Privacy Policy

Last updated July 17, 2026.

1. What this policy covers

This Privacy Policy explains what data LootCord ("we", "us") collects when you use lootcord.win or the LootCord Discord bot, why we collect it, and how it's stored. It applies to players, quest participants, and advertisers using our platform.

2. Data we collect

  • Discord account data: your Discord ID, username, avatar, and email address, obtained via Discord OAuth ("identify email" scope) when you sign in.
  • Server join authorization: if you use a join or stay quest, we request Discord's separate guilds.join permission with your explicit, per-quest consent. The resulting access and refresh tokens are encrypted at rest and used only to add you to the specific server you consented to join.
  • Quest & activity data: which quests you've joined, message counts used to verify quest checkpoints, and how long you've remained a member of a quest server, collected via the LootCord bot's presence in that server.
  • Balances & transaction history: your ticket, premium ticket, and cash balances, plus a history of how they were earned or spent (quests, referrals, giveaway entries, conversions, cashouts).
  • Payout details: information you provide to receive a cashout, such as a PayPal email or crypto wallet address. We do not store full payment card numbers.
  • Referral data: your referral code and which users signed up through your referral link.
  • Webhook configuration: Discord webhook URLs and server IDs you add to receive notifications, if you choose to set these up.
  • Advertiser campaign data: if you run an ad campaign, the destination URL, creative assets, target server ID, and performance metrics (impressions, clicks, conversions) for that campaign.

3. How we use this data

We use this data to operate the core functions of LootCord: authenticating your account, tracking and paying out quest and giveaway rewards, processing cashouts, sending you notifications you've opted into, preventing fraud and abuse (such as multiple-account detection), and showing advertisers accurate campaign performance. We do not sell your personal data to third parties.

4. Data shared with Discord

The LootCord bot reads standard Discord events (member joins/leaves, messages) in servers where it is installed, in order to verify quest progress. This is subject to Discord's own Terms of Service and Developer Policy in addition to this policy. We only request the guilds.join permission for a specific server after you explicitly consent to joining that server through a quest. We do not use it to add you to servers you haven't agreed to join.

5. Data retention

We retain account and transaction data for as long as your account is active, and as needed to comply with legal, tax, and anti-fraud obligations after account closure. You can request deletion of your account data by contacting us (see Section 8), though some transaction records may be retained where required by law even after a deletion request.

6. Data security

OAuth tokens tied to the guilds.join permission are encrypted at rest. Access to production data is restricted to those who need it to operate LootCord. No system is perfectly secure, and we cannot guarantee absolute security of data transmitted to or stored by LootCord.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete the personal data we hold about you, and to withdraw consent for the guilds.join permission at any time by revoking LootCord's authorization in your Discord account settings. Revoking this permission does not remove you from servers you have already joined. It only prevents future joins through that authorization.

8. Contact

For privacy questions or data requests, reach us via our Discord server.

9. Changes to this policy

We may update this Privacy Policy as LootCord's features change. Material changes will be reflected by updating the date below.

See also our Terms of Service.