🗓️ Last updated: 12 July 2026
This policy covers the Pogxyz bot, including its event and economy features and the pogxyzbot.com website. We collect only what the features genuinely need — nothing more.
The controller is the operator of the PogXyz project (an individual, Czech Republic). The fastest way to reach us about privacy is our support Discord server.
When you sign in via Discord OAuth2 the website receives your Discord ID, username, avatar and server list — solely to display the dashboard and verify permissions. This data lives in an encrypted session cookie (JWT) and is not stored in our database. The site also uses Cloudflare Turnstile for bot protection.
If you submit a staff application on the /application page, we additionally store:
Applications are visible only to the bot's staff team. Decided applications are deleted regularly by senior staff, and you can request deletion of your application at any time on the support server.
Data is stored in an Upstash Redis database and with our hosting partners (PebbleHost — bots, Vercel — website). Access is protected by secrets known only to the operator. Retention:
The website uses only technical cookies: the sign-in session, your language choice and Cloudflare Turnstile verification. No tracking or advertising cookies, no analytics profiling.
We never sell data. Data is processed by these services solely to run the project:
Some providers operate outside the EU (USA). Transfers rely on the EU Standard Contractual Clauses (SCC) or an adequacy decision (EU–US Data Privacy Framework).
We process data under Art. 6(1)(b) GDPR (providing the service you requested by adding the bot or signing in) and Art. 6(1)(f) (legitimate interest in security, abuse prevention and operational logs). Under GDPR you have the right to:
To exercise any right, contact us on the support server — we respond without undue delay, at the latest within 30 days. We perform no automated decision-making or profiling, and the service is not directed at children under 13.