The short version: Xolith stores your Discord ID and your game progress so it can follow you to every server. It never reads your messages or listens to voice. You can delete everything at any time with /deletemydata, or ask us for a copy.
1. Who runs Xolith
Xolith ("the bot", "we", "us") is run by xol, an independent developer (xol.gg). xol decides how your data is used (under the EU General Data Protection Regulation, GDPR, that makes them the "controller"). This policy covers the bot and this website, xolith.app.
Contact for anything about your data: support@xolith.app, or our Discord server.
2. What we store
About you (saved with your Discord user ID)
- Your Discord user ID. We do not save your username, display name or avatar; the bot reads them from Discord when it needs to show them.
- Your game progress: coins, bank, XP and levels, prestige, items, businesses, stocks, pets, your hero, gear, gems, potions, arena, tower and dungeon results, clan, marriage, achievements, titles, cosmetics, quests, statistics, battle pass, lottery tickets, seasonal event points and purchases, promo codes you used, and gear-market sales and purchases.
- The date you first used the bot.
- Which servers you use Xolith on (for "only this server" leaderboards).
- Reminders you create (text, channel and time; for "Remind me about this" also a link to the message and the start of its text).
- Music playlists you save (names and songs).
- Your AFK reason, if you set one.
- Giveaways you joined, and giveaways you started as a server admin.
- A daily total of your coins, used to spot cheating.
- Which bot announcements you have already seen.
- If you are blocked from the bot: your ID, the reason and the date.
About servers (saved with the server ID)
The welcome channel, message and auto-role, the DJ role, giveaways, and whether the server has Premium.
What we never collect
- The content of your messages. Xolith doesn't have Discord's "Message Content" permission; for chat XP it only counts that a message was sent.
- Your voice. Xolith never listens to or records voice channels; it only plays music.
- Your email, IP address or payment details.
Only kept in memory, never saved
How many /ask questions you asked today (for the daily limit), the music queue and dungeon parties.
Server Members Intent
Xolith uses Discord's "member joined the server" event only to send the welcome message and give the auto-role that the server's admins set up. Nothing about the new member is saved.
3. Why we use it, and the legal basis
| What | Why | Legal basis (GDPR art. 6) |
|---|---|---|
| Game progress, reminders, playlists, AFK, giveaways, server settings | To give you the features you ask for when you use a command | Providing the service you use (contract, 6(1)(b)) |
/ask questions sent to DeepSeek |
Writing the answer you asked for | Providing the service you use (contract, 6(1)(b)) |
| Servers you use the bot on | "Only this server" leaderboards | Legitimate interest (6(1)(f)) |
| Daily coin totals, blocks, the developer's log channel, error logs | Keeping the game fair, stopping cheating and abuse, fixing bugs | Legitimate interest (6(1)(f)) |
| Backups | Not losing everyone's progress if something breaks | Legitimate interest (6(1)(f)) |
We don't use your data for ads, we don't sell it and we don't build profiles about you. We don't rely on consent for anything, so there's no consent to withdraw; you can always stop using the bot and run /deletemydata. You can object to anything based on legitimate interest (see "Your rights").
4. Other services and where your data goes
- Hosting: the bot and its database run at HytHost, in Chișinău, Moldova. Moldova is outside the EU.
- This website is hosted in the USA.
- Discord (USA) runs the platform; Discord's own privacy policy applies to Discord itself.
- DeepSeek (China): only the text of the questions you ask with
/ask, so it can write the answer. China is outside the EU, so don't put personal information in/askquestions. Xolith does not save your questions or the answers. - YouTube, SoundCloud and Spotify: your music searches and links, to find and play the songs.
- GamerPower and Open Trivia DB: we only read public lists from them; nothing about you is sent.
These services have their own privacy policies.
5. How long we keep it
| Data | Kept |
|---|---|
| Game progress, playlists, and everything else in your profile | Until you delete it with /deletemydata (or ask us) |
| Reminders | Until they are sent or cancelled |
| Servers you use the bot on, AFK, giveaways you joined | Until you use /deletemydata, or Xolith leaves that server |
| Server settings and giveaways | Until the giveaway is deleted or Xolith leaves the server |
| Daily coin totals | 8 days |
| The developer's private log channel (rare drops, prizes, errors) | 30 days, then the bot deletes them automatically |
| Blocks | As long as the block lasts (also after /deletemydata, so a block can't be dodged) |
| Backups | Automatic backups are replaced after 7 days; the last few backups made by hand are kept until newer ones replace them |
6. Your rights
You have the right to:
- Access: get a copy of the data we have about you;
- Portability: get it as a file a computer can read (we send a JSON file);
- Erasure ("right to be forgotten"): delete it yourself right away with
/deletemydata, or ask us; - Rectification: have wrong data corrected;
- Restriction and objection: ask us to limit or stop processing based on legitimate interest.
How to ask: email support@xolith.app or message us on our Discord server. So nobody can get someone else's data, we'll check that the request comes from the Discord account it's about (for example, with a message from that account). We answer within one month, for free.
Complaints: if you think we handle your data wrongly, you can complain to the data protection authority in your country (for example ANSPDCP in Romania or CNIL in France). Please contact us first too, so we can fix it.
7. The website
xolith.app has no cookies, no analytics and no ads. Our web host keeps standard access logs (IP address, page, time) for security, for a short time.
8. Age
You must meet the minimum age in Discord's Terms of Service for your country. If you're under 16, check with a parent before using /ask.
9. Changes to this policy
If we change this policy, we'll update it on this page and change the date at the top.
10. Contact
Email support@xolith.app, or ask on our Discord server.