Privacy Policy

Last updated: November 1, 2026

This policy explains what LoL Cards, a free card collecting bot for Discord, stores about you, why, and how to have it deleted. LoL Cards is developed and run by an independent developer; in this policy "we" means the developer of LoL Cards.

1. What we collect

• Discord identifiers: your user ID, username and display name, and the IDs of the servers where you use the bot (used for the server leaderboards).
• Game data: your collection (cards and copies), mastery, currencies, daily streak, gacha pulls, albums, icons, emotes and profile settings, including the bio you write yourself, your profile color and style and your featured card, and when you last got a vote reward on each bot list.
• Action history: each game action you take (rolls, purchases, crafting, fusions, trades, rewards), with its time, server ID and result. It prevents duplicated rewards and cheating and helps us with support.
• Server settings: the bot language chosen by a server's administrators, saved with the server ID.
• Moderation records: if you are blocked from the bot, the reason, the date and who blocked you.
• Operational logs: the commands you use (name and options, including people you mention in a command such as /trade or /profile), your username, the server name, timing and errors. These go to a private Discord server that only the developer can see, and to the console of the machine that runs the bot. Access tokens and other secrets are removed from the logs.

2. What we do not collect

LoL Cards does not read the messages in your servers, does not store direct messages (a direct message only gets an automatic reply), and does not collect your email address, IP address, payment data, voice data or server member lists. Your Discord avatar is shown from Discord's own link and is not stored.

3. How we use it

• to run the game and keep your progress;
• to show leaderboards and profiles: your Discord name and game stats appear in /ranking, /profile and /collection to other people in the servers where the bot is used, and in the global leaderboard;
• to prevent cheating, duplicated rewards and abuse;
• to find and fix errors and to improve the bot.

We do not sell your data, use it for advertising or share it for marketing.

4. Legal basis

We process this data to provide the service you ask for when you use the bot, and on our legitimate interest in keeping it secure, fair and working. This applies to Brazil's General Data Protection Law (LGPD) and, for people in the European Union or the United Kingdom, to the GDPR.

5. Who else handles it

• Discord, where the bot runs and which delivers its messages (Discord's Privacy Policy);
• MongoDB Atlas (MongoDB, Inc.), which hosts the database (MongoDB's Privacy Policy);
• Hostinger, which hosts the machine running the bot, in Brazil;
• Discord Bot List (discordbotlist.com) and top.gg, bot list sites: if you vote for LoL Cards there, the site tells the bot your Discord user ID and when you voted, so the bot can give your reward with /vote. The bot also tells these sites how many servers it is in and which commands it has, with no personal data.

These services may store data outside your country, including outside Brazil. Card images come from CommunityDragon; no personal data is sent to it.

6. How long we keep it

We keep your data while you use LoL Cards and until you ask us to delete it. Moderation records may be kept after a deletion to stop blocked players from coming back, and copies in backups disappear as the backups are replaced. If LoL Cards shuts down, its data will be deleted.

7. Your rights

You can ask to access, correct, export or delete your data, and to know who it is shared with. Send your request with your Discord user ID to lolcards.suporte@gmail.com. We will answer within 15 days. Deleting your data removes your collection, progress and history for good. Server administrators can ask us to delete the settings of their server, and removing the bot from a server stops new data from that server.

8. Security

Only the developer has access to the data. The database is protected by a password and an IP allow list, and connections to it are encrypted. No system is perfectly secure, but we work to protect your data.

9. Children

LoL Cards follows Discord's minimum age (13, or older where the law requires it). We do not knowingly keep data from younger children. If you are a parent or guardian and believe your child uses the bot, contact us and we will delete their data.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version. If you keep using LoL Cards after a change, the new version applies.

11. Contact

Questions or requests about your privacy: lolcards.suporte@gmail.com.