Privacy Policy

Effective July 11, 2026

This policy describes what the worldboss Discord bot (“worldboss”, “the bot”, “we”) receives, what it stores, and what it can never see. It applies to the bot and to this website. The short version: worldboss stores the game and nothing else, and it is architecturally unable to read your conversations.

What worldboss receives

worldboss uses Discord's HTTP interactions. Discord sends the bot a signed payload only when someone uses one of its slash commands or buttons. Each payload includes:

What worldboss cannot see

The bot has no gateway (websocket) connection to Discord, so it is never sent channel messages. This is not a policy choice that could quietly change — it is how the bot is built. worldboss cannot read your chat, your DMs, your voice activity, or your presence. It also never receives your email address, real name, or payment information; there is nothing to buy.

What worldboss stores

To run the game, worldboss keeps per-server game state keyed to Discord IDs:

All of this is scoped to the server it happened in. Data is stored on Cloudflare's infrastructure (Durable Objects, D1, and R2), which is the only third party involved besides Discord itself. Periodic backups are kept for disaster recovery and are rotated out over time.

How data is used

To run the game. That is the whole list. worldboss does not sell data, share it with third parties beyond the infrastructure named above, use it for advertising, or use it to train anything.

Retention and deletion

Game state is kept while the bot is installed in a server so that long-running systems (weekly boss sizing, trophies, the Valor ledger) work. If you want your data removed — as a player or as a server admin — open an issue on the GitHub repository with the relevant Discord user ID or server ID, and it will be deleted from live storage, with backups aging out on their normal rotation.

Children

worldboss is available only through Discord and is intended for users who meet Discord's minimum age requirement (13, or higher where local law requires). It is not directed at children, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, the new version will be posted at this address with an updated effective date. Meaningful changes will be called out in the project's release notes.

Contact

Questions or requests: open an issue on the GitHub repository.