Privacy Policy
Last updated: September 2026
1. What We Collect
When you log in to the website with Discord, Glitch stores:
- Your Discord user ID (a numeric identifier)
- Your Discord username (at the time you log in)
- The date and time you logged in
During normal bot use, we also store gameplay data associated with your Discord user ID: cards you own, currency balances, wishlist entries, album contents, trades, and other interaction history.
If you boost the Glitch community server, we store that you are a booster and the date your boost started, so we can give you booster perks. This is removed automatically when you stop boosting or leave the server.
If you buy something, we also store a record of the order: your Discord user ID, what was bought, the amount, and the reference Stripe gives us for the payment. We keep these as proof of purchase and for accounting. Stripe processes the payment itself as an independent controller — see Stripe's Privacy Policy.
2. How Glitch Uses Discord Data
- Message content: Glitch reads messages only to recognise its own commands (messages starting with "g"), and, while you are in an active trade or battle, to read the offer or wager you type in that channel. Everything else is ignored. Message content is never stored, logged, shared, or used to train any AI or machine-learning model.
- Server members: Glitch checks server membership to look up players you mention in commands, to check booster status for booster perks, and to avoid pinging people about wishlist drops after they have left a server. Only your user ID and, for boosters, your boost date are stored.
3. What We Do NOT Collect
- Your email address, password, or any Discord account credentials
- The content of your Discord messages
- Card numbers or any other payment credentials — these are entered on Stripe's checkout and never reach us
- Location data
4. How We Use Your Data
Your data is used solely to operate and improve the Glitch bot and website. We do not sell, share, or rent your data to any third parties.
5. Data Retention and Deletion
Your data is kept for as long as you play Glitch, because your collection and progress are part of the game. You can ask us to delete your data at any time: join the official Discord support server and open a ticket. We delete it within 30 days, including from our backups.
6. Security
Your data is stored in a PostgreSQL database on our own server hosted by Hetzner in Germany. The database and its backups are encrypted at rest (LUKS2, AES-256), and connections to the website use HTTPS. We take reasonable measures to protect your data, though no system is completely immune to breaches.
7. Third Parties
- Discord — login through Discord OAuth2. See Discord's Privacy Policy.
- Stripe — payment processing (see section 1).
- Sentry — error reporting. When something breaks, a technical error report is sent to Sentry. Reports are not linked to your account, but may contain an ID that appears in the error details. They never include message content. See Sentry's Privacy Policy.
- Top.gg — if you vote for Glitch on top.gg, top.gg tells us your Discord user ID so we can give you the vote reward.
- Hetzner — hosts our server in Germany.
8. Your Rights
If you are in the EU/EEA, you have rights under the GDPR, including the right to access, correct, or delete your personal data. Open a ticket in the official Discord support server to exercise these rights.
9. Contact
For privacy-related questions, reach out via the official Discord support server: discord.gg/glitch-bot.