Invite Bot

Legal

Privacy Policy

This policy explains what data Tracker collects, why, and what your choices are. We collect only what the Bot needs to work, and we do not sell your data.

Last updated: 6th November 2026 · Effective: 6th November 2026

1. Who is responsible

The data controller is the independent developer of Tracker, an individual based in the United Kingdom. Contact: support@trackerbot.xyz, or our support server (https://discord.gg/CxTCRJz4hR).

2. What we collect

  • Discord identifiers
    • Data: User, server (guild), channel, role, and message IDs.
    • Purpose: To identify you and your server, and to run commands, roles, and settings.
  • Discaching game data
    • Data: All normal game data expected – e.g. money, hides, finds, and any game profile information.
    • Purpose: To run the Discaching game, badges, and stat bars.
  • Location profile
    • Data: Country and timezone you choose to give us as part of the location profile feature.
    • Purpose: To show times and regional features correctly.
  • Trackables
    • Data: Public and private codes, Geocaching owner username, uploader Discord user ID, and upload time.
    • Purpose: To run the public trackables registry.
  • Verification records
    • Data: Per server: your user ID, the verification request message ID, the Geocaching username you entered, unique verification ID, and status.
    • Purpose: To let servers verify members.
  • Server configuration
    • Data: Moderator and permission roles, log and skullboard channels, feature toggles, verification roles, and code-detection settings.
    • Purpose: To remember how each server set up the Bot.
  • Voting and rewards
    • Data: Vote times, streaks, and totals from Top.gg and Discord Bot List; reward amounts; and reminder preferences.
    • Purpose: To give vote rewards and send reminders.
  • Dashboard login
    • Data: Session ID, Discord OAuth access and refresh tokens, and their expiry.
    • Purpose: To keep you signed in to the website dashboard.

Discaching coordinates, including cache locations and your in-game position, are virtual. We do not collect real-world GPS or device location, and the country and timezone you give us are self-declared. We never ask for or store your Geocaching.com password. We do not ask for payment details or your email address. If you email support, we receive your email address and message so we can reply.

We do not store a general archive of Discord messages. We store only the specific text you enter into the Bot (such as cache descriptions, find logs, review notes, and trackable discovery logs) and the message IDs listed above. The Bot reads messages it can see only to provide features such as code recognition, and does not keep their content. Dashboard OAuth tokens are credentials: they are used only to keep your session working, and we protect them accordingly.

3. How we use data

  • To provide, operate, and improve Tracker's features.
  • To keep the Bot secure, and to detect and prevent abuse, cheating, and spam.
  • To respond to support requests.
  • To comply with legal obligations and Discord's developer rules.

Under UK GDPR, our legal bases are performance of our service to you (providing the features you ask for), our legitimate interests in running and securing the Bot, and, where applicable, legal obligation.

4. What is public

Some data is visible to others by design:

  • Trackables registry and in-game trackables: Entries you add, with your Geocaching username, can be seen by other Tracker users.
  • Caches and logs: Virtual caches you hide, your find logs, and your game statistics and badges can be seen by other players.
  • Skullboard: A message that reaches the skullboard is reposted in your server's skullboard channel, visible to anyone who can see that channel.
  • Verification: The Geocaching username you enter is shown to the server's moderators who review verification requests.
  • Messages sent through the Bot: These appear in the channel as sent by the Bot.

Do not submit anything you do not want others to see.

5. Who we share data with

We do not sell or rent your data, and we do not use it for advertising. We share data only with:

  • Discord: Because the Bot runs on Discord's platform and its API. Discord's own handling of your data is covered by the Discord Privacy Policy.
  • Authorities: If required by law or to protect rights, safety, and security.

We host Tracker ourselves, so your data is stored on infrastructure we control rather than with a third-party hosting company.

6. International transfers

We host Tracker ourselves and store your data in the United Kingdom. Data you send through Discord, and vote information we receive from Top.gg and Discord Bot List, may be processed outside the UK by those services under their own policies.

7. How long we keep data

  • Game account data
    • Data: Game account data, player-created content, virtual locations, inventory, stickers, quests, and voting and reward totals.
    • Retention: Kept permanently, because the game does not reset, unless you ask us to delete it.
  • Location profile
    • Retention: Until you change it or ask us to delete it.
  • Trackables and trackable registry entries
    • Retention: Until removed by you, by us, or on request.
  • Verification records
    • Retention: Until the user requests removal.
  • Server configuration
    • Retention: Until the Bot is removed from the server, then deleted within 30 days.
  • Moderation records
    • Retention: For as long as needed to enforce our Terms.
  • Dashboard sessions and tokens
    • Retention: Until they expire or you sign out.

If you ask us to delete your data, we will erase your game account and related records. We may keep limited records where needed to meet legal duties or to prevent abuse, such as suspension records for blocked users, because we have a legitimate interest in stopping banned users from returning.

8. Security

We use reasonable technical and organisational measures to protect data, including access controls and restricted hosting access. No online service is completely secure, so we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant authorities as the law requires.

9. Children

Tracker is not directed at children under 13, and you must meet Discord's minimum age to use it. We do not knowingly collect data from anyone under 13. If you believe a child has used the Bot, contact us and we will delete the data.

10. Your rights

Under UK GDPR, and similar laws where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data ("right to be forgotten").
  • Restrict or object to our processing.
  • Receive your data in a portable format.
  • Withdraw consent, where we rely on it.

To use any of these rights, email support@trackerbot.xyz from the address linked to your request and include your Discord user ID, or create a support ticket in our support server (https://discord.gg/CxTCRJz4hR). We will respond within one month. Server administrators can also disable features, such as the skullboard, or remove the Bot at any time. If you are unhappy with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

11. Third party links

The Bot may link to other sites, including Geocaching.com. We are not responsible for their content or privacy practices.

12. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, may announce them in our support server or through the Bot.

13. Contact

Privacy questions or requests: support@trackerbot.xyz, or in our support server (https://discord.gg/CxTCRJz4hR).