xpriella uses Discord’s Guild Presences intent to read member presence status (for example, online, idle, do-not-disturb, or offline) for rank-card decorations and, only in guilds whose administrators opt in, to update a coarse last-presence timestamp for inactivity/account-safety alerts.
The alert feature combines only the most recent administrator-selected signals, applies a per-user cooldown, and requests human moderator review without automatic punishment. Presence information is not retained as a permanent presence history.
Xpriella does not access private direct messages between Discord users.
Public and Administrative Visibility
Within a guild, rank cards, leaderboards, task validation polls, and administrative tools may display:
- Usernames, display names, and avatars.
- XP, levels, achievements, and rankings.
- Task submissions, validation results, or proof details.
- Moderation actions, audit logs, or guild activity information.
Visibility depends on guild settings, Discord permissions, and the feature being used.
Data Sharing
We may share or provide access to information only as necessary with:
- Authorized guild administrators and moderators.
- The Xpriella operator and authorized support personnel.
- Authorities or other parties where required by law or necessary to protect users, Discord, Xpriella, or others.
Storage and Security
Xpriella uses MariaDB for database storage and may use Redis for caching.
We use reasonable safeguards, including role-based access controls, restricted administrative access, secure connections, and encryption of OAuth tokens.
Xpriella may create operator-controlled encrypted backups for disaster recovery.
No security system is completely secure, and we cannot guarantee absolute security. If a security incident affects personal information, we will investigate and notify affected users, Discord, or authorities where required.
Retention and Deletion
We retain information only while it is needed to provide the Service, maintain security, resolve disputes, or comply with legal obligations.
- Guild settings, XP, levels, achievements, and task data may be retained while Xpriella remains in the guild.
- Message content used only for evaluation is not permanently retained unless required for a configured feature.
- Logs, task evidence, moderation records, message archives, and voice recordings are retained for configured or operationally defined periods.
- OAuth tokens and session data are retained only while required for dashboard access.
- Feedback and related notification metadata are retained for configured or operationally defined periods.
- Opt-in account-safety last-activity timestamps and minimal alert review metadata are retained for the guild-configured period, then removed by a scheduled purge.
- Deleted data may remain temporarily in automated or manual backups until the owner-configured backup-retention period expires.
- Retention is handled through scheduled purge jobs. Data already deleted by a completed purge cannot be recovered through Xpriella, although deleted data may remain temporarily in backups until normal backup expiry.
We may also delete data when requested by Discord or when it is no longer necessary for Xpriella’s approved functionality.
Your Choices and Rights
Users may:
- Use the authenticated dashboard to preview and export eligible personal information and to submit guild-scoped or global deletion requests. Deletion requests require recent re-authentication, exact typed confirmation, and a cooling-off period during which they can be cancelled.
- Self-service deletion applies only to the requester’s eligible user-linked data. Xpriella may retain or pseudonymize records needed for guild administration, other users, security, moderation, audit and validation integrity, dispute resolution, or legal obligations.
- Contact us using the details below for correction requests, questions, or rights that cannot be completed through the dashboard.
- Manage browser cookie settings when using the dashboard.
- Enable or disable Discord direct-message updates for submitted feedback.
Cookies
The dashboard uses HTTP-only authentication and session cookies to keep authorized users signed in and protect account access.
We do not use third-party advertising cookies.
Age Restriction
Xpriella is intended only for users who are at least 18 years old and who meet Discord’s minimum age requirement in their country.
Guild administrators must not knowingly enable Xpriella for users under 18. If we learn that an underage individual has used the Service, we may suspend access and delete their information where appropriate.
International Processing
Where required, we use appropriate safeguards for international transfers of personal information.
Policy Updates
We may update this Privacy Policy when the Service, our practices, legal requirements, or Discord’s policies change. We will revise the “Last Updated” date when changes are made.
Third-party resources
Public pages on dev.xpriella.com may load fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com) to render the site typography. No advertising cookies are set by this font request.
Contact
- Email: hypnobot@hypnovoid.com
- Website: xpriella.com
- Country or Region: Canada