This policy explains what Groupbuys (“we” or “us”) collects through groupbuys.io, the Groupbuys Discord bot and the Groupbuys Discord server, and what we do with it. It goes with our Terms of Service.

What we collect

When you sign in with Discord. Your Discord user ID, username, display name and avatar, and the servers you own, which we pick out of the server list Discord gives us and don’t keep the rest. We ask Discord for the identify, guilds and guilds.join permissions. We don’t ask for your email address or password, and we can’t read your DMs.

A grant to add you to servers. Unless you turn it off, we store an encrypted Discord access grant. It lets us add you to the Groupbuys Discord server, and add you back to it or to servers it partners with later.

If you list a server. The server’s ID, name, icon, banner, member and online counts, invite link, and the channels and roles needed for the bot to work, plus your profile, tags and ads.

Partnerships and giveaways. The requests, terms and counters you send and receive, scheduled posts, and who entered which giveaway.

In the Groupbuys Discord server. For Groupbuys Tokens: your user ID, username, balance and a history of what you earned and spent, your quest submissions, who invited you, when you joined, how old your account is, and whether you boost. The bot checks the length of messages in the chat channels to skip very short ones, but doesn’t store what they say.

Technical data. Our hosting and security providers process IP addresses and request details as part of serving the site, and we keep server logs to run and debug it.

Cookies

We use only the cookies needed to run the site: one that keeps you signed in for up to 30 days, and short-lived ones that secure the sign-in itself. We don’t use advertising or analytics cookies.

How we use it

• To sign you in, show which servers you own, and run listings, requests, ads and giveaways.
• To send you Discord DMs about your requests and partnerships.
• To add you to servers as described above.
• To run Groupbuys Tokens, including catching token farming and other abuse.
• To keep the Service secure, fix problems and enforce our terms.

Who sees it

We don’t sell your personal information. It’s shared only like this:

• The public: listed server profiles and ads appear in the directory and are posted to partner servers.
• Other owners: those you send requests to or receive them from see the details of that request.
• Server members: token balances can appear on leaderboards in the Groupbuys Discord server.
• Service providers: Discord, which the Service is built on; Cloudflare, for network security and delivery; and Contabo, for hosting.
• Legal reasons: when the law requires it, to protect people or the Service, or as part of a sale or transfer of the Service.

Your data may be processed in countries other than yours, including where these providers operate.

How long we keep it

Sign-in sessions end after 30 days, and we store only a hash of the session token. Everything else is kept while your account or listing is in use, or until you ask us to delete it. We may keep some records for longer where needed to prevent abuse or meet legal duties, such as token history and bans.

Your choices and rights

• Stop being added to servers: turn it off in your account menu. We delete the grant and revoke it at Discord.
• Disconnect: remove the Groupbuys app from Discord under User Settings → Authorized Apps, which ends the grant.
• Remove a server: unlist it from your dashboard, or remove the bot from it.
• Access, correct or delete your data: ask us using the contact below. Depending on where you live, you may also have the right to object to or limit how we use your data, to get a copy of it, and to complain to your local data protection authority.

Security

We encrypt stored Discord grants and hash session tokens. No system is perfectly secure, so we can’t guarantee your data never will be exposed.

Children

The Service isn’t for children under 13, or under the minimum age to use Discord where they live. If you believe a child has given us their information, tell us and we’ll delete it.

Changes to this policy

We may update this policy and will change the date at the top when we do. For significant changes we’ll also give notice on the site or in the Groupbuys Discord server.

Contact

For questions or data requests, join the Groupbuys Discord server and message a staff member.