Privacy Policy

dbotyy connects a Discord server to a YouTube channel's membership program, can show live server-statistic voice channels, and runs mini-games with XP and a leaderboard. To do that, it accesses:

• The channel owner's YouTube membership list (via Google's OAuth), to know who is currently an active member and at what tier.
• Each linked member's YouTube channel ID and Discord user ID, to match them against that list.
• For server counters (optional, admin-enabled): aggregate counts only — total member count, bot count, server boosts, and how many members currently have a non-offline status. These counts are computed live and only the resulting number is ever stored (as a channel name); no per-member presence or activity data is retained.
• For the web dashboard login: your Discord username, avatar, and which servers you have Manage Server permission on (via Discord's own OAuth), only to show you servers you can configure.
• For games (optional, admin-enabled): the bot reads messages only in the channels an admin has set up for Counting, Kaladont and Hangman, to check each move. Message text is never stored — only the outcome. Per server, it stores each player's Discord user ID with their XP, wins/losses/games played per game, and the last game played; for Wordle, that day's guesses (replaced the next day). Custom Istina ili izazov prompts exist only in memory while that game is running.

How this data is used

Solely to provide the bot's features: keeping Discord roles in sync with active YouTube memberships, showing server counters, and running games with their XP, leaderboard and stats. It is never used for advertising, profiling, AI/model training, or any other purpose.

Who this data is shared with

Nobody. It is never sold, rented, or transferred to any third party, data broker, or advertiser.

How this data is protected

All data in transit (between the bot, Discord, Google, and its database) is encrypted via HTTPS/TLS. The YouTube refresh token — the one credential that would let someone else read a channel's membership list if exposed — is additionally encrypted at rest with AES-256-GCM before being stored, using a key only the bot's operator holds. The database itself is access-controlled and reachable only by the bot using a private authentication token.

Retention and deletion

The channel owner's link and a member's link are both kept only until removed. A member can unlink at any time by revoking access at myaccount.google.com/permissions (their Discord role is removed on the next sync afterward). The channel owner can unlink from /setup or the web dashboard at any time, which deletes the stored refresh token immediately. If the bot is removed from a server, that server's linked data — including all XP and game stats — is deleted. Web dashboard login data isn't retained at all beyond the session cookie described above. To have your own XP and game stats deleted, contact us below.

Questions or a data deletion request: support@dbotyy.com