Privacy Policy

Who is responsible for your data (data controller)

This Platform, its websites (including px-bot.com and any site running on it), and its Discord bots (documented individually at px-bot.com/bots) are operated by:

Jarne Groffi
Spaansebrugstraat 5
3800 Sint-Truiden, Belgium

Contact for any privacy question or request: see the Contact section below.

What we collect

When you log in with Discord, we receive and store:

• Your Discord ID, username, display name, and avatar.
• Your verified Discord email address, used only to send your payment receipt / invoice from our payment provider.
• Which Discord server(s) you're a member of, to confirm access to a given site.

If you link your ARK: Survival Ascended account, we also store:

• In-game stats parsed from your server's logs — kills, deaths, playtime, tribe membership, structures destroyed, and similar activity used to build leaderboards.
• Shop purchase and kit claim history, tied to your Discord ID.

If you make a purchase:

• Transaction records (amount, item, timestamp). Full payment details (card numbers, bank info) are handled entirely by our payment processors — Stripe, PayPal, or Tip4Serv — and never pass through or get stored on our own servers.

If you open a support ticket:

• The content of your messages inside that ticket channel, used to answer your request (including by an AI assistant — see "Who we share data with" below).

Legal basis for processing

We only process your data where we have a valid legal basis under the GDPR:

• Performance of a contract — showing your leaderboard rank/stats, delivering purchased items, running the shop and support-ticket features you actively use.
• Legitimate interest — securing the Platform against abuse (e.g. dupe/exploit detection, fraud prevention on payments), and operating community-management tools for a server's own admins.
• Legal obligation — retaining transaction records where accounting or tax law requires it.

We do not process any data on the basis of consent-driven advertising or profiling.

How we use it

• To show your leaderboard rank, stats, and shop/kit history.
• To deliver purchased items to your in-game character via RCON.
• To confirm you're a member of the right Discord server for a given site.
• To let a site's admins manage their own community (shop config, kit claims, support).
• To answer support tickets, including via an AI assistant.
• To detect and prevent abuse of the shop or payment systems.

Who we share data with (subprocessors)

We don't sell your data. We share it only with the specific outside services needed to run the Platform, each acting as our processor for that narrow purpose:

• Discord — authentication (login) and delivering bot functionality.
• Stripe, PayPal, Tip4Serv — processing payments you make. They receive your payment details directly; we never see or store card/bank numbers.
• OpenAI — generating AI-assisted replies inside support tickets. Only the content of that specific ticket conversation is sent, solely to produce a live response (never used to train any model — see px-bot.com/bots for detail).
• Cloudflare — content delivery and protection against malicious traffic (DDoS/bot filtering) for our websites.

International data transfers

Most of your data stays within the EU on our own servers. One exception: ticket message content sent to OpenAI (a US company) to generate an AI reply. This transfer is made under OpenAI's standard contractual clauses, the EU-approved safeguard for this kind of transfer.

Cookies

We use a single session cookie to keep you logged in after Discord authentication, and cookies set by our payment processors (e.g. Stripe) while you're completing a purchase, for fraud prevention. These are all strictly necessary to provide the feature you're actively using — we don't use advertising or cross-site tracking cookies, and we don't run third-party analytics.

Security

We restrict access to our systems and databases to authorized personnel only, and take reasonable technical and organizational measures to protect your data against unauthorized access. We're actively working to strengthen these measures further, including encryption of stored data at rest.

Data retention

We keep your data for as long as your account is active on a given site. Transaction records may be retained longer than other data where accounting, tax, or fraud-prevention law requires it. If you want your data deleted, see "Your rights" below — some data (like completed transaction records) may need to be retained even after a deletion request for those same legal reasons.

Your rights

Under the GDPR, you have the right to:

• Access the data we hold about you.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Port your data to another service, where technically feasible.
• Withdraw consent at any time, for any processing based on consent.
• Lodge a complaint with your local data protection authority — in Belgium, the Gegevensbeschermingsautoriteit / Autorité de protection des données.

To exercise any of these rights, contact us (see below). We aim to respond within one month, as required by the GDPR.

Children

The Platform is not directed at children under 13, consistent with Discord's own terms. We don't knowingly collect data from anyone under that age.

Multi-site note

If a Server Owner runs a site through the Platform, they can see activity data (leaderboard stats, shop purchases) for their own community's members, since that's the whole point of the dashboard they're subscribing for. They do not have access to your Discord login credentials, payment card details, or any other site's data.

Changes

We may update this policy as the Platform evolves. Meaningful changes will be reflected here with an updated effective date.

Contact

Questions about your data, or want to exercise any of the rights above? Reach us on Discord: https://discord.gg/EMYWJJdnw4 or by post at the address in "Who is responsible for your data" above.